Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
File: Ze3JFheq3wwsx_H115bb237YWQ0.mft (raw, json)
Hash identifier: nVuQwdGnR6NkdC8nA33AKLJmM78lgd1iY1OSpbsl3Xw=
Subject key identifier: 86:F2:93:45:25:AB:93:7B:35:C2:05:B0:4D:78:38:51:A4:54:F3:E1
Authority key identifier: 65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
Certificate issuer: /CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Certificate serial: 0194BCE06EBA4CB8C852FBF2387CE07F81CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
Manifest number: 03F3
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: Ze3JFheq3wwsx_H115bb237YWQ0.crl (hash: XtzjcQjJK+Mk1AJDs0sO/88GiTFsaz/GKvxMVtSd400=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6e:ba:4c:b8:c8:52:fb:f2:38:7c:e0:7f:81:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=86f2934525ab937b35c205b04d783851a454f3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:3f:b2:3a:c8:89:6c:e7:b3:b8:a0:8c:06:
8c:9f:5d:18:22:c3:50:9a:7b:f7:3d:7f:93:19:76:
30:94:11:0b:30:ba:74:ea:bd:14:8d:19:5a:25:79:
0c:bb:fe:a8:97:39:08:7d:50:7e:cf:ae:3a:3d:b9:
93:dc:0a:e5:2c:88:ea:b8:4c:f7:04:12:a0:2d:62:
b9:9b:e3:ef:be:15:8a:58:c9:a9:b8:8b:77:44:ee:
bd:60:0f:c7:54:8d:2c:97:1e:f0:32:7f:37:c3:a1:
97:85:16:bc:b0:8a:39:29:bd:5b:e6:cc:b3:0b:5e:
0c:fb:cb:de:e5:8b:dd:43:d2:dd:46:16:5c:0f:4d:
48:a8:20:f4:e5:40:52:e5:09:0a:16:1a:32:7c:73:
13:fe:e3:99:f9:2e:66:79:a5:28:a3:e5:52:59:90:
c3:64:f2:8d:cb:8f:86:71:8d:66:ef:b7:b7:ae:5f:
32:de:ae:f5:45:1c:97:41:67:14:6e:6c:c0:af:35:
b3:6b:fd:eb:15:32:b4:e9:3a:fb:5d:f6:26:41:82:
92:45:3a:0d:b0:d3:ff:cd:a8:ac:43:a8:ff:e5:80:
93:a4:38:a5:7f:83:bc:4e:05:09:a0:e5:ef:bc:a1:
54:c9:a4:a8:73:c1:51:ae:81:dc:ec:d9:45:b0:c3:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F2:93:45:25:AB:93:7B:35:C2:05:B0:4D:78:38:51:A4:54:F3:E1
X509v3 Authority Key Identifier:
keyid:65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:03:e3:f6:21:bd:e1:5c:9d:41:f4:80:3f:4f:b1:f8:b1:e9:
7c:91:81:6c:d2:79:7c:5c:d2:9c:69:fc:27:c3:d9:a4:bc:cc:
a6:9c:b1:b9:bc:87:2d:c4:82:70:24:83:e3:16:13:2a:f0:fb:
da:75:53:30:6a:cc:bc:9f:68:9c:1b:79:95:6a:54:cb:18:ca:
7e:6a:93:02:1b:07:4e:c0:07:6f:96:b7:fd:a4:89:70:66:3d:
f7:91:1e:9f:54:bc:fa:66:3d:3b:dc:70:b0:06:a8:85:e4:54:
a9:6a:2a:43:c1:68:df:55:19:37:b4:db:36:f3:f6:82:64:9e:
f6:59:bf:a8:fa:e6:cb:75:30:9e:79:70:48:c8:c2:6a:2e:ac:
bc:06:4e:f3:cc:aa:01:31:ba:9c:57:b7:f4:6d:d2:2d:66:7a:
d1:0a:71:fb:b2:e0:d5:ad:f6:b0:7e:c6:3e:27:c2:0c:8a:7f:
84:00:a5:13:3c:76:ec:06:35:a3:b9:30:e2:69:12:30:75:36:
61:12:9a:46:8f:c3:67:32:9d:90:ca:2d:63:79:87:65:c1:ff:
24:2e:3d:92:88:1f:70:a3:69:bc:4e:2b:61:32:8f:36:93:c4:
3c:45:56:13:8a:08:3c:23:53:ff:46:49:f5:29:ea:36:73:a4:
05:86:7c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:27 2025 by rpki-client