
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/s_sdIFBvVM-5oflFH6EKiP87L2Q.mft
File: s_sdIFBvVM-5oflFH6EKiP87L2Q.mft (raw, json)
Hash identifier: bb+U1Aqdied19j2aNdO15nRJRVvR05GJZTUCjddX+G8=
Subject key identifier: 4C:C3:FE:BF:54:F8:E0:C0:D8:EE:F3:B3:08:78:5E:FD:E9:64:10:DB
Authority key identifier: B3:FB:1D:20:50:6F:54:CF:B9:A1:F9:45:1F:A1:0A:88:FF:3B:2F:64
Certificate issuer: /CN=b3fb1d20506f54cfb9a1f9451fa10a88ff3b2f64
Certificate serial: 0194BC3C574AE323679D9206EF5D9CDE6791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_sdIFBvVM-5oflFH6EKiP87L2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/s_sdIFBvVM-5oflFH6EKiP87L2Q.mft
Manifest number: 0ACF
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: s_sdIFBvVM-5oflFH6EKiP87L2Q.crl (hash: wXfyKWGPetFfoLSwFV+kCPYqk2uYtIB1dVIDInilc/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:57:4a:e3:23:67:9d:92:06:ef:5d:9c:de:67:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fb1d20506f54cfb9a1f9451fa10a88ff3b2f64
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=4cc3febf54f8e0c0d8eef3b308785efde96410db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:b0:c4:60:fd:47:05:8e:8e:f3:ea:ef:85:
84:f1:70:8f:77:23:1a:5c:14:11:9c:04:92:28:24:
49:74:86:c3:66:0b:10:76:7e:19:20:17:26:7a:02:
24:17:7b:ef:1b:4f:70:f1:96:c4:66:15:49:9a:bb:
76:a5:da:75:66:26:83:d0:bb:00:26:45:0b:bc:45:
ef:74:91:44:f3:b1:4b:c5:d4:32:fb:d6:61:ed:28:
7a:f4:d0:f8:73:86:e9:37:72:04:8b:53:a2:39:a9:
8f:30:e8:c3:d5:a3:42:df:40:16:c6:51:29:6b:91:
1c:60:fe:24:5c:4d:f2:6c:41:f7:b9:dc:11:09:24:
c9:13:16:48:8d:16:ab:ac:d1:09:8e:a6:57:4d:47:
87:59:15:b1:5e:8c:80:73:b3:4d:1d:38:03:59:ba:
cc:a9:53:6c:f3:5f:2a:7a:1f:6c:9c:73:a7:c3:6c:
57:7a:e8:91:2a:61:00:a5:6c:eb:ee:a2:64:94:fc:
0d:df:d7:09:65:6a:ae:c4:ea:65:01:9b:9c:81:ef:
e5:99:39:35:c9:99:f4:49:18:d8:29:9a:3c:67:e4:
a5:8c:c8:11:80:62:21:8f:68:47:62:ba:0e:31:20:
66:95:43:49:36:37:44:cf:74:c9:93:22:44:e8:d1:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C3:FE:BF:54:F8:E0:C0:D8:EE:F3:B3:08:78:5E:FD:E9:64:10:DB
X509v3 Authority Key Identifier:
keyid:B3:FB:1D:20:50:6F:54:CF:B9:A1:F9:45:1F:A1:0A:88:FF:3B:2F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_sdIFBvVM-5oflFH6EKiP87L2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/s_sdIFBvVM-5oflFH6EKiP87L2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c42df5-4f92-447d-bd25-86d6e2f46642/1/s_sdIFBvVM-5oflFH6EKiP87L2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7a:6f:47:46:9c:be:c4:54:3b:40:b4:62:9d:04:07:76:cc:
1a:79:0d:27:3f:31:67:57:7b:75:24:ab:2b:6f:40:1a:c7:94:
6c:c1:03:15:a6:0f:d4:12:24:9e:01:64:d8:84:b4:f8:4c:39:
83:eb:d3:9e:73:f4:b1:6a:7b:34:3e:87:48:d9:db:11:0d:68:
89:b0:1d:67:d6:a8:f3:60:94:95:d4:8d:87:6c:4a:81:0f:14:
f1:7f:e7:9c:14:5c:f1:0f:cb:29:00:28:03:bf:fc:23:d0:2f:
13:f2:6b:33:87:59:cb:f1:b8:2f:eb:d9:fa:fc:42:5a:a8:6a:
cb:4c:5c:41:b2:ce:b0:1c:cc:b6:86:27:36:43:c8:2f:b8:f0:
2f:59:0a:ed:61:6a:fa:f5:d4:33:10:dd:d7:8a:8e:8b:3e:87:
41:db:e8:20:27:7f:da:97:65:5e:48:df:8e:c5:cf:0d:47:6e:
12:12:b6:d7:f5:f9:9d:cf:52:9f:14:89:13:d2:ca:12:68:1f:
c0:86:bb:e7:58:48:fd:0c:b4:67:2f:a3:37:0e:a8:a3:8a:3e:
0a:04:02:4a:3e:6b:98:b3:bf:04:03:d2:87:6e:3c:43:af:7e:
52:f3:af:0a:51:cf:cf:1e:19:d5:cc:44:79:19:c1:0d:e1:28:
c4:a1:c7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:05:01 2025 by rpki-client