Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File: 3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier: TkP6qs+dCs/T20IgC0kjklqUgOCVmHf+YzvJZ5TsYrU=
Subject key identifier: BD:C0:E1:FB:5D:6D:B1:82:76:4B:F8:66:16:18:B3:1B:93:43:B3:08
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer: /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial: 0194BD17C2C9182AC6B94987F4C110B46A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number: 0654
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: N9g9VXOWrp+GkDr1CCp0gh0tU8smwfN0J+66X4TmsX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c2:c9:18:2a:c6:b9:49:87:f4:c1:10:b4:6a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=bdc0e1fb5d6db182764bf8661618b31b9343b308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:3b:dc:ea:39:1e:b3:ef:95:60:20:fd:a9:
66:35:97:43:d5:12:0a:c7:40:1a:5f:0b:d0:26:18:
95:dc:88:b8:93:49:fb:b6:4e:99:f9:53:32:3e:3e:
01:02:13:c4:c4:be:70:e6:18:66:1c:6d:d8:54:09:
be:83:5a:01:e4:80:ff:2a:77:3f:07:a0:3a:eb:ad:
11:dd:d3:ce:44:48:b2:4e:75:78:84:e4:ed:9d:4d:
73:c5:e5:3e:8c:d0:2c:00:65:50:87:cc:65:50:58:
23:95:0b:49:da:91:5b:74:2f:49:6f:09:43:69:7b:
7a:a1:ad:e2:bd:26:8f:7f:66:cd:88:33:1f:2e:15:
ea:c8:0d:bc:03:cb:d8:23:ab:3c:1c:75:f1:82:6a:
d1:5a:70:1a:4d:b7:97:b8:b1:d7:9b:51:d0:41:b9:
95:00:73:b3:d2:6b:b3:42:a9:5a:35:37:b6:15:fd:
e7:44:e7:13:ba:ad:9a:7d:8e:f3:8e:22:ec:12:32:
cf:cc:ca:d8:e4:a7:55:31:70:78:5b:9d:38:c4:5c:
55:82:ef:78:c8:b8:99:d7:a0:61:d2:83:9c:a2:8d:
f5:91:a1:76:83:94:41:da:42:f0:ee:70:e5:2f:1c:
ac:eb:87:6f:10:98:b0:f9:58:8e:f7:4c:cf:ec:ce:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C0:E1:FB:5D:6D:B1:82:76:4B:F8:66:16:18:B3:1B:93:43:B3:08
X509v3 Authority Key Identifier:
keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d7:71:ef:65:a8:9e:7a:10:06:03:f2:9b:8a:f1:1a:01:7a:
bd:b3:89:ed:15:1b:4d:26:ba:8c:38:e7:a1:d9:34:20:2e:a9:
86:60:ae:e9:c5:06:87:f9:a9:04:63:73:c3:25:c8:99:18:79:
96:62:f1:b5:8b:ce:fd:c8:60:39:36:0e:2d:f4:9e:90:fb:43:
40:c1:95:69:25:b4:1a:1d:9b:ce:84:fc:0b:ff:43:01:7b:4f:
5e:b0:c7:4d:82:f0:90:70:69:97:60:59:c8:fd:8b:89:49:32:
26:95:c1:b0:90:6d:d1:65:90:7f:ea:17:69:5e:6c:43:41:06:
35:4f:ea:cb:c1:e4:32:d2:5e:2c:f9:2a:70:1c:4b:e4:b3:34:
ba:78:bb:09:42:33:1f:c3:01:13:dc:40:4a:cd:8a:74:53:77:
e6:91:36:d5:e5:fb:a0:07:e6:c2:ae:3e:33:ea:4d:38:60:74:
17:5b:55:3e:74:6c:54:b1:42:af:d6:78:f7:2f:67:e3:d8:10:
e2:8d:82:a6:1e:85:c3:b9:7f:53:91:99:84:ec:eb:5f:b0:bb:
60:57:f7:1b:09:97:5c:c3:e1:e5:85:5c:09:0c:a3:1b:df:29:
2e:26:4a:2d:55:55:dc:c3:2f:df:90:36:d1:ec:22:fd:fd:ee:
21:e5:e5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:21 2025 by rpki-client