Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
File: F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft (raw, json)
Hash identifier: u52fUzEkXC13aSY/Hd+nwiVzU5g19pwIDOwSXBrs1Oc=
Subject key identifier: 8A:50:C6:41:F0:20:81:7D:CA:35:DA:B5:DD:22:1A:09:C1:52:F1:B4
Authority key identifier: 17:D8:73:12:06:53:B3:CF:E5:51:72:A9:DC:60:57:E8:CC:D0:CB:5C
Certificate issuer: /CN=17d873120653b3cfe55172a9dc6057e8ccd0cb5c
Certificate serial: 0194BBCF09F878F97F314F88D757D29F3F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9hzEgZTs8_lUXKp3GBX6MzQy1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
Manifest number: 0BCB
Signing time: Fri 31 Jan 2025 10:01:35 +0000
Manifest this update: Fri 31 Jan 2025 10:01:35 +0000
Manifest next update: Sat 01 Feb 2025 10:01:35 +0000
Files and hashes: 1: F9hzEgZTs8_lUXKp3GBX6MzQy1w.crl (hash: +q3u5bXhWN6kilPn+BGeggHAdTFx3GdFYDHAymWz0d0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:09:f8:78:f9:7f:31:4f:88:d7:57:d2:9f:3f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d873120653b3cfe55172a9dc6057e8ccd0cb5c
Validity
Not Before: Jan 31 10:01:35 2025 GMT
Not After : Feb 1 10:01:35 2025 GMT
Subject: CN=8a50c641f020817dca35dab5dd221a09c152f1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:8b:59:33:2a:8e:f9:77:10:74:6c:2c:e8:
ca:7b:16:01:8e:f7:03:07:59:0c:60:e7:f9:fd:f2:
ae:f1:c5:c0:3b:56:ca:f9:71:44:86:3f:c8:f3:0f:
03:34:7f:e0:d2:32:7f:81:ca:3b:a4:47:c1:58:d1:
dd:e7:96:74:d9:02:45:56:3f:ed:59:2d:6a:9d:1e:
0f:90:26:65:ea:11:00:ba:89:8f:73:b9:41:eb:36:
6b:ee:9b:86:ba:44:65:73:0a:ba:33:77:a6:dd:15:
f1:b8:d3:5a:52:60:76:ac:5d:a6:dc:30:45:ba:8f:
72:78:7b:c4:80:32:21:ae:47:54:74:a7:c8:b3:38:
93:36:3f:9a:c2:e6:eb:7f:94:bd:6b:ca:bd:43:de:
2a:f9:8e:b3:99:29:31:c6:38:4a:b2:f3:5b:1a:3e:
bd:9d:2f:25:d0:66:ea:58:e1:3e:d2:28:63:43:2c:
19:d4:9b:ea:c6:cb:20:34:e2:43:80:95:ff:6f:96:
1f:55:c2:b4:47:ef:ca:03:e2:61:2b:a8:4c:c4:c8:
e6:a4:bc:52:22:c1:31:af:d0:dd:cf:27:38:3b:5f:
54:f1:70:01:53:db:33:41:e9:9f:22:dd:ce:45:31:
62:64:fe:1a:03:a3:a4:67:b3:c5:e3:5c:b2:fd:00:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:50:C6:41:F0:20:81:7D:CA:35:DA:B5:DD:22:1A:09:C1:52:F1:B4
X509v3 Authority Key Identifier:
keyid:17:D8:73:12:06:53:B3:CF:E5:51:72:A9:DC:60:57:E8:CC:D0:CB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9hzEgZTs8_lUXKp3GBX6MzQy1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:88:69:0a:70:21:17:3c:cd:7a:6a:6e:87:bc:06:fe:4b:04:
1b:08:00:b1:9f:4d:b7:ab:1a:7d:97:a4:0f:ac:bb:55:27:5c:
72:6c:4e:96:af:02:c7:d8:e5:b3:63:64:78:8a:42:63:de:1a:
33:76:9f:e2:6a:6d:00:74:ca:8f:61:3b:db:c6:bc:53:1c:13:
de:91:b0:2b:47:9e:9b:93:b9:41:d6:d7:d2:14:6a:37:5d:32:
5e:86:e1:fd:9a:b4:f9:10:ce:bf:4e:26:44:98:74:b8:93:b9:
3d:2b:25:12:96:95:8f:48:1c:7b:70:13:a5:99:b5:71:3a:16:
ea:90:04:ac:89:6b:82:ec:8a:f1:81:c2:ed:a0:9e:08:e5:a6:
1e:51:3d:f4:ec:10:23:ab:80:17:56:9b:02:64:e1:7e:d6:be:
da:b4:25:39:b6:0c:dc:bf:57:2c:9d:2e:cf:6c:31:b4:9d:f2:
b4:2e:59:aa:68:d5:3a:2f:35:d8:cd:89:29:b8:da:01:72:7b:
57:b3:18:8d:44:31:3b:5e:e0:84:e5:ae:74:e3:e5:1a:fc:bf:
44:6a:35:27:f9:14:b6:fb:3e:b2:13:c3:db:94:50:c0:67:85:
3b:78:c0:8a:ac:4b:ac:09:43:69:b4:04:ba:74:74:73:d6:6a:
02:85:2a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:43 2025 by rpki-client