Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: FN8knFRH4VhwbD1fLjXqH3VYXhdJp7c1SUVAdxwHax4=
Subject key identifier: 2C:01:90:B3:E3:34:2B:21:81:DC:F8:5F:3B:BF:5E:0C:8A:78:C9:0E
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 0194BD17EF6EDD23E3BA01895A7F0495CC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: /Pflr92T6xNbivnRVzmoOzORJOy4VaOF8aBpPRz5gO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ef:6e:dd:23:e3:ba:01:89:5a:7f:04:95:cc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=2c0190b3e3342b2181dcf85f3bbf5e0c8a78c90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:0d:64:18:d7:ab:32:9a:09:35:78:fd:eb:
06:b7:d4:6e:3f:e3:a0:bc:af:b3:17:a8:2c:97:94:
e0:3d:b1:b4:9c:60:51:9b:f8:55:37:2c:5c:5f:87:
9c:c6:ad:e2:18:c4:26:ed:7e:0e:b8:b0:07:f4:9e:
2b:d0:37:4e:2d:4e:17:2f:5d:97:b7:72:d3:4c:48:
02:ce:d2:a4:1b:50:49:5e:1c:97:b1:df:68:3b:8a:
4d:c2:62:05:f1:13:c9:56:7e:4a:26:0c:7d:c0:b6:
3e:66:67:87:7a:f6:f9:d3:04:a0:02:e5:b0:8c:cd:
f1:15:7c:40:64:62:05:de:04:68:15:cc:88:c7:89:
5f:b7:be:6a:4e:50:64:9a:cc:4f:75:62:b2:7f:dd:
94:c9:0a:d1:9f:63:8d:97:cd:2c:3f:06:b5:9c:6b:
29:aa:a3:c2:5b:1a:40:22:2f:27:62:23:5e:07:3f:
e7:70:4e:e7:34:4a:2f:38:e7:7c:80:c4:34:73:98:
55:a5:e6:da:e7:4e:6f:9c:3a:ee:31:a0:6a:94:c5:
bd:66:6e:00:fb:fe:c1:14:e9:00:fd:5c:20:4f:b8:
0f:6e:43:51:3d:36:ec:50:85:23:82:f3:9e:ba:4b:
f5:5e:37:7f:d9:52:17:92:37:d2:87:e1:21:fc:36:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:01:90:B3:E3:34:2B:21:81:DC:F8:5F:3B:BF:5E:0C:8A:78:C9:0E
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2f:af:1e:23:e1:0e:15:d9:51:57:8c:b8:35:01:f4:48:61:
e7:b8:93:b0:52:d2:ef:a1:b9:51:ba:50:fa:28:78:f1:01:ed:
f5:b2:5f:3f:50:08:b7:cb:a3:f8:e8:e9:8c:37:fc:b4:e1:a8:
df:92:bd:54:3d:5e:1c:e7:9c:22:67:7b:dd:87:df:c5:b1:9d:
35:3e:b8:46:64:99:80:ee:ec:02:8a:2b:b1:38:ba:e9:c8:9d:
da:30:f2:91:3e:9a:ee:03:b6:ab:a4:79:eb:eb:5c:69:1f:9d:
66:71:d9:25:f2:26:d2:f6:67:0f:bf:00:5b:c9:17:87:e3:03:
ef:a1:95:23:57:25:9b:d6:11:1f:82:33:d3:91:9f:f0:78:b7:
16:de:da:10:0a:1c:5e:42:f2:f0:44:47:31:4b:39:44:57:af:
f9:84:76:06:0d:07:7d:aa:75:f1:46:7e:6a:49:e0:cf:7f:ec:
24:f0:19:c6:c6:0c:c8:29:ef:36:19:1d:64:90:b9:51:97:55:
a9:b7:95:f0:0a:b5:6a:17:8d:30:cf:b5:b3:61:ac:a9:61:ea:
56:c8:d4:dd:4b:6f:f7:0d:ab:f7:bc:4f:75:cb:9b:c2:c8:5e:
4e:77:09:01:a3:d7:38:d1:ec:bb:0e:25:94:77:cc:eb:be:9a:
60:d4:95:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:28 2025 by rpki-client