Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
File: F1oeMrvmeal2_GGmA-3NalQHK48.mft (raw, json)
Hash identifier: N2Km+Hq7oO6dFpsQpqirTpyYA2M0Q5dZ52Ro96ZofrM=
Subject key identifier: 03:CF:1E:44:BB:C7:38:58:31:1F:C9:4C:28:3B:DE:E5:5C:BC:CB:6E
Authority key identifier: 17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
Certificate issuer: /CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Certificate serial: 0194BC72962A25AC01E2FBAB1EDE743C0983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
Manifest number: 02F5
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: F1oeMrvmeal2_GGmA-3NalQHK48.crl (hash: 4FK/YkwCHZi9GI2OX8rkvIWf4NSegM6Mf0zsiC6LaCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:96:2a:25:ac:01:e2:fb:ab:1e:de:74:3c:09:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=03cf1e44bbc73858311fc94c283bdee55cbccb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:85:d7:ef:9d:1b:cc:ce:7f:d4:ad:8d:40:
7c:d2:1e:85:55:62:61:0e:7d:ae:3f:4c:62:c8:99:
06:3e:58:03:47:ee:aa:d2:5f:a2:ec:f3:40:77:13:
17:b6:3a:98:2e:94:ad:e1:c6:5e:69:fa:e9:ff:e4:
5d:d2:42:90:ff:a8:bf:aa:e7:0b:ce:4b:ed:b7:d2:
37:cd:9e:b4:07:7f:5a:77:52:63:fc:e9:b1:5d:b4:
68:61:95:bb:12:3c:4a:e8:9f:32:ce:5f:58:b4:00:
3e:01:d5:b4:20:6f:74:b7:a2:1b:5d:4d:54:a7:65:
30:31:e2:2f:03:8b:cd:01:b3:7c:ff:fd:94:ee:e4:
25:44:67:8f:42:79:00:00:ee:8a:8d:43:54:34:f1:
08:f9:01:45:17:68:6c:87:35:d6:37:60:60:c0:b1:
de:92:4b:a2:61:51:29:c3:50:df:b2:b4:b6:c6:31:
db:cd:c2:8c:69:2e:4c:b6:2a:de:c1:c1:59:41:8c:
bf:53:e6:13:0e:92:a5:f5:97:14:ea:24:67:3a:bd:
04:7c:37:5a:80:c2:32:91:82:3d:37:10:d9:a0:b3:
c8:18:22:0c:05:68:25:c9:9d:9c:72:06:1b:cf:96:
4c:de:ac:8e:6d:28:2a:f1:8a:86:7d:ed:a8:11:be:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CF:1E:44:BB:C7:38:58:31:1F:C9:4C:28:3B:DE:E5:5C:BC:CB:6E
X509v3 Authority Key Identifier:
keyid:17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:dc:99:1a:7f:bb:63:2b:ff:e5:07:34:70:4b:0d:6d:4c:1a:
2b:1b:88:c3:d3:f1:c9:26:94:c6:da:1e:4d:b8:57:97:5e:1d:
cd:65:68:58:18:66:6c:1f:ea:32:fc:52:e7:5c:59:3d:65:8d:
b4:b9:cc:9c:0a:2c:83:e9:0c:1e:e0:9e:b2:f4:85:4b:60:c9:
72:bc:18:53:c2:f0:e6:4f:5d:2d:2f:7a:e7:0c:4a:f7:92:05:
65:75:d2:68:46:ad:2b:f2:c8:17:c7:64:98:94:76:5a:20:60:
e4:dd:ef:6a:87:25:35:11:df:c2:3a:98:8a:47:b6:e8:db:26:
bc:72:41:96:81:ab:55:0a:fc:6c:46:c4:60:4c:98:7c:2b:de:
ec:cf:7b:58:6f:61:25:14:34:63:8c:4a:af:3c:7e:40:3b:d5:
3c:1b:10:18:7c:2c:cb:30:ea:a0:2a:b4:33:a6:59:63:1e:99:
e3:24:4b:ae:c9:a0:02:c8:2d:98:65:01:37:e7:c6:38:4a:bf:
09:d2:7d:87:f3:ce:67:64:6c:8d:0b:1f:b4:c0:3c:77:e2:cb:
29:40:4e:b3:c7:05:b2:3c:04:2e:4e:d8:5f:76:ee:13:93:0f:
61:e1:ba:ab:0a:a7:03:5b:d9:aa:c1:37:6e:5c:48:33:f0:41:
05:2f:52:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:43 2025 by rpki-client