
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
File: L8VFWRk_6APSh01pjzQpKPdjKgU.mft (raw, json)
Hash identifier: qwpc/D/dpRehW3wRBtUayOTvSmnkJsPeHAA49loL5Lk=
Subject key identifier: 13:59:66:57:74:41:AB:A6:37:6D:09:F4:CC:EF:A1:09:81:AE:C3:DD
Authority key identifier: 2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
Certificate issuer: /CN=2fc54559193fe803d2874d698f342928f7632a05
Certificate serial: 0194BC72FFB8403ADEE32693FF12578CDCE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: L8VFWRk_6APSh01pjzQpKPdjKgU.crl (hash: vh45D/Tox+PWSKhHMRzl0SIsErom2wBdTYIKxtFsdDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ff:b8:40:3a:de:e3:26:93:ff:12:57:8c:dc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc54559193fe803d2874d698f342928f7632a05
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=135966577441aba6376d09f4ccefa10981aec3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:49:23:5c:cd:9d:50:dd:28:3d:44:97:b6:
36:ea:ce:ab:43:22:7b:c3:df:c3:90:10:2a:76:dd:
02:ae:7f:92:51:00:16:68:65:1a:b3:88:8d:af:44:
35:4f:d7:9a:b3:b4:7b:9e:20:9c:65:16:e0:76:a0:
64:f1:30:e6:ca:c3:81:06:b1:95:fd:6f:bb:4e:17:
cd:f7:aa:31:8d:85:6a:3d:03:c1:fd:38:f3:16:9e:
f1:2c:a9:9c:e2:54:8f:e4:3e:3d:cb:63:79:2d:19:
06:31:fc:0e:b3:49:80:28:74:eb:38:0b:91:19:3b:
19:42:d8:fc:8c:8a:25:36:49:2d:c7:c9:e8:33:4d:
e4:0d:82:fd:5f:3a:98:d4:5d:23:f6:4a:7f:b4:a3:
85:7e:b5:7a:d2:f5:a8:36:4f:7c:92:b6:c3:08:0e:
5f:e3:58:b6:c1:c4:30:b6:e9:11:9c:07:32:a3:25:
a9:08:25:1b:83:50:4c:44:db:df:0f:38:33:a5:b8:
b1:7d:88:1a:26:65:60:96:91:3b:ae:95:67:fa:cb:
f2:d4:36:1c:ac:f7:d0:dd:0e:ce:4a:d7:dd:22:a2:
f8:62:15:12:21:00:d6:d8:57:65:02:e2:c5:1c:f5:
3c:d8:5d:0d:6d:fa:d8:a7:db:c4:96:4a:a0:c3:0e:
59:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:66:57:74:41:AB:A6:37:6D:09:F4:CC:EF:A1:09:81:AE:C3:DD
X509v3 Authority Key Identifier:
keyid:2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c6:8f:55:e8:e0:ad:ad:c1:22:d0:76:e4:e4:4f:2d:0b:b5:
8c:e4:fc:d5:ff:51:02:78:d3:b1:e4:75:04:3f:cc:0d:34:a5:
47:72:ae:30:79:9b:70:15:c0:df:87:9e:2b:3b:15:8d:09:28:
4a:31:53:8f:42:68:d8:68:64:3c:94:da:a5:04:0b:79:1e:0e:
e7:ad:70:28:d3:0d:0a:46:13:21:b0:cc:23:36:d9:bb:af:20:
ba:e3:53:ff:37:1c:9a:c4:7a:24:d5:b1:ce:2e:e1:d4:29:7b:
00:85:60:30:17:b4:75:47:36:9d:b7:9c:88:1b:58:ad:25:fc:
d4:ab:1e:9f:0c:16:66:e8:d5:57:7a:e9:26:d7:78:8e:f4:e7:
a5:c4:f6:09:ac:1f:2e:c3:e4:0e:29:a6:94:f0:1f:a0:49:97:
d7:7b:bc:e3:1b:e9:0e:5c:04:6c:4c:ab:81:b1:d2:00:7a:ae:
be:0d:30:6f:50:6d:d3:ee:df:53:e9:60:ac:56:be:29:05:2f:
95:97:0f:5d:a3:cf:60:d6:51:1e:2d:77:3a:41:fd:09:91:d6:
53:64:85:85:6b:44:6f:00:69:bf:a3:0b:9b:7e:7b:fe:41:ec:
16:9f:33:3b:ee:01:11:75:df:c9:c0:5a:74:02:bd:28:a7:fe:
cb:a5:c4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:44 2025 by rpki-client