Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: T/5eytodSsvLvaydf4LQb8HlzICf9kwOwTkvuZzcIHU=
Subject key identifier: DC:F8:2B:6B:A8:32:53:24:00:EA:D9:49:95:02:FE:77:51:BA:4A:48
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 0194BC3C31DB40D590DF43415DACCB63593C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 0378
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: Npjni2NvT0yQqh3IdVJ/0CvqDqBNGuwqP0UlErukj28=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:31:db:40:d5:90:df:43:41:5d:ac:cb:63:59:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=dcf82b6ba832532400ead9499502fe7751ba4a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:44:26:14:22:7f:cf:17:c3:8e:3a:ec:ba:
d5:58:40:bc:13:70:9c:89:a9:5b:3a:ea:9e:12:f2:
ee:7a:c7:96:13:97:5a:a1:d5:ee:83:b6:d2:92:1e:
ae:f1:e9:2c:d5:c4:a4:27:a4:69:c6:b4:fb:5e:1c:
3d:78:87:85:14:a6:ff:02:dc:77:2c:67:33:ee:4f:
be:1a:b7:a9:a4:1b:93:59:89:11:1a:32:6f:b6:53:
ab:a9:57:06:36:b6:10:7d:6b:38:46:98:c9:9e:d9:
b3:f8:cc:62:c9:f2:86:12:6e:1b:8d:03:c0:9f:4b:
7f:6b:ce:8c:2a:3a:76:73:ce:c9:a1:ac:60:bc:aa:
ca:32:52:60:03:22:31:33:06:6e:43:10:21:89:f1:
19:3d:2b:8a:6a:8d:51:95:0a:af:da:0e:e8:cc:a0:
f5:28:de:fb:a3:26:37:c0:3e:21:3f:34:a6:8c:ee:
9c:14:c6:8c:df:84:a2:21:96:53:68:b2:12:58:c1:
60:7b:54:20:48:6d:87:ae:0d:17:5b:54:21:90:ed:
65:5e:e9:ad:6d:77:4a:29:42:6a:76:eb:b7:1a:cc:
b6:86:dd:2c:eb:48:dc:48:f8:f0:7b:44:c2:96:50:
97:09:49:e1:66:54:f8:96:b1:93:82:64:fd:a2:f9:
61:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F8:2B:6B:A8:32:53:24:00:EA:D9:49:95:02:FE:77:51:BA:4A:48
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:54:64:63:7d:df:d6:5a:fe:86:ff:81:7f:42:0a:20:6b:52:
34:ee:e2:22:6e:9c:20:f6:be:b8:64:cd:ef:61:b2:e6:cd:99:
a9:8c:d7:ab:d3:11:70:9f:48:0e:92:9f:95:93:e3:75:40:82:
30:0b:33:4a:0e:ea:c3:55:32:f9:5c:26:11:b6:7d:69:ce:fb:
e8:d5:4b:b8:73:fa:2a:55:3d:69:c2:f5:d4:69:24:71:5f:91:
b9:51:e2:3b:7f:71:16:83:ae:a3:8e:80:03:51:1f:04:f6:07:
b3:b8:79:b5:92:45:a5:85:9c:2c:c8:21:aa:97:f7:3e:78:4d:
b4:9e:01:7b:16:a9:08:07:8a:11:f9:af:61:d2:68:f6:24:5f:
b3:ce:02:f1:c9:15:d6:4a:e3:c6:63:68:f6:0b:6b:96:53:3e:
1e:03:c0:26:b1:38:51:bf:df:b9:2d:aa:c3:77:78:07:bc:38:
07:2f:2e:7b:3e:b0:9a:75:a9:b5:f8:4e:de:14:b9:a8:09:11:
5b:b6:c2:a3:c2:e3:50:9d:57:15:0e:e1:55:a8:89:79:66:cd:
4d:a7:1b:b0:9a:d1:4b:2d:0c:71:d2:c4:5a:90:a0:40:b7:a3:
ec:ce:51:22:fa:46:ba:d7:be:1c:df:cd:37:ed:94:a6:14:61:
ca:57:43:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:50 2025 by rpki-client