Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
File: _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json)
Hash identifier: Z97/+CHhlBkwNW50Ns3NlFxabv+cyJicZRusolAnWzw=
Subject key identifier: 4C:C8:1B:D8:9D:EA:5F:CE:53:96:C2:27:3E:40:CD:D6:70:B4:61:F8
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Certificate issuer: /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial: 0194BC727CEE03AF20329E701158691A0D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
Manifest number: 10A4
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: svx/1gFqZH1RchGDsvqQZPPAkxj91m4OiMeTQEw5O+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7c:ee:03:af:20:32:9e:70:11:58:69:1a:0d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=4cc81bd89dea5fce5396c2273e40cdd670b461f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:99:61:31:ab:04:63:01:24:5d:e2:90:58:
86:60:49:45:14:66:90:1c:72:d8:7c:a6:e3:e4:8f:
60:10:f0:94:50:77:b8:79:81:aa:46:5a:7f:bc:db:
66:66:9c:46:7d:a5:03:21:02:a2:df:c7:42:82:dc:
eb:e2:2e:22:b5:f4:29:e6:5e:6c:27:1b:99:f5:75:
15:34:b7:76:b5:df:b0:a3:22:71:c1:f0:0c:16:4d:
75:e5:e8:f2:a4:20:8d:56:d8:59:2d:9a:24:d0:a1:
b1:d5:ad:fa:b5:dd:5a:14:1e:de:28:92:19:c6:18:
f6:87:0d:c2:4e:d8:7d:37:53:3b:70:0f:21:1f:e1:
b8:47:d4:2b:ff:c7:97:fb:54:48:32:1e:7f:da:74:
e9:71:a7:c3:c7:96:91:2b:84:c8:65:9f:70:cd:ba:
dd:5a:2f:e7:68:d4:88:22:bc:b2:e3:a6:9f:e6:97:
49:35:5f:77:8a:85:5a:dd:06:50:d9:97:1d:0b:9e:
c4:7c:d8:c3:63:99:57:e6:40:c1:a8:82:47:e7:e7:
4d:20:bd:e7:7f:37:a3:3c:c0:88:7d:b8:5c:a5:19:
47:b1:24:5a:26:3c:94:11:4f:9a:a6:ff:f2:44:69:
c6:a3:7f:93:6d:b9:d6:23:b4:62:5c:3a:57:75:80:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C8:1B:D8:9D:EA:5F:CE:53:96:C2:27:3E:40:CD:D6:70:B4:61:F8
X509v3 Authority Key Identifier:
keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d2:f4:09:71:8c:55:58:96:cb:1e:2b:0a:84:56:71:9b:b1:
29:29:3c:90:dd:da:00:d3:4f:99:d8:19:ee:b8:71:cc:e6:5b:
e8:13:41:02:6c:c0:60:8d:8c:1d:da:90:c8:41:b2:80:2b:dd:
0e:fe:6d:79:0e:f6:3a:97:29:93:f1:62:a6:18:c9:56:b6:7b:
ad:59:76:d0:b5:28:b7:46:fa:82:17:47:09:47:aa:2d:f2:da:
75:0b:e3:5d:c9:c7:2c:9d:5c:ab:c7:60:33:f5:3f:d0:ff:76:
f8:03:95:0b:45:e3:e2:4a:cc:1d:05:a9:24:db:ff:8c:e6:17:
a1:91:bc:0b:c8:be:e8:d4:16:af:96:4d:8c:16:e6:f5:13:5b:
04:9b:77:28:55:a0:dd:e7:07:40:7d:54:81:ae:08:5c:da:3d:
a4:95:80:7d:b5:f2:47:fa:ab:00:89:70:34:d0:22:bf:5e:7d:
67:8e:c1:6b:c2:54:73:e9:8e:5f:77:1a:30:a8:eb:be:93:2c:
56:61:6f:81:bf:d3:9f:d8:1a:97:d5:e3:e6:d3:f4:86:8f:79:
90:71:90:78:10:30:b7:7c:dd:5b:52:6b:0a:41:d7:10:5a:31:
dc:e1:d7:6a:cd:2d:49:69:f5:25:c1:e1:3c:50:0d:72:c4:4a:
4c:d8:ae:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:43 2025 by rpki-client