Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
File: 35qWOAlxTREDtkYNnQ4UoS6FAyU.mft (raw, json)
Hash identifier: sDCW2OJIa0tO3jLrUP85TZYjt1/Ps74kq67thn7/R0Q=
Subject key identifier: E4:B9:E5:25:6F:EF:05:7B:7F:3D:BF:40:98:84:1D:32:D9:15:74:28
Authority key identifier: DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
Certificate issuer: /CN=df9a963809714d1103b6460d9d0e14a12e850325
Certificate serial: 0194BBCDCA55921D75B0F4A2D798F8A55C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
Manifest number: 0B0F
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: 35qWOAlxTREDtkYNnQ4UoS6FAyU.crl (hash: sp0Te2quVO1QNTpVYQg8v7i6BcKJDEWstxfGWAl9mVE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ca:55:92:1d:75:b0:f4:a2:d7:98:f8:a5:5c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9a963809714d1103b6460d9d0e14a12e850325
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=e4b9e5256fef057b7f3dbf4098841d32d9157428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:27:0b:57:3c:9f:1f:46:28:33:88:06:70:
34:60:42:a8:af:8d:fd:88:ae:18:3c:ee:da:43:9b:
1b:ae:48:d9:60:99:2c:b4:64:51:ad:d8:9b:a8:cd:
c1:53:22:9c:6f:dc:bc:4f:f0:92:03:95:91:8f:3d:
5e:b2:65:7c:98:18:04:96:99:71:39:9a:a3:c4:15:
89:39:04:10:43:9c:2f:8e:c6:48:88:0f:1c:48:db:
40:4a:4d:77:cd:34:76:34:02:62:96:86:8c:9a:65:
2f:d7:ed:99:cd:94:0d:b1:d5:40:b7:d1:ec:b1:de:
4a:4b:3b:4c:f2:5e:0b:2a:11:e7:80:b6:d2:22:a8:
e0:04:55:67:62:78:0f:ed:ee:5d:f3:9a:e6:be:5f:
7d:37:1d:04:d1:14:da:43:a4:62:80:7e:81:51:95:
82:f9:91:b3:f8:29:c0:d8:bc:2f:bd:4c:c9:9f:88:
36:06:ad:15:95:67:64:a1:f8:0e:fd:ee:1b:83:76:
bf:4a:7a:c2:48:a8:45:3b:9d:1a:e2:39:47:c8:4e:
24:94:a2:42:3d:4b:6a:aa:60:77:d3:68:98:71:17:
8b:8c:fb:17:bc:44:b4:bc:46:76:4d:7b:1d:7a:11:
41:f0:3c:13:0f:39:85:9d:3e:86:05:fa:d7:95:e5:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B9:E5:25:6F:EF:05:7B:7F:3D:BF:40:98:84:1D:32:D9:15:74:28
X509v3 Authority Key Identifier:
keyid:DF:9A:96:38:09:71:4D:11:03:B6:46:0D:9D:0E:14:A1:2E:85:03:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35qWOAlxTREDtkYNnQ4UoS6FAyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5141aa-18d9-4d34-8278-f3096a024e29/1/35qWOAlxTREDtkYNnQ4UoS6FAyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:46:ce:9e:f2:07:4d:6b:a0:e7:ef:d6:bf:bd:c8:a3:af:52:
de:6f:97:35:aa:b5:2c:6d:44:90:9f:ff:a9:46:f7:54:10:f6:
c8:21:9f:f0:fb:74:c6:05:68:24:63:a3:10:4c:9d:20:01:8e:
bb:50:78:57:08:d0:ab:aa:73:78:2b:29:4b:76:03:a5:68:74:
fd:ba:9f:1e:82:5c:d2:89:79:64:59:38:ba:6c:d4:a4:f2:8b:
f6:04:b1:4a:49:5f:e8:a4:19:91:c3:f5:b6:30:1f:6f:4c:2f:
04:39:54:94:d2:c6:33:79:da:53:36:60:79:7f:31:ea:fa:71:
da:b9:af:86:f8:30:42:13:18:74:81:c0:e3:37:d0:b7:83:d7:
27:dd:d3:40:ab:f2:43:2b:26:de:78:f3:17:0e:f8:68:03:eb:
4e:a0:ca:b9:04:0e:7d:40:e1:a8:67:9c:3f:33:3e:bf:2e:da:
e4:87:61:d7:0c:f9:ba:6e:23:66:d8:bf:b0:80:55:72:0a:26:
0e:7f:c4:fc:59:a5:a8:9e:c6:b7:3e:0d:ed:bf:f8:83:20:53:
96:7e:00:27:8a:10:70:6f:b6:26:e4:cf:3b:72:27:e2:07:12:
42:b3:45:3c:bd:b0:0e:8e:3e:4b:a7:6e:68:48:72:9c:e3:d8:
8f:c4:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:11:39 2025 by rpki-client