Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
File: 1PhqmjxCnBvCbsBqOuTkF8p0394.mft (raw, json)
Hash identifier: 8o2E8CLWGbhlFu/UcgycsKXgGCzWzdSdm8EjR4yf/xE=
Subject key identifier: 79:64:6C:34:72:EB:3D:8B:58:B0:F4:59:82:E6:3E:FF:99:C7:C0:94
Authority key identifier: D4:F8:6A:9A:3C:42:9C:1B:C2:6E:C0:6A:3A:E4:E4:17:CA:74:DF:DE
Certificate issuer: /CN=d4f86a9a3c429c1bc26ec06a3ae4e417ca74dfde
Certificate serial: 0194BCA9847D21C98A2C7A09A865F466ABE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
Manifest number: 06B2
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: 1PhqmjxCnBvCbsBqOuTkF8p0394.crl (hash: GpRw5Rqq77iVWw2mZGUycq3ByTGg5/eqvaQ3hME9U0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:84:7d:21:c9:8a:2c:7a:09:a8:65:f4:66:ab:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f86a9a3c429c1bc26ec06a3ae4e417ca74dfde
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=79646c3472eb3d8b58b0f45982e63eff99c7c094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:a6:7d:4e:1d:5b:c4:47:c9:39:74:3b:a0:
40:98:f9:4e:52:0a:32:f2:39:56:21:8e:c8:be:a3:
cf:f6:e3:f9:6d:c8:62:93:e2:4d:b7:5e:49:09:e7:
71:a9:7d:00:b9:19:9b:95:18:9f:15:be:d7:3b:89:
14:e0:6e:84:0b:df:3e:c2:36:88:1d:e2:27:bc:78:
f6:7f:57:2d:71:99:ea:04:7d:eb:d1:c3:78:55:d8:
de:8c:5a:f6:e5:22:18:d6:bd:74:0f:94:cc:28:2a:
e1:e3:0e:98:ce:aa:46:4d:26:1c:5e:08:fb:7e:81:
e7:a5:82:17:5a:ab:38:c6:c1:a8:0d:a1:17:8b:b9:
6d:a3:bb:9e:d7:15:94:5e:f3:64:90:3f:bc:f0:f4:
c0:a9:fd:c1:48:42:61:01:2d:26:f2:4b:e2:9e:24:
10:6d:50:67:e3:1a:91:1e:f9:23:da:a5:0c:82:5a:
44:12:80:06:1f:df:e6:52:89:58:d9:ea:78:43:70:
27:a5:5f:78:4e:30:20:e5:c1:d9:71:8e:1b:3a:43:
5f:63:2d:c3:8f:af:cc:7e:68:91:87:8d:d8:e2:a1:
e4:d4:16:ef:2a:d2:0e:65:19:f6:59:71:9e:25:33:
9c:3e:26:ea:d7:bb:26:6e:6d:5a:ec:e3:cd:3e:bd:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:64:6C:34:72:EB:3D:8B:58:B0:F4:59:82:E6:3E:FF:99:C7:C0:94
X509v3 Authority Key Identifier:
keyid:D4:F8:6A:9A:3C:42:9C:1B:C2:6E:C0:6A:3A:E4:E4:17:CA:74:DF:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:91:e4:57:73:bb:4b:a0:db:6d:d0:96:e2:17:ff:bd:cb:11:
00:bc:1a:d9:aa:fb:c8:c2:5f:df:7a:31:b8:13:97:cb:f7:b5:
7d:09:c6:d1:03:b7:4c:d5:3b:b6:f3:65:0d:44:77:fd:85:4a:
a8:59:7b:b4:db:6c:a8:4c:93:24:d7:e2:b8:a0:46:c7:7e:0c:
56:51:a0:bf:bb:00:ee:aa:29:f6:26:03:49:25:7c:09:7e:8b:
3d:5b:2a:3e:0e:69:c3:b7:db:22:d6:2d:3b:c2:3e:e0:d5:61:
ad:ce:cf:33:f0:0d:1c:82:84:63:b2:c9:02:5d:ef:0a:b2:11:
38:d7:b0:29:43:b0:fe:c1:49:fb:ba:d6:0d:8d:ae:3a:cd:40:
25:07:92:e4:14:d6:5e:cd:a1:8c:64:1f:ec:86:7f:94:77:49:
26:db:43:3a:ec:0b:de:e6:42:a3:84:de:5f:f0:e2:56:ab:c5:
bc:ad:88:a0:ce:c5:12:08:53:81:b9:9b:fa:a5:a2:cd:33:84:
da:bf:bf:5a:22:c5:5d:91:ad:c4:49:94:f3:c9:9e:95:89:88:
43:62:ac:bd:27:19:79:e8:15:f5:fd:84:d3:36:6e:c1:ae:e9:
8a:3b:8a:1f:c9:62:b1:fb:b9:5a:84:d7:ab:bf:8a:4b:7a:88:
ab:6a:6d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:34 2025 by rpki-client