Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: Xq/Jc81JD0FX4jtDJGPkz38TDMzm9237Jc5aZbwgkPM=
Subject key identifier: 8C:47:4E:12:33:A3:9F:6B:B9:2D:54:8B:CF:45:E1:17:F3:84:E9:6F
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 0194BBCF029E5AD912A76F86360A21D9C4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 0D83
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: feoY9OlDWI7PAYg1UxpIq35zGp//9WV/qKOosFNSu6k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:02:9e:5a:d9:12:a7:6f:86:36:0a:21:d9:c4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=8c474e1233a39f6bb92d548bcf45e117f384e96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6b:d1:a9:2e:ee:f2:11:b4:d2:10:bd:5b:5e:
3b:25:18:7b:47:39:38:f3:d3:dd:07:bc:cb:e8:cc:
4c:29:61:45:9a:67:81:95:4a:64:8e:1f:3f:86:c8:
3f:15:94:b4:8e:be:0d:18:c3:04:31:65:79:9c:06:
d1:4b:96:88:c5:fe:fa:05:b4:e7:ec:5d:f1:9e:76:
3d:8a:01:62:bf:9d:1b:25:6e:ba:b0:be:e1:9f:55:
0e:6a:87:f6:bb:11:5f:2d:e1:15:05:d9:34:50:1b:
5f:36:2f:0c:f6:1c:c8:1e:a8:9c:ee:d7:03:c2:8d:
7c:e5:23:58:da:65:53:45:71:70:65:bc:f1:43:5d:
90:25:03:84:41:3d:ac:98:30:1f:5c:75:d2:d6:89:
f6:e5:d0:9a:d1:06:6f:ff:28:29:c1:3f:4a:fd:02:
cd:4e:82:be:54:3a:6d:a7:b9:d5:7d:27:05:ef:8a:
9a:6e:c1:21:41:7a:bf:32:b8:bf:19:af:2c:9c:2c:
85:20:d2:ac:84:17:82:6e:45:76:e2:cc:4b:84:4a:
4d:b9:dd:29:15:ed:94:d5:b7:a9:d0:ca:e2:08:39:
8d:96:a6:35:12:83:e7:9c:3c:2a:ba:96:8e:7b:e1:
29:73:68:e9:a4:f2:90:73:bc:01:d7:1e:24:77:27:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:47:4E:12:33:A3:9F:6B:B9:2D:54:8B:CF:45:E1:17:F3:84:E9:6F
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8e:1e:a9:c8:75:bc:fd:44:be:5c:98:e8:de:ef:f3:a5:35:
c2:ca:bc:83:94:45:71:6c:6f:d2:5d:58:75:d3:b3:75:8e:cf:
2a:28:ee:ea:27:48:77:ea:80:9b:2c:0a:eb:f9:ea:32:a5:e4:
0b:50:2f:b2:75:75:74:9f:c3:f4:0e:fa:ca:6a:c2:80:e8:41:
1a:1e:f1:a1:d3:e3:cf:ba:a1:7c:dc:5a:a2:9c:4f:50:fe:ab:
1e:e5:bb:35:83:31:05:d1:f6:1e:35:ea:aa:88:da:54:b0:5f:
62:a6:d2:d2:a9:24:04:23:b0:da:7e:75:9d:e0:0c:9c:74:49:
ad:92:7f:22:9a:4b:cd:a2:06:2d:5f:b0:bc:f7:a2:45:1b:9b:
78:f2:67:61:5d:3a:c6:7d:5a:7b:76:45:cd:4b:7c:05:3c:11:
17:0f:04:90:bd:2c:fc:77:bb:cd:34:fc:70:e1:95:2c:5f:5c:
ab:08:f4:e8:f7:02:2e:c4:50:e4:a0:4e:b4:42:cf:2f:44:fc:
4b:91:1b:2e:f5:92:07:fe:74:f2:54:5c:fa:8f:e6:53:df:b9:
7d:f3:f2:c2:c2:39:b7:94:98:ff:da:f0:4b:92:ca:cb:fa:9d:
c1:23:73:7d:a0:8d:7c:95:f3:dd:0f:50:2a:b5:2d:d9:2d:1d:
89:75:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:24 2025 by rpki-client