Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
File: 81TlIOe7fhP1Ms7PBagtK3l5UqI.mft (raw, json)
Hash identifier: Z7ZKfV8DqmogbgQTxmn4297y3OjmFFJ8F9pgbOdi+hI=
Subject key identifier: 87:36:4B:07:FE:63:5D:45:E7:57:3C:53:1F:5A:EB:89:16:3F:8F:60
Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
Certificate issuer: /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Certificate serial: 0194BC3C16A0291A7ACFEACDF4030CB743FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
Manifest number: 0982
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: 81TlIOe7fhP1Ms7PBagtK3l5UqI.crl (hash: gimazcsCHMPDVB5oiD1oxADsRDI++HlNptb7QhPQlw4=)
2: 9R7qE2JixKC-vbV8JeqORUi7upg.roa (hash: qMwpouu0cneK+WPX+gDmDCVwU3yx/zaa1DbEZEykJcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:16:a0:29:1a:7a:cf:ea:cd:f4:03:0c:b7:43:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=87364b07fe635d45e7573c531f5aeb89163f8f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:b0:1b:fa:8d:8d:91:8d:14:be:26:fd:49:
6d:a4:fc:d6:59:42:96:a7:4e:69:9d:b4:b1:8b:45:
b2:23:50:7f:5e:d6:e7:ed:3a:f9:65:61:6f:b0:df:
37:0c:d8:b6:fe:0c:a8:d8:a0:20:5f:51:71:26:b8:
b2:60:37:e6:40:e0:18:63:ea:7b:35:54:7e:09:84:
32:66:ea:3c:87:8c:da:e5:81:0e:2b:59:50:bb:fd:
d8:17:55:f8:bf:53:55:a2:a7:a5:51:02:f3:23:47:
5e:6e:3d:1d:aa:7a:25:1d:bb:81:41:49:56:fe:53:
b5:78:29:7b:8b:6e:64:51:6b:37:c0:d0:b5:93:c5:
68:ef:26:eb:93:77:02:45:8b:ab:58:49:81:2c:bf:
ab:7a:fc:7b:b3:f5:51:61:aa:2c:12:36:9e:9b:b8:
d2:c1:ff:f4:28:71:54:73:66:20:e7:8b:56:ac:cd:
26:84:fc:d7:be:66:6b:ac:c8:fe:22:57:77:c7:78:
94:f6:cf:c3:f9:a9:bc:ff:6e:23:ae:bf:06:a3:66:
68:8d:29:d2:2e:14:30:c7:23:25:8a:bd:f1:5a:4b:
ed:fb:4a:47:46:81:68:57:e4:8d:74:69:7a:4e:0e:
7a:32:14:33:45:33:4f:45:c6:df:4f:6a:33:03:a1:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:36:4B:07:FE:63:5D:45:E7:57:3C:53:1F:5A:EB:89:16:3F:8F:60
X509v3 Authority Key Identifier:
keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e4:0d:34:8f:29:5f:14:f4:48:6f:27:76:f5:05:8d:6d:18:
fd:bb:d7:da:fa:64:86:4a:ad:cd:30:0a:42:69:1e:be:21:08:
a0:24:cb:a6:87:fb:84:1a:f4:75:56:01:04:36:85:c0:99:53:
ff:4f:51:8e:12:b6:6b:cb:48:0d:ba:c2:06:3c:d1:21:19:1d:
fd:01:4a:a8:e0:49:43:04:63:16:7e:e5:f2:98:56:ec:9b:64:
9b:a7:e2:8a:24:af:7e:6b:1d:31:44:8e:4a:99:e2:08:3e:13:
19:1c:26:64:4c:35:45:a3:40:f0:17:0d:67:5d:95:3e:48:e1:
5e:64:48:e0:ae:02:8a:78:25:ae:fc:19:58:23:8c:98:c9:ac:
e5:3c:6b:ff:fc:ec:e7:f5:cc:0d:28:d1:2a:8a:2f:0a:9e:b0:
4a:17:83:25:8a:03:ff:34:26:d8:f7:fd:ae:11:ca:e5:6c:30:
e1:aa:4b:c8:bb:53:33:8f:bf:b7:2f:9e:7e:2e:11:37:02:52:
67:ff:21:bf:4a:c6:72:2a:01:29:34:0c:e9:e8:fd:0d:07:23:
1a:66:e0:d9:c7:50:9e:f0:17:74:80:9d:86:8a:d0:e3:be:8b:
78:44:f7:e1:fb:50:7c:7b:2d:3d:be:9e:e8:5b:af:76:93:ac:
5c:7e:c7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:18 2025 by rpki-client