Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier: 1S2MlkblxpkVTgg9p3+zYpOUU0owopI8KVJiLtduGTk=
Subject key identifier: FF:FE:74:34:6E:87:96:07:61:9A:28:0C:8F:2E:66:82:EB:2E:0B:5B
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial: 0194BCA96B579521E009335A321BC19E9368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number: 0FDD
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: KOInjBSR7gLBLdtyAITVQ+IIQdUS2xm9QnblLzcqYi4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6b:57:95:21:e0:09:33:5a:32:1b:c1:9e:93:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=fffe74346e879607619a280c8f2e6682eb2e0b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:bb:8e:4b:7d:ea:ab:b8:6c:45:6a:92:f2:
dd:72:d1:5a:9d:4c:8e:9b:2c:b5:6b:fd:f3:b3:7d:
0b:0b:17:26:06:f2:03:e7:a3:ee:e4:9d:f9:05:91:
21:cd:13:99:2d:df:3e:9e:78:18:86:69:77:a6:d9:
75:94:15:fa:92:57:8a:be:56:09:08:d9:13:04:8d:
69:7a:ab:18:2a:6b:b4:ea:06:da:22:b0:46:82:42:
7f:25:42:b5:d2:41:41:d0:2c:58:1e:2b:e9:23:1d:
d6:6f:8f:27:d7:23:80:18:6a:ca:b2:74:9b:15:08:
d0:b5:48:7e:fc:86:84:14:d7:9a:14:26:3e:8a:68:
02:c1:19:43:33:7d:fb:87:49:36:40:b7:56:0e:11:
98:b6:64:0a:33:b5:3c:80:5d:23:54:4c:bc:30:37:
de:fb:a4:90:6b:e7:67:9e:43:0d:c5:c6:5c:41:27:
df:f0:77:7c:db:0f:93:4d:90:2b:04:79:c7:84:91:
ff:de:ff:90:7c:b5:80:e9:a2:11:9e:92:8e:8f:98:
6f:41:62:b0:1c:09:dc:48:b8:e9:72:a3:99:01:82:
96:a5:94:be:0b:24:6c:3e:6b:96:06:42:8c:38:55:
3c:af:24:f1:2f:49:d6:7b:1d:82:72:b3:7f:a0:16:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FE:74:34:6E:87:96:07:61:9A:28:0C:8F:2E:66:82:EB:2E:0B:5B
X509v3 Authority Key Identifier:
keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:04:00:95:e1:db:b4:bf:d6:42:60:ea:14:87:0d:2a:b2:08:
a1:db:c5:df:df:ca:1c:76:cb:a3:3e:37:f8:2f:84:0b:4f:3c:
ee:fe:5f:a6:0f:93:9b:3c:8b:96:ec:86:64:0b:3a:5e:80:b0:
65:c9:9b:55:3c:22:f8:7a:11:0e:e0:b9:1f:cb:a9:af:82:5f:
9b:8b:51:c5:70:92:6b:b1:d4:11:fd:e0:85:81:e5:86:b2:0b:
ad:37:7e:7a:2d:f3:9d:3b:d0:5b:db:9e:69:33:e0:40:fc:6f:
60:5b:15:23:ff:73:d9:0c:60:13:54:e8:9f:43:26:72:9f:a9:
bc:a0:6f:71:b9:ea:40:7a:7c:a4:a9:a8:c8:53:de:4c:4a:36:
e6:b9:87:19:c9:36:26:5c:ea:34:20:1d:8f:14:97:3b:f0:62:
30:55:43:17:44:1b:4b:ad:c5:c7:a7:d9:03:77:9a:a6:97:59:
94:1b:eb:49:12:e0:55:d6:88:ef:39:58:a4:9d:41:5c:fe:7c:
cc:18:64:7e:9b:a6:b5:59:fd:b8:ba:ad:87:17:b8:66:fb:84:
ff:f6:11:36:34:ae:81:98:1e:af:3f:b7:e4:2f:b3:b4:9b:60:
38:ac:dd:14:9b:e0:47:8f:67:15:12:95:89:d9:23:63:75:9f:
f4:33:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:53 2025 by rpki-client