Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
File: 8p5p65n-wSVjcxHUMFL3kx2P3TI.mft (raw, json)
Hash identifier: 0v4sMigrdgeziVutQLA7LiFmXxUk/k4NEwqlg6/ps+g=
Subject key identifier: CE:86:8D:B8:AA:C4:2B:F9:F5:44:BE:E7:69:2F:A4:05:95:01:A9:FD
Authority key identifier: F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32
Certificate issuer: /CN=f29e69eb99fec125637311d43052f7931d8fdd32
Certificate serial: 0194BC3CB7A95DF81C7A5D91C342B87A6FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
Manifest number: 03C4
Signing time: Fri 31 Jan 2025 12:01:23 +0000
Manifest this update: Fri 31 Jan 2025 12:01:23 +0000
Manifest next update: Sat 01 Feb 2025 12:01:23 +0000
Files and hashes: 1: 8p5p65n-wSVjcxHUMFL3kx2P3TI.crl (hash: PYDGh6kMOlndtk27xS7Am5gx3F8IENz50SBReoXQ/Ag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b7:a9:5d:f8:1c:7a:5d:91:c3:42:b8:7a:6f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29e69eb99fec125637311d43052f7931d8fdd32
Validity
Not Before: Jan 31 12:01:23 2025 GMT
Not After : Feb 1 12:01:23 2025 GMT
Subject: CN=ce868db8aac42bf9f544bee7692fa4059501a9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:de:36:95:1b:d7:e9:c7:3a:73:95:35:90:
91:e6:af:fb:4d:1d:47:dc:2f:4a:80:01:eb:11:2b:
ef:04:6c:15:bb:77:be:12:8f:f4:e1:af:cf:00:64:
9e:8e:06:50:1d:25:81:2e:e5:85:59:df:a0:e1:af:
ae:d2:68:42:58:09:29:7e:51:26:55:e1:bc:37:31:
6a:a9:9b:be:98:25:29:15:a3:b4:49:5f:c5:b3:44:
b2:53:f4:5f:55:72:4b:a3:56:31:d9:1d:ed:4c:92:
79:b3:87:18:1a:e0:f3:2d:73:fc:2b:68:79:74:f0:
eb:e0:cf:f6:64:49:20:a0:02:bd:f7:14:0c:3c:69:
46:d7:ff:02:af:f2:0f:52:a9:da:08:35:3c:69:a7:
fb:f8:48:5f:81:2c:22:4d:a0:3f:e9:52:13:1b:1e:
5c:4b:a0:25:2f:96:66:a6:43:52:36:51:58:5b:b3:
bf:04:b2:eb:90:5b:dd:76:73:bc:bc:e2:53:66:13:
98:2c:65:06:cb:67:05:26:84:ea:9e:b6:86:49:e3:
b4:be:8c:8e:21:dc:3c:86:8e:6b:9c:4d:cc:93:f0:
23:79:1f:a2:0f:33:e6:4b:66:98:3b:21:29:96:07:
0e:d5:24:ec:07:e9:0b:84:27:69:ab:a2:22:6b:42:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:86:8D:B8:AA:C4:2B:F9:F5:44:BE:E7:69:2F:A4:05:95:01:A9:FD
X509v3 Authority Key Identifier:
keyid:F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:74:28:2d:71:04:00:6d:ef:49:cc:fa:e1:23:d4:f2:a5:8c:
82:c4:8a:64:47:da:80:e4:7c:60:b2:dd:6a:9e:ef:b0:75:6f:
b5:0f:92:d1:e8:94:43:ba:4b:42:7c:34:64:cb:2c:29:b0:d4:
d5:4c:f2:b2:77:d4:54:91:aa:cd:3b:a9:01:8c:8f:96:63:f7:
33:b9:49:c7:2f:a7:32:7e:df:f7:7a:06:05:c9:c0:57:6a:96:
53:53:19:2d:84:3f:9f:bd:38:cd:53:29:b1:b5:4c:da:68:9f:
0d:15:6c:da:89:a9:0e:63:cc:a6:4e:f8:82:95:c5:a0:4a:3f:
d2:e4:c1:8c:d3:27:e2:fb:dc:db:9b:34:7d:5d:b0:fe:d2:9c:
ea:27:b0:9e:8f:83:87:9c:1e:28:68:55:bc:07:16:24:70:83:
28:d3:a3:8e:cb:99:f5:2a:76:e1:a5:2e:28:51:16:c3:df:d7:
95:01:db:94:c5:f9:39:31:66:d7:c0:d4:2a:5d:05:f3:87:5a:
16:a0:2f:3a:0a:d0:a5:8f:4d:1e:03:5d:4c:53:89:b1:02:6f:
bb:11:13:1c:f7:1d:1d:1a:07:35:49:fd:a4:b3:b9:7a:02:b3:
19:4f:39:62:9f:78:a4:90:d5:cb:6f:b5:c1:e9:fd:b1:49:5b:
11:45:92:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:11 2025 by rpki-client