Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
File: t3RSzSU14-k1ff-IGIXq2RSQpGM.mft (raw, json)
Hash identifier: FXNwIXjbPZYRR5USSPSZF8iEjLKWON0nxOFyNoKEPz4=
Subject key identifier: 8A:FF:A6:61:5B:32:25:78:AE:F1:E9:E4:B4:9F:39:C5:08:85:3D:B2
Authority key identifier: B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
Certificate issuer: /CN=b77452cd2535e3e9357dff881885ead91490a463
Certificate serial: 0194BC3C6F359878BF54248B92E4E9A5F220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
Manifest number: 03DF
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: t3RSzSU14-k1ff-IGIXq2RSQpGM.crl (hash: VQGNx4da66gsdO1Ri2hI6IiSG6FluecVRsKcHisCm+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6f:35:98:78:bf:54:24:8b:92:e4:e9:a5:f2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77452cd2535e3e9357dff881885ead91490a463
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=8affa6615b322578aef1e9e4b49f39c508853db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f5:86:aa:d1:49:e9:cc:62:46:5e:bc:a3:d1:
fd:98:6d:24:e7:f8:f1:3d:b5:3b:c5:ab:0a:49:0b:
45:dd:19:b1:0e:f1:d3:44:cb:62:0b:5d:25:a6:13:
eb:59:56:5f:d5:01:03:b2:35:31:0f:f1:ef:cb:48:
6e:a4:50:6b:1a:bf:0d:5e:ab:85:69:a7:a0:36:32:
25:73:f5:54:a8:ab:1f:26:29:88:ac:16:85:e9:4a:
e2:a0:b0:8e:cc:87:66:49:fd:66:55:09:66:55:ea:
64:0f:07:85:90:3b:87:28:43:e0:0b:61:14:37:2d:
90:a7:d2:d3:a3:94:c1:0f:5b:0c:40:7d:f1:6b:47:
09:5e:80:1a:69:06:8d:86:20:fa:27:62:99:2d:e8:
df:8c:7a:0d:38:53:f3:f8:6a:fc:1b:9a:36:22:ac:
99:e1:63:61:df:6c:81:c2:4b:aa:72:a3:bc:c6:53:
26:21:88:3d:cb:95:5f:25:d7:7c:9a:51:13:cb:a7:
41:fc:90:6d:a5:4d:51:f6:e3:ae:03:2f:cc:1a:e1:
c3:25:7b:be:7f:5f:6b:2a:05:3b:d5:e3:70:2f:25:
0a:a3:69:1f:9a:5e:15:60:95:55:c3:05:1a:50:ca:
96:b8:bd:39:dc:31:90:2d:db:15:e4:97:b1:55:e1:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:A6:61:5B:32:25:78:AE:F1:E9:E4:B4:9F:39:C5:08:85:3D:B2
X509v3 Authority Key Identifier:
keyid:B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:dc:07:73:66:fd:1a:44:4c:f5:63:15:88:7b:d9:be:9b:a5:
58:ba:12:c7:77:d3:2b:08:b4:bd:b0:fa:94:0b:79:7f:5a:c9:
aa:9c:19:8d:2e:15:1e:16:e5:75:cc:3f:69:01:10:8e:ac:e2:
95:92:f4:3a:87:cc:6a:bf:b1:95:31:3d:9e:30:f8:98:81:ad:
8c:8d:26:02:2c:27:58:a0:09:e4:dd:75:b2:67:d9:61:bb:0b:
56:5e:3f:e3:2b:ea:3f:6f:5f:b8:d3:c0:96:a3:b3:01:52:d3:
b8:fd:ec:03:f9:eb:60:5f:ff:0b:e9:53:b8:48:ea:17:9c:18:
f5:67:f7:f8:7a:d3:88:35:61:c8:61:88:0b:99:45:6f:8f:57:
24:cf:6d:e9:c5:36:f7:cf:28:c7:c6:24:a1:fc:77:ba:8c:d4:
72:49:13:3f:ea:a1:22:b9:ea:17:ca:53:74:61:f0:38:1a:1b:
71:aa:48:f7:d0:ee:fd:6f:0d:d1:b2:4e:96:c9:52:e8:cb:16:
37:ca:c0:e7:53:67:b7:aa:48:94:4a:15:fb:e2:a4:f5:a4:4f:
d5:24:cc:b5:f8:ce:03:20:27:d2:19:ad:6d:40:8d:2a:3b:40:
fb:29:1c:a4:77:22:68:2a:bc:36:06:ef:83:28:54:ae:15:ea:
df:86:c6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:13 2025 by rpki-client