Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7570f8-c2a8-4dd4-9ef2-f69d7397458e/1/3ySnzbcPLOjN3aURtEWeA0_375s.mft
File: 3ySnzbcPLOjN3aURtEWeA0_375s.mft (raw, json)
Hash identifier: adG6vAI0QGc+Pc0tgOrj4+GW/x5aDlB7vnh6Mj1Oqj4=
Subject key identifier: D8:C2:CF:F7:66:95:E4:E1:B5:72:35:F6:B4:89:7A:A4:0B:36:C3:E6
Authority key identifier: DF:24:A7:CD:B7:0F:2C:E8:CD:DD:A5:11:B4:45:9E:03:4F:F7:EF:9B
Certificate issuer: /CN=df24a7cdb70f2ce8cddda511b4459e034ff7ef9b
Certificate serial: 0194BC3C14429A9145049113AF8F0145C1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ySnzbcPLOjN3aURtEWeA0_375s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7570f8-c2a8-4dd4-9ef2-f69d7397458e/1/3ySnzbcPLOjN3aURtEWeA0_375s.mft
Manifest number: 0BD5
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: 3ySnzbcPLOjN3aURtEWeA0_375s.crl (hash: 0wl8KIuVn6Q+7ebryIj7IEYCuXxBVKKeLrD1aXcQ9sA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:14:42:9a:91:45:04:91:13:af:8f:01:45:c1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df24a7cdb70f2ce8cddda511b4459e034ff7ef9b
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=d8c2cff76695e4e1b57235f6b4897aa40b36c3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:e3:fa:d1:3a:59:16:43:6a:6b:34:f0:2d:
43:d3:7e:4f:f9:23:f7:06:96:fc:6d:29:0b:39:09:
0d:7b:25:dc:98:b9:c2:d4:c4:7b:5c:a4:3e:66:6d:
7e:8a:11:a3:b0:97:08:84:6b:aa:15:08:39:73:0b:
89:7e:d2:00:b8:9e:4f:f1:d5:e9:dd:81:a1:d5:d2:
bf:f4:bd:85:79:db:43:64:37:7d:bf:48:7e:57:87:
45:98:14:bf:67:ca:31:e2:9d:08:cc:d2:53:97:01:
0b:48:76:8f:a4:1f:8e:16:92:59:44:71:c2:3d:04:
94:3a:6e:7a:fc:3a:81:cc:9b:05:88:07:4a:89:06:
77:1a:85:69:b4:4a:ea:4a:ea:27:8a:a6:fb:a7:89:
4f:01:22:69:e1:7a:ae:88:d5:76:a3:d5:9c:75:af:
48:78:23:86:c6:b6:e3:27:61:86:04:a1:d5:f8:0c:
5f:23:7c:88:25:b0:ac:7c:fb:5e:fa:5a:95:09:85:
49:7c:bd:60:9f:28:d8:6a:1e:85:1c:d4:ba:da:c8:
07:16:f2:af:47:39:16:67:60:b8:9f:0c:df:6a:c8:
ad:1d:76:ea:ec:a5:5b:13:00:c7:5b:f3:a1:0d:0e:
65:40:f1:61:28:91:74:16:56:46:8d:3a:e5:48:88:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C2:CF:F7:66:95:E4:E1:B5:72:35:F6:B4:89:7A:A4:0B:36:C3:E6
X509v3 Authority Key Identifier:
keyid:DF:24:A7:CD:B7:0F:2C:E8:CD:DD:A5:11:B4:45:9E:03:4F:F7:EF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ySnzbcPLOjN3aURtEWeA0_375s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7570f8-c2a8-4dd4-9ef2-f69d7397458e/1/3ySnzbcPLOjN3aURtEWeA0_375s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7570f8-c2a8-4dd4-9ef2-f69d7397458e/1/3ySnzbcPLOjN3aURtEWeA0_375s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:84:8a:45:bc:6e:92:12:1a:dd:c3:e7:7b:bd:94:c9:53:fc:
21:15:67:61:94:fb:dc:24:31:db:56:02:31:e2:e9:dd:1b:76:
4b:94:3a:d8:18:2a:f5:4d:49:af:42:fd:e4:2c:d4:08:37:5e:
32:c4:a3:92:f7:64:ce:59:38:8a:87:fc:7f:11:b9:63:35:61:
05:db:35:9f:16:b9:4f:b4:eb:53:3f:8a:e6:19:9e:d7:ff:4d:
54:5d:23:3e:ac:14:9b:4d:02:54:d4:ba:91:c1:b9:ed:28:f5:
84:f0:f5:48:9e:bf:89:10:bd:03:4d:fd:fe:53:8f:bb:31:8e:
69:d9:7e:99:d6:2a:fe:e3:c6:6f:4f:b6:0e:e1:61:ef:e5:4c:
30:d6:87:08:9d:10:c8:ed:96:e3:ba:ef:d1:85:39:30:f8:63:
e8:8e:6c:f1:ae:66:e5:94:b0:cb:d2:4d:1f:93:43:21:3a:b9:
ef:a0:6c:c2:ab:92:04:9b:81:8e:70:bf:b4:2c:b1:bb:f7:6f:
cd:d8:a4:0b:24:ca:63:de:ef:0c:08:3d:51:bc:95:c6:77:fe:
ae:cf:2f:2d:56:f8:6a:81:f3:1e:5f:fb:02:9d:ca:41:bb:79:
41:ae:f0:f9:3e:ac:6b:20:e4:14:0b:93:ea:17:01:87:4d:d1:
d7:83:0d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:36 2025 by rpki-client