Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
File: l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft (raw, json)
Hash identifier: ncYSLc7ml7SVX+QnvMHC8XwN3e3CnjpH7qQYFf6sxDk=
Subject key identifier: DE:36:9A:8F:AF:71:3D:AC:52:1B:5A:1D:1A:55:47:E3:A3:44:5C:64
Authority key identifier: 97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
Certificate issuer: /CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Certificate serial: 0194BC729947BF25CB67D5823D78CDF625A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
Manifest number: 0319
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl (hash: ixsc9FRTJfSTk8snl39G4Mr2q9ZNbP+WkuAJioAk+CI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:99:47:bf:25:cb:67:d5:82:3d:78:cd:f6:25:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=de369a8faf713dac521b5a1d1a5547e3a3445c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:03:d4:b4:a3:ec:80:b9:a1:f3:d2:7c:c9:5a:
55:cf:e4:5f:33:59:7a:d5:fc:b0:98:20:22:17:54:
23:9f:b7:23:ca:f5:3a:e6:5c:49:65:6f:3f:16:92:
e1:49:70:1e:b2:d0:54:fe:ce:5b:ee:6d:91:79:14:
c0:33:d0:71:4b:93:0a:87:cc:39:fc:a3:59:f9:1f:
d6:27:11:42:29:5c:bf:35:e1:13:9d:41:e7:4e:2b:
2d:6a:2b:2a:4a:1d:b2:2a:2a:dc:82:06:87:27:e0:
19:54:3d:60:c7:5e:38:82:d5:3c:3d:6c:d1:81:21:
63:67:0b:2a:51:82:19:7f:fc:53:1b:6f:91:be:c1:
6d:5a:27:5a:56:8d:50:f0:f2:2d:92:93:d2:67:dc:
14:97:f7:7c:e4:25:77:7c:45:03:fb:e0:2e:57:54:
bf:2f:e5:b6:f6:1f:86:6f:b4:a2:80:02:e6:57:39:
5d:44:27:cb:b3:3d:15:85:73:8b:1f:97:7f:fe:34:
b6:58:0b:ce:5e:76:3f:3c:67:4b:9c:ea:7d:44:9f:
36:94:22:86:99:01:cf:4b:fe:c1:a5:5c:6a:e3:a1:
b7:66:63:35:60:5d:91:ed:33:c8:c6:ff:be:05:ea:
92:a0:25:13:a3:b2:09:9d:51:88:64:e3:35:c1:5d:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:36:9A:8F:AF:71:3D:AC:52:1B:5A:1D:1A:55:47:E3:A3:44:5C:64
X509v3 Authority Key Identifier:
keyid:97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:52:c5:10:b6:28:99:d6:e5:8c:bb:75:0e:27:2b:fc:8b:5e:
14:6b:67:82:4e:d8:bc:7f:70:b0:5c:c9:20:bf:62:82:d6:10:
ac:9a:3d:37:a1:e3:84:79:81:fc:bb:33:7a:ec:2a:05:39:11:
2f:31:29:29:1f:40:32:8f:b3:d0:ed:d6:72:ac:ed:85:13:d9:
88:2f:d3:a6:0a:63:32:50:0b:d9:ac:6b:c7:b1:e8:e3:a0:36:
61:40:a2:a6:02:3e:b4:b7:22:5e:d9:f7:0a:35:28:ee:d6:b3:
9b:03:b8:43:80:34:13:49:32:31:df:31:4a:31:34:31:f6:76:
c8:95:27:fc:e8:03:3e:f3:e7:eb:4f:fd:20:15:8e:fc:26:cb:
07:84:17:c9:e7:49:cf:fe:6f:57:30:43:ff:d6:aa:f9:0c:14:
d1:b0:f1:5c:bc:76:e8:ec:61:2a:46:f9:dd:4e:88:27:00:bd:
60:1a:d7:e2:e7:b2:7d:a1:8b:34:dd:b9:f1:33:af:1e:9e:33:
c1:73:93:53:58:84:1c:a8:b2:63:0e:82:22:b5:52:1d:d0:38:
4c:2a:51:d7:df:d9:cf:46:50:89:55:26:e1:08:fc:be:cc:96:
c3:ad:b6:89:3a:b5:15:25:bd:76:a7:62:d6:9a:44:6d:49:1c:
93:77:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:55 2025 by rpki-client