Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.mft
File: FlazvdJs8CcTOSyn3Vnq9czsEhE.mft (raw, json)
Hash identifier: MLzIsbU5rJBZpfC060cWI3WnZlYm4XpLN9HYQB38UGk=
Subject key identifier: 2D:BB:66:90:79:ED:D7:05:1F:C9:F2:FC:0C:BE:A2:4A:14:C8:A3:2B
Authority key identifier: 16:56:B3:BD:D2:6C:F0:27:13:39:2C:A7:DD:59:EA:F5:CC:EC:12:11
Certificate issuer: /CN=1656b3bdd26cf02713392ca7dd59eaf5ccec1211
Certificate serial: 0194BC7288434FEEE018A1DD7551B9C9404D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlazvdJs8CcTOSyn3Vnq9czsEhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.mft
Manifest number: 0948
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: FlazvdJs8CcTOSyn3Vnq9czsEhE.crl (hash: cdqDlWQizM9GhFUnr2QdtV/jYvpK6vJJTGW39srTqxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:88:43:4f:ee:e0:18:a1:dd:75:51:b9:c9:40:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1656b3bdd26cf02713392ca7dd59eaf5ccec1211
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=2dbb669079edd7051fc9f2fc0cbea24a14c8a32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:1e:0e:89:78:ca:50:42:e5:e5:f3:80:a0:
33:58:93:9e:78:b6:3c:fe:3f:a8:58:7e:71:94:bd:
b8:51:42:aa:30:cb:e5:a4:46:48:ea:a1:e4:74:63:
12:20:24:87:fc:b5:be:4d:13:48:dc:30:7c:eb:8d:
5f:18:6a:38:c4:fa:08:f4:97:bb:72:aa:5a:78:6a:
d1:c4:b1:0c:fa:f9:59:11:ff:6d:35:0c:4c:3f:1f:
6d:2d:78:52:13:94:a2:24:36:0a:72:01:82:ce:b3:
55:ea:93:94:03:3f:82:4c:b3:72:ce:48:d5:44:b3:
93:07:44:d6:af:38:c1:94:f1:89:23:e7:c9:6a:23:
4c:55:f0:65:31:8b:d0:3e:16:b0:16:7c:a4:30:39:
b5:91:44:5f:59:78:3d:44:38:c5:bd:5b:8c:2c:f5:
33:00:14:98:a2:92:c6:04:27:61:34:fc:90:f7:09:
9a:d5:51:7e:d1:43:c1:18:eb:af:9e:0e:fa:48:17:
20:3b:57:18:11:08:75:4c:4c:c2:d6:8a:4b:21:f5:
e4:62:e8:01:33:c8:84:f8:c5:a9:44:c7:cf:69:26:
92:dc:95:c4:e3:ef:9c:72:17:84:8b:54:89:c8:46:
e3:e6:54:e7:83:82:09:8e:1f:e5:c1:67:e7:33:93:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BB:66:90:79:ED:D7:05:1F:C9:F2:FC:0C:BE:A2:4A:14:C8:A3:2B
X509v3 Authority Key Identifier:
keyid:16:56:B3:BD:D2:6C:F0:27:13:39:2C:A7:DD:59:EA:F5:CC:EC:12:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlazvdJs8CcTOSyn3Vnq9czsEhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/54ac16-aa6a-427b-9979-01cb8936122d/1/FlazvdJs8CcTOSyn3Vnq9czsEhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:44:62:f7:bb:d2:f2:58:27:2c:97:66:5f:c3:26:68:36:14:
da:d9:33:e9:3f:6d:fc:f8:28:77:48:06:1b:b6:e5:b4:92:25:
45:93:d0:bb:fa:24:d5:d2:8c:3e:69:85:c4:22:5c:10:53:4d:
42:4a:60:06:3d:32:e1:8d:12:60:24:f7:8a:bf:95:53:88:71:
f3:1a:dc:67:05:77:07:3b:c8:f5:96:e4:62:60:eb:03:c5:94:
50:b4:42:22:64:aa:a7:0e:b4:8a:99:67:8b:fe:de:33:44:10:
f1:0a:06:36:0c:f7:fc:fa:5f:cf:6a:c8:ba:da:db:c7:27:24:
67:99:4b:e0:71:07:95:cb:50:ca:1d:53:89:b6:79:b8:73:7c:
1c:23:55:35:b5:44:20:c0:92:35:88:a2:61:e8:19:7d:90:69:
c2:30:1b:00:6b:60:e1:02:94:41:83:71:28:cb:a0:f1:aa:b1:
e8:bb:2d:93:67:83:e0:ad:28:b2:c6:7a:50:74:a5:e3:83:58:
03:0b:1d:9f:81:f2:33:e0:75:6b:56:a7:64:be:c5:7c:16:60:
80:f1:65:15:d8:98:46:3c:a9:00:74:66:a5:a3:de:09:84:74:
3f:7c:cd:a2:8a:1b:b2:b6:8f:2f:7c:89:df:bb:64:b8:61:7b:
d5:52:56:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:31 2025 by rpki-client