Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
File: rfjUKjroBc6WqpT66fW0QG_0VZk.mft (raw, json)
Hash identifier: 5s2FgLuYNxFf7DZB3d9BeWMr6MXkGG6u8ixo/TbTaMo=
Subject key identifier: FC:90:7A:2C:F2:1F:25:E0:49:F7:5D:4A:59:AA:D8:6F:2F:38:CF:19
Authority key identifier: AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99
Certificate issuer: /CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599
Certificate serial: 0194BC72E5E4810B1F9066C17DD24084C306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
Manifest number: 0191
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: rfjUKjroBc6WqpT66fW0QG_0VZk.crl (hash: mPA3+nx5bCOreec+zsrPcF4WuI2yE3X5DZrkIygMfaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e5:e4:81:0b:1f:90:66:c1:7d:d2:40:84:c3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=fc907a2cf21f25e049f75d4a59aad86f2f38cf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:87:0a:33:3b:2f:9d:de:9c:72:6d:81:a1:
2e:24:7c:f7:07:ab:3f:1c:12:c0:d1:76:fb:c9:e0:
54:e9:93:df:39:4a:8d:e4:b1:5b:03:bb:d4:75:08:
af:a4:97:22:70:90:2b:18:d7:45:3e:e0:45:fc:5e:
69:dc:4d:f9:6f:24:22:a2:82:af:ff:da:e3:92:12:
1e:94:8c:3a:77:45:a0:b3:82:7d:87:ae:4a:7f:cd:
6a:6b:c9:79:66:86:a6:10:dc:ee:c6:8b:d7:7f:f0:
40:94:de:9d:53:ff:2a:86:84:55:75:87:b1:88:ca:
83:10:f5:63:dd:91:1c:1f:47:06:4e:6e:c4:30:41:
90:44:9d:85:e3:07:01:5f:f4:54:25:c0:da:53:e0:
16:e4:98:61:89:07:8e:52:2f:67:24:9a:6c:2c:17:
8c:87:3f:f5:d8:fc:9b:f7:e1:63:50:ff:d6:fb:fe:
f6:6a:dc:02:a1:22:8f:ed:c6:a4:eb:bf:53:36:dc:
e8:a1:6c:b0:91:89:20:47:88:d4:f9:bd:e0:34:dc:
85:8a:7d:44:f1:7e:88:35:dd:04:01:46:81:fe:eb:
fe:46:43:be:e2:e7:0b:16:b3:02:52:cc:ea:dd:a7:
ef:e2:61:81:ac:c5:47:0a:b6:9d:84:a6:20:25:b5:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:90:7A:2C:F2:1F:25:E0:49:F7:5D:4A:59:AA:D8:6F:2F:38:CF:19
X509v3 Authority Key Identifier:
keyid:AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2e:86:bc:2c:c5:87:71:03:13:c2:fa:2c:73:9b:1a:8d:c5:
c5:59:38:1d:c1:66:fd:15:94:63:43:fc:41:bb:4d:98:02:92:
82:62:25:47:71:a5:84:a2:40:ae:be:a4:0f:da:6f:ae:07:e2:
7b:74:03:28:29:53:c6:87:10:71:76:33:4d:00:a9:e7:af:54:
5e:ef:31:21:51:42:43:fa:89:13:17:bb:ae:c0:c9:b6:7a:90:
12:aa:9f:98:1a:bc:85:69:31:9a:b6:c7:f5:7e:68:c6:df:61:
9a:25:18:a7:06:81:f0:43:cf:5a:08:f8:5a:c7:9c:1b:2e:73:
6b:a7:1d:8e:f1:4b:13:cc:cd:dc:2f:f2:69:05:13:df:0b:7b:
c9:a3:10:6d:83:cb:1c:b7:fd:ae:f2:14:8d:02:7d:fc:8d:61:
d3:df:d7:fa:de:66:3e:29:68:32:6d:da:6d:30:86:98:92:61:
3e:97:af:30:e1:d0:6a:f0:5b:77:fd:47:a2:3f:e2:00:d3:5d:
ca:95:33:ea:62:e5:e4:96:00:68:c7:5f:7c:2d:be:0f:54:9d:
5a:3f:14:cb:6e:6c:5c:df:9d:09:f9:f4:ef:44:4d:a0:ed:a8:
2d:cf:b4:77:61:fc:8c:8c:02:de:98:c1:a4:6f:4b:44:67:a1:
3d:32:04:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:28:21 2025 by rpki-client