Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
File: L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft (raw, json)
Hash identifier: U/4rpFlPSuI8yD0NasUC8XZeEfSTzMZlCdZ+L9oF5XM=
Subject key identifier: BB:F6:98:36:0E:01:54:95:02:F5:92:25:04:81:C4:16:6F:07:16:B4
Authority key identifier: 2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD
Certificate issuer: /CN=2f70532664343cb3d2897023a127f60ba917a5dd
Certificate serial: 0194BC3C54A4E2B80B111486A75591AB63E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
Manifest number: 0A1C
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl (hash: 8LRL8NePNGf96RQFdW1G7yk7joTjdgz6whum2WViizc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:54:a4:e2:b8:0b:11:14:86:a7:55:91:ab:63:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f70532664343cb3d2897023a127f60ba917a5dd
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=bbf698360e01549502f592250481c4166f0716b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:70:69:ab:5d:9b:4d:4e:b3:ca:56:5f:a6:
ef:0a:fe:f0:19:5c:53:79:68:d1:01:48:7e:f2:d2:
89:21:eb:65:dd:53:d5:32:0f:65:43:ae:54:21:57:
77:30:95:69:19:a3:ed:f5:df:ca:55:95:6c:25:d5:
6c:55:47:78:0c:f0:cf:ab:f8:f4:6d:b9:03:cc:7a:
42:6b:27:53:41:05:1c:89:17:70:ca:c5:54:c8:54:
42:35:09:84:b0:15:f6:0d:77:55:87:30:0e:5b:87:
b9:ab:d8:71:6f:30:a4:e7:a1:df:62:36:9e:08:a8:
75:e3:4f:d6:43:73:ca:ab:ef:83:2d:16:d9:f1:f7:
b2:75:4c:d6:20:3d:91:8e:ce:6b:52:28:b1:5c:2b:
37:e1:5e:01:0c:f7:34:82:0f:2d:1d:18:1c:15:de:
eb:73:c4:b5:3c:35:0b:34:aa:6a:09:ea:bf:53:bd:
30:8d:9b:0f:34:86:7e:bd:0b:37:9d:91:87:de:5c:
78:44:b6:59:1c:40:42:a5:f3:7c:1d:8c:1e:d0:c6:
05:a5:7d:98:be:46:9f:6f:2f:0c:c2:3d:5f:d3:8e:
70:3e:ef:1f:40:96:43:59:71:a3:06:b7:2a:89:12:
a6:de:76:e7:65:76:7d:a8:98:4b:d9:08:d1:f4:bd:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F6:98:36:0E:01:54:95:02:F5:92:25:04:81:C4:16:6F:07:16:B4
X509v3 Authority Key Identifier:
keyid:2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:98:b5:e6:d2:df:b8:df:f4:01:0f:60:11:3d:63:7f:d1:04:
a3:d8:89:16:5f:0a:29:67:fc:1f:28:0b:8b:65:f0:8a:e1:92:
cf:49:ec:45:b0:12:2d:5b:63:ae:b6:1e:f4:c8:b8:98:46:eb:
ff:33:4a:70:ab:91:67:34:ff:b5:62:60:8f:f1:ec:81:f8:11:
e9:46:a4:01:cc:00:1e:ec:c0:cb:ca:22:f2:ca:c3:fd:81:18:
0c:c8:40:ce:5a:a8:14:21:14:45:9e:11:46:71:f3:6d:70:64:
32:5b:13:53:88:5c:d6:26:73:b2:37:af:13:2b:a6:66:28:4f:
71:85:9e:73:ba:a5:64:e9:5c:e3:8f:39:b4:70:c9:dd:4d:47:
f2:aa:18:52:13:de:b8:80:87:e3:8a:7b:46:07:b3:51:e7:7f:
2b:f9:f0:07:de:f0:6f:51:64:32:e8:93:47:45:25:bf:b1:cd:
f7:0f:ed:cf:42:f2:f6:21:5b:11:0a:39:bf:13:a6:f4:82:50:
19:72:d5:65:b4:ed:52:97:d1:a7:d8:0d:00:d9:71:74:de:29:
e4:85:78:40:31:44:7a:68:c0:7e:5b:82:f3:79:e0:7b:0e:bb:
dd:06:2e:bd:bc:66:ba:c8:7d:3c:2b:8a:8a:b8:40:70:8b:5d:
4d:ad:69:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:42 2025 by rpki-client