Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier: GFQ3D7SCXJ6LeYcPLXKlPkuUKm2j9AGISrEJAbR/RI0=
Subject key identifier: 8D:40:B0:93:47:C3:09:E9:0A:7B:B2:85:9F:19:DC:F2:9B:86:06:0B
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer: /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial: 0194BC3BBB13DC341CD56EC25BD4BDAD3C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number: 1138
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: DnsQiuD/CtLM6kOFPAKbSL6XBS+EPWlFrO1QJo873C4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bb:13:dc:34:1c:d5:6e:c2:5b:d4:bd:ad:3c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=8d40b09347c309e90a7bb2859f19dcf29b86060b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:2b:44:dc:c6:65:96:47:78:c6:15:31:a4:
25:d8:a2:a2:6d:77:f0:61:ea:d6:1e:df:79:bb:42:
4a:6e:f4:12:de:39:24:76:c4:0a:a2:d2:2c:ce:de:
34:f4:76:00:04:fa:8f:02:8c:23:9a:07:89:77:cf:
9d:40:19:9e:2e:e5:32:f1:25:75:29:6a:fd:bb:c6:
e4:a6:97:97:2b:d7:ad:ce:68:16:b0:0e:e0:73:14:
64:37:1e:a6:1e:53:91:74:3f:d5:08:fb:a4:9d:91:
81:ec:f2:7e:55:5c:46:25:ed:ac:d8:5e:97:ed:76:
31:cf:fe:6a:03:35:1b:91:ec:37:e1:4f:e4:3c:a2:
9e:ef:33:14:84:06:21:0a:6a:18:96:53:e7:1c:9e:
bb:5d:0e:b2:49:ec:cd:60:64:08:a6:2a:6f:87:66:
45:4a:b1:c7:c6:54:0a:77:84:5a:a8:d9:da:64:30:
66:96:3a:23:9b:a0:1b:76:8b:5e:31:29:6f:21:6a:
0b:77:98:27:fd:af:55:c7:46:c1:fb:a8:85:70:ed:
ea:81:fe:06:da:3e:97:b8:91:70:0a:55:6d:08:59:
57:c2:1e:02:ae:e5:be:10:48:3d:4f:95:fd:51:3a:
eb:65:fc:d7:97:fb:41:b3:b8:16:49:b6:c4:cd:30:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:40:B0:93:47:C3:09:E9:0A:7B:B2:85:9F:19:DC:F2:9B:86:06:0B
X509v3 Authority Key Identifier:
keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2c:a0:65:c4:57:d8:43:64:9f:a6:50:94:d3:4e:bb:38:88:
d2:6f:c3:c9:67:3a:87:8f:b9:b6:22:3a:7d:78:73:ea:2f:6c:
df:c1:4c:1c:4f:b1:9e:fb:f7:48:4f:e1:96:0c:25:21:c6:d5:
ea:1d:c6:65:9b:46:73:1d:34:ed:45:b3:95:91:0e:92:19:b0:
21:90:29:e5:bf:21:a9:f2:95:b0:45:ff:40:5e:65:fb:76:58:
fc:b5:9e:10:56:0e:4d:87:69:ae:43:bc:6b:b8:78:ce:08:71:
0d:29:7e:36:00:de:2d:f8:d7:ac:5e:2d:29:29:3b:99:43:96:
6d:60:21:31:5d:71:51:2a:b9:ec:de:35:4c:9f:c4:e3:fa:38:
c6:8d:d2:10:48:79:80:d9:27:8e:b7:d8:6c:38:4a:56:c0:b4:
ae:5c:da:9a:83:26:17:df:6f:88:f5:8b:be:3d:a1:bf:c0:20:
c3:82:f7:8b:0f:a7:2d:64:3b:da:af:af:d3:00:97:a9:ea:a5:
0e:e1:a9:04:a6:91:43:9c:a6:53:35:86:28:65:96:11:52:ad:
ba:25:9a:82:35:90:40:ae:cb:70:fe:4e:82:24:36:82:15:6b:
19:37:4d:11:1f:5c:19:b2:10:27:b5:ab:d6:9e:f8:1d:5d:5c:
6d:21:76:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:08 2025 by rpki-client