Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b4e1bb-346a-44b3-a0af-bc53f388fafa/1/kDYQzypUZDoKG2sVH6ZuMlAEy0o.mft
File: kDYQzypUZDoKG2sVH6ZuMlAEy0o.mft (raw, json)
Hash identifier: vRp78H7B5p+OoBH5+XcoQS++Nhh5Xqd0XdBK6BiKDzs=
Subject key identifier: F1:DB:5A:81:00:1C:A2:0C:F2:7B:8A:6F:EC:1D:4D:1C:09:AE:E5:5D
Authority key identifier: 90:36:10:CF:2A:54:64:3A:0A:1B:6B:15:1F:A6:6E:32:50:04:CB:4A
Certificate issuer: /CN=903610cf2a54643a0a1b6b151fa66e325004cb4a
Certificate serial: 0194BC72E2F2E415E921C6096CE7030F2801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kDYQzypUZDoKG2sVH6ZuMlAEy0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b4e1bb-346a-44b3-a0af-bc53f388fafa/1/kDYQzypUZDoKG2sVH6ZuMlAEy0o.mft
Manifest number: 0354
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: kDYQzypUZDoKG2sVH6ZuMlAEy0o.crl (hash: SO9GiU6Y0pPm1wQJaoIXjDZSQ1sfzak7fIEy54bvGfI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e2:f2:e4:15:e9:21:c6:09:6c:e7:03:0f:28:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903610cf2a54643a0a1b6b151fa66e325004cb4a
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=f1db5a81001ca20cf27b8a6fec1d4d1c09aee55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4f:45:d0:a4:ab:f8:96:c7:6b:81:d5:5d:91:
10:d2:09:9b:36:68:48:7e:c8:d7:21:bf:5f:1b:b2:
c2:27:21:9a:11:d4:dd:a6:7d:0d:e2:9d:21:e1:2b:
58:c9:e9:37:8d:c2:e3:a0:6d:c4:fc:03:5f:bd:e7:
ae:20:f1:13:51:41:8e:f7:30:da:43:50:de:13:df:
a5:3b:ee:55:81:ff:36:a1:76:9b:33:ec:72:90:de:
59:a8:17:eb:e1:15:b0:1d:c3:d2:73:d8:7e:a7:31:
af:3d:9b:47:bf:1f:8c:69:a0:16:b6:4f:be:0b:97:
2d:af:3d:e3:d2:a1:56:1d:42:69:80:44:96:60:f9:
2b:25:7b:ff:b6:53:cb:ed:0c:69:70:2c:9c:7e:34:
11:c9:6d:3c:fd:27:5c:a6:71:ee:af:82:5d:fa:c6:
bf:10:57:e7:1b:cc:88:4b:2c:98:8b:47:38:26:8d:
8c:ab:2a:e0:14:ca:b2:e3:a1:3e:0c:eb:c2:46:89:
27:cc:13:af:90:6f:30:a6:7c:fd:ca:4e:61:72:02:
3b:a6:b9:c4:ec:65:ba:95:38:fb:9a:7e:3c:93:31:
ed:a3:69:89:af:77:09:c5:86:bb:e0:f3:35:16:42:
71:64:33:ef:47:6b:c7:e3:3f:a4:c9:80:4b:5b:57:
a1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DB:5A:81:00:1C:A2:0C:F2:7B:8A:6F:EC:1D:4D:1C:09:AE:E5:5D
X509v3 Authority Key Identifier:
keyid:90:36:10:CF:2A:54:64:3A:0A:1B:6B:15:1F:A6:6E:32:50:04:CB:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kDYQzypUZDoKG2sVH6ZuMlAEy0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b4e1bb-346a-44b3-a0af-bc53f388fafa/1/kDYQzypUZDoKG2sVH6ZuMlAEy0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b4e1bb-346a-44b3-a0af-bc53f388fafa/1/kDYQzypUZDoKG2sVH6ZuMlAEy0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d6:c8:c9:ca:d4:77:d7:b8:80:74:5f:76:81:38:1f:3c:8e:
ce:60:b1:2c:27:b7:fd:da:c5:6f:97:77:9e:fa:c5:91:c3:de:
2f:49:5e:23:1b:01:9e:34:2a:6c:c9:78:f0:9f:99:14:bd:80:
35:72:c9:67:60:82:12:b6:61:f7:7d:67:af:a6:b4:1b:99:74:
02:cf:48:14:f4:7e:d6:32:df:a4:d2:24:a3:d8:ff:d8:3d:8c:
83:89:aa:c7:5f:d2:8b:d8:fb:e9:b6:86:bb:ca:d4:b4:d1:82:
dd:ec:f2:93:e5:23:d3:94:fa:d8:0c:8c:11:21:d4:c6:22:55:
f3:d1:a3:6b:81:cc:c7:bd:63:ca:ba:f1:7e:6b:bd:cc:52:fc:
04:bd:ee:e0:6d:da:63:f8:6f:83:85:82:dc:f5:7d:c1:b8:e1:
0f:80:64:3c:dc:05:35:11:20:b9:84:63:75:c9:19:ad:8b:44:
f5:17:f6:65:57:16:ad:08:9e:95:19:b8:77:83:16:51:22:5f:
c1:fa:ec:45:8f:35:3e:21:1e:43:c9:a8:b9:bf:42:48:fa:f2:
21:69:2b:69:be:db:bf:8a:29:0c:ce:85:3a:00:a2:59:42:7a:
5d:a8:88:a3:36:da:be:a4:f1:9c:42:64:4f:45:2e:73:74:d6:
c3:a6:64:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:26 2025 by rpki-client