Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
File: rV3Hd3t3orNHfGernSbMeqAvOIk.mft (raw, json)
Hash identifier: LRJpKHCsEqgauE2dk4IqYvrippjCNWQPiiRE9zmsNcg=
Subject key identifier: A0:F8:AF:26:EF:A7:44:3C:EE:66:CA:48:F6:3F:96:26:74:8A:01:31
Authority key identifier: AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
Certificate issuer: /CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Certificate serial: 0194BC3C32309EB8A8180C33ABF07E88498A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
Manifest number: 13A5
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: rV3Hd3t3orNHfGernSbMeqAvOIk.crl (hash: xOxr3eZo8H2SIFw3DMbAgUVBUkjaJkaXgGJP93nrgPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:32:30:9e:b8:a8:18:0c:33:ab:f0:7e:88:49:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=a0f8af26efa7443cee66ca48f63f9626748a0131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:fa:ec:e7:62:0e:f8:a6:7a:06:17:61:5e:
2f:c1:a0:75:86:b8:02:32:3d:35:53:3f:d0:9e:e5:
62:f6:62:16:f7:e6:29:6d:81:a4:d7:56:c6:ee:51:
24:03:25:2b:b6:d0:54:8d:8f:9b:35:96:c3:ab:3e:
85:84:cf:84:68:5e:25:00:49:e7:af:3b:68:24:45:
35:42:f6:58:35:90:1c:d2:f1:48:10:81:5d:69:c3:
eb:89:0f:f2:31:1f:2f:63:1e:85:b1:4c:e2:ad:9d:
8d:69:94:c7:04:0f:71:15:cc:cd:bb:06:af:53:38:
74:ae:a9:4e:5e:87:19:1e:66:8d:7f:67:97:cf:6a:
b2:8a:33:9a:ef:9e:b0:11:2f:6d:67:2c:d0:ac:a3:
d8:27:23:9e:e4:da:39:02:92:a0:b3:d3:5a:89:a0:
54:1c:6e:71:cb:b0:c2:af:c5:70:a8:0b:7b:b1:e0:
ac:b9:b6:93:a3:ce:b0:ab:ef:60:3d:16:aa:3b:52:
a8:96:ce:f0:07:e8:a1:30:26:df:aa:f9:9f:7a:22:
60:f0:22:fc:2b:89:7a:91:28:de:02:26:fd:05:a1:
2d:6b:28:3c:18:f3:e9:90:46:24:66:40:ab:5e:e8:
33:b7:49:29:44:63:32:e0:29:26:c1:e4:49:a1:0a:
f0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F8:AF:26:EF:A7:44:3C:EE:66:CA:48:F6:3F:96:26:74:8A:01:31
X509v3 Authority Key Identifier:
keyid:AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:29:b6:7a:fd:21:c5:95:7f:56:0b:83:64:52:6a:1e:a0:a7:
bd:75:7e:2a:70:82:5a:6c:57:e5:bf:42:8f:53:32:1b:36:7f:
3c:e4:36:5a:e2:bb:77:a9:d7:31:ae:76:29:5d:f3:34:07:73:
49:8a:06:c1:d0:d0:23:87:35:cb:b6:9e:cc:f1:94:31:61:f9:
8a:40:62:cb:fc:08:de:7c:a4:05:c6:67:ce:b5:0a:87:5d:e7:
89:d1:fa:89:f7:d3:80:52:1c:02:58:cc:29:1e:70:9e:4f:75:
9f:4d:18:7c:94:de:d3:b7:f7:90:b2:20:f3:68:dc:a9:ee:a1:
35:38:41:b3:ac:14:0e:5e:c6:de:98:24:11:65:09:e5:f4:ff:
71:77:01:62:5b:a3:a9:fd:2d:cc:37:12:67:d3:7c:70:b7:c5:
d5:b1:45:14:30:65:c5:6b:94:de:63:de:55:4e:f7:d5:bd:c9:
9f:18:86:ac:c8:fb:8d:02:56:93:48:86:f1:24:07:b2:c3:85:
36:6d:ee:75:14:43:4a:6a:1a:ab:19:f3:a9:f0:55:af:77:48:
9a:ab:17:59:c0:f2:a9:af:0f:52:98:bf:e6:e5:1b:53:8e:34:
f9:54:8d:7c:d4:d1:0b:e3:40:e5:15:85:8b:d8:54:81:3d:93:
99:02:2f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:09 2025 by rpki-client