Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
File: pffZAsirU0AJh6GIKrJ_fPoBt0A.mft (raw, json)
Hash identifier: kSL/UrX6nJ09mCGts20IXYBU34N+Az7sUDqyFGHFKFQ=
Subject key identifier: 83:6E:AF:0A:90:D8:34:28:C2:34:53:95:2E:A0:FF:42:69:31:9B:85
Authority key identifier: A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40
Certificate issuer: /CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740
Certificate serial: 0194BC72CA21E33D3A58A7B80CCDD649D634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
Manifest number: 83
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: pffZAsirU0AJh6GIKrJ_fPoBt0A.crl (hash: r8wRVtvvW7OPgxmrvQk4rqUKRbDne/zOu8f4gAZ39Qc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ca:21:e3:3d:3a:58:a7:b8:0c:cd:d6:49:d6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=836eaf0a90d83428c23453952ea0ff4269319b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:12:9b:ae:b3:fe:74:ce:ea:af:5b:89:59:94:
47:88:5f:1c:1a:39:e6:0d:d6:0f:52:4b:d5:b9:70:
e8:32:74:dc:63:f7:15:88:26:8b:87:3b:48:95:bd:
76:9e:40:4e:52:15:01:73:dc:91:10:c8:45:25:a4:
80:79:7b:84:4b:70:61:8a:04:00:69:b6:79:b8:db:
d9:4a:30:53:f6:3b:2b:5e:91:bc:26:f1:18:69:27:
50:5e:20:7d:06:f8:66:b2:9e:a2:62:15:a3:b7:b9:
23:ae:ec:ba:9c:a1:7d:9c:a9:6b:2a:be:ff:0f:2b:
35:89:a5:85:a6:c6:2a:a6:87:8a:7a:73:c3:d0:55:
0e:1b:1d:8f:f6:bd:b7:24:d4:30:b3:d6:41:4b:32:
63:b4:61:9a:87:92:e2:57:5d:2e:a5:65:c2:38:7f:
99:a8:1a:d3:0c:37:f9:ff:45:41:c1:c4:8d:08:46:
fa:21:89:3d:0f:c1:6b:7a:34:45:e4:d6:e8:12:64:
52:2c:80:09:b1:83:e8:75:55:92:e1:b3:30:ce:86:
7a:29:2e:71:16:1f:44:70:26:20:e9:21:82:04:ee:
78:cb:69:73:f4:18:ce:61:44:51:85:d6:b6:e4:dc:
44:a2:ca:96:79:b8:f2:42:95:8e:91:d5:2e:83:a3:
7c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6E:AF:0A:90:D8:34:28:C2:34:53:95:2E:A0:FF:42:69:31:9B:85
X509v3 Authority Key Identifier:
keyid:A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f6:34:5c:4b:13:29:fe:81:a7:99:c9:11:a5:9b:c1:85:d7:
fc:ec:58:3e:d3:3e:90:a5:a8:cc:45:5a:fb:74:24:4f:7d:26:
2f:1d:49:6a:ca:72:05:4a:9a:ca:f6:1f:fb:d8:19:c4:30:83:
b7:ee:c3:94:ee:f6:21:81:ba:cd:46:16:6a:5d:c7:8d:18:4c:
84:fb:30:7c:65:a0:d6:87:5c:7e:98:79:c2:92:37:97:72:3d:
79:82:ed:72:26:ee:44:64:30:9e:3b:0d:40:ed:db:59:91:8f:
25:fe:5a:69:66:b4:ea:10:09:0d:8d:45:2b:92:bd:1c:c9:fa:
c4:61:c6:d9:a1:32:51:ec:f1:09:2b:67:1c:cb:c6:14:3d:61:
f2:a2:a8:2e:51:e6:e8:23:86:c6:b6:d1:13:bb:d4:35:01:7e:
81:2c:88:66:9b:36:80:82:c2:91:38:81:5a:3f:2e:60:7a:ea:
7c:2e:cd:42:87:07:3d:db:5a:5b:d5:08:00:ce:61:a7:3d:90:
a6:e6:f3:97:bc:b4:97:a9:2c:29:c1:b4:c5:47:99:9a:19:62:
33:3b:d6:c8:d4:7a:e6:6e:3e:13:0f:34:99:78:58:94:8c:89:
f5:cc:a6:13:e3:18:e7:26:58:22:09:b5:8c:f7:d0:33:f2:57:
12:0a:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:03 2025 by rpki-client