Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File: p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier: 3JgeMbzby0ri/dvAqVRBj0kSaN4Z2T2bQ/OEtEu77+s=
Subject key identifier: 21:65:0F:8D:7C:18:BD:E0:A6:EE:D1:E8:4A:F4:25:3C:6E:9F:44:55
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer: /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial: 0194BBCDCC5376E2F37B25D9EB16CCDB3DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number: 056C
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: 4sQ2AALWepE/YUZ0e4ex5Lh72wdUMOUsLIJ1JK11Uy0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cc:53:76:e2:f3:7b:25:d9:eb:16:cc:db:3d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=21650f8d7c18bde0a6eed1e84af4253c6e9f4455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:4a:17:7f:70:16:41:8e:68:0a:c9:85:4f:
95:19:79:c5:d0:a6:63:ad:13:b6:7e:5c:33:66:2b:
8c:3e:95:a8:a9:3b:4b:7d:03:6c:d6:ae:df:36:a1:
e0:c9:96:ac:99:b5:c3:ed:94:bc:db:c9:a7:d3:97:
83:09:20:68:c8:27:88:fc:e3:56:e1:d2:eb:8f:62:
f8:fb:c9:5f:38:59:4b:47:64:d2:51:68:46:1c:a9:
70:f2:c3:13:db:e2:4d:ca:12:06:6e:35:52:b6:db:
2d:80:91:91:8a:f5:eb:23:ec:db:b4:d6:ce:0b:93:
0c:f2:1a:4b:1f:89:71:65:0b:be:01:09:6e:ec:66:
f3:0a:dc:be:23:90:a7:13:24:bc:ec:c2:59:12:c7:
7d:8a:81:87:52:fe:9f:bd:ca:c0:c9:2a:04:9d:bc:
cf:4f:61:87:96:38:77:45:e5:06:b3:0b:68:11:96:
07:d2:12:bf:1a:a8:73:c4:88:08:13:65:4f:4f:6f:
94:92:a9:10:69:7d:33:4a:39:b5:3c:59:9c:f2:79:
cf:3b:f9:8e:04:99:c6:7b:a1:14:73:99:54:12:d1:
11:34:48:56:8a:9a:56:e4:b3:68:97:d6:cb:17:72:
19:88:12:d2:20:42:45:36:23:a7:17:f9:bf:da:70:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:65:0F:8D:7C:18:BD:E0:A6:EE:D1:E8:4A:F4:25:3C:6E:9F:44:55
X509v3 Authority Key Identifier:
keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ba:13:45:0a:ec:17:eb:dc:ff:50:20:d3:2f:0f:94:39:90:
6c:4b:b5:b5:45:a7:60:3c:00:6c:41:54:21:3d:04:76:ae:bf:
da:7f:ec:23:78:e0:3b:a5:f0:1b:79:12:fe:59:e6:fe:9a:48:
71:de:c7:35:cd:4c:c3:84:e3:4a:2e:ad:fc:b6:d6:ac:a7:66:
49:c0:a4:74:2a:62:f1:73:1a:df:80:34:13:84:2b:49:13:a4:
ee:95:4c:2a:f3:ba:f2:d0:67:fa:63:b0:df:22:27:c5:5a:e9:
bc:ed:b6:15:0e:e6:67:b0:ac:1a:0f:0e:77:b1:56:13:38:b4:
ca:66:69:fb:d6:c7:82:e1:21:15:1a:80:06:ad:d8:44:62:12:
60:30:6c:40:cc:f4:40:cb:22:fb:fc:01:bf:3f:9e:cd:61:76:
4f:80:24:f2:ec:d9:2f:4b:06:25:fd:39:61:48:7d:ef:39:cb:
c9:77:6d:71:b9:7d:26:31:5e:a1:52:9c:18:dc:15:ec:c5:d7:
15:22:69:61:f5:26:55:86:89:da:d2:34:57:26:7f:8e:ac:d8:
8f:ff:a6:3b:08:ce:3d:49:86:b3:6f:86:be:e6:e6:92:e5:be:
23:a2:e0:f6:ac:cf:c1:b4:21:59:07:99:70:f7:e7:c3:87:a2:
62:86:d1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:42 2025 by rpki-client