Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.mft
File: 36U2RiiDKd9mVeJT5WsihIG-lZY.mft (raw, json)
Hash identifier: olyHy6ZQRfBl//GsuMIjbNYPEgKr7HGHDO4iNKBwPnM=
Subject key identifier: 88:C5:BC:53:3F:C2:4F:7C:90:76:FD:43:7D:1A:AC:2A:A9:80:4E:FC
Authority key identifier: DF:A5:36:46:28:83:29:DF:66:55:E2:53:E5:6B:22:84:81:BE:95:96
Certificate issuer: /CN=dfa53646288329df6655e253e56b228481be9596
Certificate serial: 0194BBCE01BFB9FD59E29ACF289386C20A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36U2RiiDKd9mVeJT5WsihIG-lZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.mft
Manifest number: CC
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: 36U2RiiDKd9mVeJT5WsihIG-lZY.crl (hash: 5XAOyTIlF/AU5XzMLJUoOtO0ERhnCsu6bGLLVC0TXAM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:01:bf:b9:fd:59:e2:9a:cf:28:93:86:c2:0a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa53646288329df6655e253e56b228481be9596
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=88c5bc533fc24f7c9076fd437d1aac2aa9804efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:76:cd:21:24:69:01:c3:a8:07:ec:49:37:
a5:c7:b4:50:4f:9b:fc:83:a7:3a:19:15:ab:56:46:
fb:07:64:87:a1:c0:e8:b2:ab:2c:14:c7:5e:b0:46:
b2:70:81:d8:6f:d3:1e:fa:92:0f:98:03:c8:93:b1:
82:96:4f:fd:70:3a:6a:9a:59:a7:a2:2e:82:87:7b:
d2:a6:92:6d:58:12:6c:4d:4d:92:fa:43:a1:51:c0:
f8:8c:79:96:69:b6:63:79:31:58:44:ed:4f:45:88:
1c:19:78:fe:20:ba:1a:0f:45:2e:36:e9:8b:25:74:
fb:9d:1e:e8:06:e6:f3:43:df:6e:08:49:10:b3:71:
a5:04:1a:9a:37:0a:31:8e:97:ca:95:36:7e:38:72:
0d:82:b7:e7:fc:20:40:d2:e0:11:71:99:29:11:c5:
5b:00:fb:b0:b2:6a:66:e2:ac:43:97:be:67:cf:61:
00:94:1d:ab:7e:8a:3f:cd:8c:92:02:f4:24:e2:77:
fc:9b:38:7a:d2:1b:ee:e3:ab:61:6a:5c:eb:37:77:
87:76:8e:08:22:15:5b:25:f3:0e:12:bb:16:f3:a2:
30:97:12:c5:eb:20:18:34:f8:8a:e5:62:1e:fa:8b:
6b:ea:9c:2e:13:20:27:51:94:75:e4:b8:f0:40:d0:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C5:BC:53:3F:C2:4F:7C:90:76:FD:43:7D:1A:AC:2A:A9:80:4E:FC
X509v3 Authority Key Identifier:
keyid:DF:A5:36:46:28:83:29:DF:66:55:E2:53:E5:6B:22:84:81:BE:95:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36U2RiiDKd9mVeJT5WsihIG-lZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f1:29:98:5e:97:cb:52:f1:4f:ae:c0:a2:fc:70:ad:9e:bb:
3d:97:d1:43:e8:e6:4a:94:2d:e7:d2:7a:d9:aa:17:ac:32:22:
e2:8c:4d:ec:eb:5d:f0:04:d2:ed:a5:48:1d:91:9e:5c:3a:ca:
3c:ef:ed:a6:c7:37:66:61:0e:c3:3d:71:fe:ff:b7:45:19:cd:
bb:f8:bf:9b:18:da:3d:51:0a:a0:1b:c8:3f:b3:61:f1:09:30:
f0:ad:84:11:2f:e6:ff:e7:57:a5:5c:9a:87:42:d6:4c:d9:8e:
db:5a:29:1c:c4:e7:8c:0b:30:e9:c8:8d:e1:76:dd:0a:b2:a7:
85:90:aa:6a:28:78:b6:7b:5b:bc:e9:28:ca:a4:5d:54:de:49:
55:9b:09:b1:03:10:8e:f7:3a:42:36:6d:d9:3c:66:e3:59:7d:
99:1e:91:e3:86:fe:70:84:a6:25:f0:4a:74:3a:23:e2:52:1f:
d1:98:f4:82:5b:59:ea:e1:68:f1:70:5f:17:8f:b8:ee:81:89:
19:c7:bb:90:9c:15:d1:fb:d6:e2:fe:81:27:f8:b5:13:45:9b:
ce:26:fb:d3:c9:cd:7c:5e:38:24:f9:47:89:ba:e5:03:9b:43:
de:04:12:67:8b:d5:0f:60:b1:54:04:68:5b:1c:f5:84:c7:99:
4d:5d:5b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:19 2025 by rpki-client