Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
File: u03_X665REU6fISwl-V8ccBPEfw.mft (raw, json)
Hash identifier: WE++9Hl+g5seVC3ct4n5tXFCF9R74zeyyNfbcPZ0BSc=
Subject key identifier: 86:73:A6:BF:8F:80:51:E1:6C:62:42:31:D6:83:95:FB:46:F1:F8:FF
Authority key identifier: BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC
Certificate issuer: /CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
Certificate serial: 0194BBCEBB7E9B545A486390ED9ADE7FDBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
Manifest number: 0768
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: u03_X665REU6fISwl-V8ccBPEfw.crl (hash: RHqrzzII7mt7gxhqVNy4/EmRm+J+2hIW0K4L5gtZAnQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bb:7e:9b:54:5a:48:63:90:ed:9a:de:7f:db:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=8673a6bf8f8051e16c624231d68395fb46f1f8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:59:c5:90:b9:16:cf:69:e5:bb:bf:62:8a:
06:33:65:18:1f:0b:85:09:05:cb:48:a8:23:63:ee:
27:36:8b:e6:bb:7b:4c:87:73:72:67:6a:a4:2a:b2:
2d:0c:33:76:f9:3a:e2:bd:0f:68:12:54:40:43:1e:
fe:3d:a3:7a:89:ca:a0:3f:28:09:83:a1:ac:ff:d9:
4e:e7:00:7c:3b:9c:93:9f:29:a6:cb:33:43:ee:b7:
df:c1:ac:0f:bc:e7:1b:53:1d:4c:a2:2a:ed:33:22:
88:9e:72:cf:23:4b:72:9b:9e:94:ad:e2:f8:8f:1c:
0f:50:32:ad:8f:11:49:6e:0c:68:9a:0a:63:dc:e5:
06:62:00:d8:99:2c:7d:da:a0:b9:4d:f1:96:d9:ca:
0a:84:ad:81:bd:be:92:da:48:fe:f2:08:18:a3:c5:
d7:1a:45:b5:83:e9:89:e4:80:8c:90:7e:3f:55:05:
fc:a5:6f:5e:71:41:2e:f9:26:63:7a:ac:2d:45:a3:
98:ea:f4:7e:ed:64:6c:a2:32:17:1a:b4:4b:9b:57:
2c:60:ab:31:4f:e2:fd:ec:3a:08:fe:c3:7c:52:5b:
ab:98:83:ec:7f:34:ad:ec:aa:4b:a9:b3:85:a5:71:
ca:e7:c1:3e:1b:0e:3b:44:06:7d:71:8b:a2:16:ba:
1a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:73:A6:BF:8F:80:51:E1:6C:62:42:31:D6:83:95:FB:46:F1:F8:FF
X509v3 Authority Key Identifier:
keyid:BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:58:22:af:5a:de:4e:d5:d0:fc:95:5e:1d:d7:8a:da:9a:71:
62:c9:a4:3a:4f:17:4d:a0:f2:01:72:53:ac:fb:b8:6e:51:e8:
a4:c7:8a:1c:b4:8d:1d:66:fa:f4:71:fd:35:73:6a:6c:22:64:
c4:39:28:4f:0d:42:80:ba:60:9f:96:7a:68:bb:c1:0b:44:65:
40:b3:48:cb:ff:43:d9:6f:3b:b5:48:96:0d:af:e6:86:c3:fd:
64:8c:87:0f:0f:df:11:d1:d1:47:7f:aa:99:0c:e2:27:0f:53:
71:0f:a6:70:ba:20:0e:c5:53:4e:3b:58:d5:d1:0f:7c:80:fb:
ac:5f:c4:80:0e:07:12:d2:d4:02:b0:fc:50:10:ba:e3:33:50:
64:c9:d5:5b:93:83:7c:24:81:73:93:bc:ee:69:5d:2f:c9:ca:
f2:bf:87:74:7a:ba:7a:27:7a:f9:2c:f1:68:ac:77:b5:8f:8b:
b9:ed:0b:b8:ce:b2:86:66:1e:b9:ad:9e:8f:3c:66:6a:0c:39:
74:1a:cf:e6:66:0d:b8:d6:0e:e9:41:d0:5b:e8:59:e8:26:0d:
f5:b5:76:cc:3d:1c:58:6e:3a:fd:12:22:aa:3e:8d:e2:86:9b:
82:38:94:7a:77:d8:6e:95:8c:0b:01:f8:3b:56:02:53:41:98:
58:b5:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:37 2025 by rpki-client