Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
File: SuVbOScPau6FdT3OFO2eHx_ImyQ.mft (raw, json)
Hash identifier: LBCr2v2fXIqkCrq1t3eiqwJ4Sl4a7IfMz+3x3V+p5p8=
Subject key identifier: 98:8F:71:8D:B3:AA:44:A2:73:D6:D0:58:95:E3:F7:BB:16:EB:0F:CD
Authority key identifier: 4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
Certificate issuer: /CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Certificate serial: 0194BCA9C97B369C99ED057F13791ECEC472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: SuVbOScPau6FdT3OFO2eHx_ImyQ.crl (hash: 3YYeSiOxh0XNuSjxnySxeoxVmY8pAjEwe5mUZqny4Yg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c9:7b:36:9c:99:ed:05:7f:13:79:1e:ce:c4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=988f718db3aa44a273d6d05895e3f7bb16eb0fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:29:a8:a7:5b:52:c1:5d:60:5f:6b:73:a8:
88:39:7c:8a:4e:7e:78:86:a8:9f:4f:b5:1e:b7:8c:
a7:93:20:17:75:86:8a:1c:6c:64:04:89:1a:87:9a:
24:11:62:61:d2:fa:58:8a:39:f5:8b:70:44:36:a7:
d2:36:87:ef:0d:ad:c9:d2:11:0d:cc:8c:0e:55:21:
b5:70:5a:ec:0a:b2:da:6d:39:14:60:29:24:47:ee:
d4:24:06:44:81:df:be:04:25:4b:f7:1f:42:0b:b5:
4b:b7:c3:00:ca:11:ad:e1:bf:78:5a:8a:29:22:90:
f9:b3:0f:fa:a7:2a:7c:1d:a9:71:b8:41:4c:d8:1d:
dc:b3:d3:bc:4f:3d:62:00:23:ba:ad:c9:d0:27:8b:
de:50:dc:95:49:3f:a8:f4:8f:61:d2:6a:4e:b6:4e:
fd:38:1b:1f:cd:e2:4a:18:cc:17:36:06:8b:8d:fe:
1f:d4:3b:e3:a0:f4:42:f8:6c:ca:ee:7e:65:42:8a:
48:e0:e9:b5:a3:dd:5b:4d:92:18:05:bd:30:f7:e8:
d1:37:06:fc:0a:aa:47:f8:8a:49:3f:bc:e8:f8:45:
b5:75:e3:a7:ff:72:a5:28:35:8e:6d:ad:09:31:49:
34:62:b3:a1:7d:c0:e3:45:74:92:52:81:e9:bc:cf:
d9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8F:71:8D:B3:AA:44:A2:73:D6:D0:58:95:E3:F7:BB:16:EB:0F:CD
X509v3 Authority Key Identifier:
keyid:4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fe:78:3c:1c:b4:68:cc:3b:1b:6e:e1:3b:c1:29:c4:a4:92:
18:ca:90:05:5d:79:5c:fc:7d:b0:f6:f4:f0:f3:cd:45:91:d2:
89:67:d7:dd:03:12:23:59:6b:a8:fa:c3:ec:bb:1d:15:13:2c:
21:35:ae:f6:39:97:84:6a:c8:b3:23:1e:b9:87:b7:08:0e:65:
1d:3e:fe:d3:85:8c:89:84:65:0b:74:11:7c:50:2d:09:58:cb:
52:26:6c:c6:1f:82:77:86:e4:64:d4:7b:8c:19:63:6c:84:44:
77:2f:88:f4:4f:af:73:8b:6c:42:8d:c0:a1:b2:41:98:f9:70:
84:71:8b:8f:fb:7b:a1:7c:ea:8d:36:dc:d5:62:a8:e2:a3:59:
7e:60:14:89:c5:1c:be:53:22:a2:d2:58:07:b1:44:19:3a:9d:
d1:e4:76:b1:74:f3:02:4f:1a:26:53:7c:f0:6d:3b:64:25:53:
b3:cc:fd:9b:7b:f6:67:a4:30:0d:0e:2b:97:80:61:a1:b3:b1:
e6:2a:5e:92:19:da:f6:2f:df:2b:86:ee:4e:48:c8:2b:92:92:
0d:11:2e:e3:f3:e0:ee:c5:06:5a:10:86:11:e1:f0:e4:77:cc:
78:0c:21:ba:82:d6:99:25:75:ba:eb:27:5c:fd:c4:87:a0:c3:
25:19:18:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:36 2025 by rpki-client