Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
File: R8VBw62lOmIHxADI-fOkhurrubA.mft (raw, json)
Hash identifier: i5KQzskvWRZGJ5Jou5rcmRFjlqX0D/gtEiU6MB1j6H0=
Subject key identifier: 7B:6B:2E:3B:99:EB:1E:E1:89:64:2B:6C:C6:D9:93:D4:81:C9:0E:5D
Authority key identifier: 47:C5:41:C3:AD:A5:3A:62:07:C4:00:C8:F9:F3:A4:86:EA:EB:B9:B0
Certificate issuer: /CN=47c541c3ada53a6207c400c8f9f3a486eaebb9b0
Certificate serial: 0194BC3BEEAF3C1AE80E708D8717211CA39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
Manifest number: C4
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: R8VBw62lOmIHxADI-fOkhurrubA.crl (hash: tChsu1zzjjnGOTTf8AeMlEC30QD4/X4lMljvI2yTceA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ee:af:3c:1a:e8:0e:70:8d:87:17:21:1c:a3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c541c3ada53a6207c400c8f9f3a486eaebb9b0
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=7b6b2e3b99eb1ee189642b6cc6d993d481c90e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:91:47:31:a2:fa:bd:b0:a5:a4:78:67:a7:
24:d7:f3:68:06:a0:38:82:0d:bc:7f:27:a3:17:c5:
3e:30:59:af:cf:43:8a:aa:88:18:73:37:cd:b1:67:
2d:bd:49:cd:fc:52:84:33:da:53:0f:82:86:e1:0b:
50:19:ea:64:d4:75:9b:0c:b8:1f:e2:a4:b0:84:49:
a3:d7:c8:4a:e1:19:34:07:3a:c6:c3:3a:be:b0:a1:
36:3f:4c:ae:7d:ea:12:a5:2e:4b:d4:81:05:cf:e1:
aa:ee:86:7b:e8:4d:19:26:fd:52:73:29:bd:27:9b:
35:5c:08:37:c5:04:f1:2d:2e:59:f3:00:8e:72:93:
58:a1:81:5d:c3:be:c8:de:8e:a6:64:67:81:dc:64:
00:1f:e5:27:14:00:77:80:ec:93:ce:6a:78:9c:0f:
4d:5a:e4:7b:54:96:aa:a3:34:ac:fe:2c:fa:4e:fe:
84:f4:68:63:b3:16:6f:86:b0:f7:25:bb:74:54:58:
e7:1e:fd:c0:cf:48:5b:8b:97:f8:20:73:f0:ab:55:
b8:62:0c:9f:dd:a5:0c:29:f9:38:93:e3:4c:55:dd:
a5:ab:53:85:6d:72:a9:0c:09:d4:bc:1d:2b:fe:30:
d9:84:58:d9:81:74:a8:99:12:38:86:4d:1f:b3:76:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6B:2E:3B:99:EB:1E:E1:89:64:2B:6C:C6:D9:93:D4:81:C9:0E:5D
X509v3 Authority Key Identifier:
keyid:47:C5:41:C3:AD:A5:3A:62:07:C4:00:C8:F9:F3:A4:86:EA:EB:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a3:e2:d8:58:3f:3a:ca:68:a8:a5:20:4c:b5:82:31:58:36:
d9:76:eb:22:2b:e4:b8:0a:13:66:7f:14:83:46:29:9c:f8:70:
19:14:19:b5:d3:7f:5f:01:26:bd:23:42:d8:f1:2a:f3:e2:81:
41:df:c5:5d:05:56:76:5f:8f:1d:93:3c:c8:70:8e:7e:58:6a:
ae:41:18:dd:a7:2b:de:9e:4d:1a:2b:2c:c9:6f:1b:e8:a9:f8:
05:19:90:b7:1d:64:1f:29:82:f6:31:db:d1:46:e0:c8:91:03:
d9:ca:8a:3b:b2:76:23:f1:9c:f8:60:dc:87:ba:97:07:1a:2e:
67:58:7d:b7:45:b2:cd:34:46:d9:b7:75:41:db:7a:79:8e:75:
d3:72:87:33:e4:da:b4:2f:7f:f5:da:35:1a:7a:65:69:70:37:
40:29:8e:9f:37:48:39:85:22:27:f8:48:af:e1:8e:0e:ba:7c:
32:de:ee:1f:62:29:fa:7d:a7:90:7a:63:c7:2b:d7:15:c7:4d:
55:5d:2a:3b:54:cf:4f:d9:79:a2:29:35:fb:85:9a:be:72:06:
68:d8:5a:0c:ee:fe:7d:35:c2:a7:98:fb:b1:e1:e5:0b:68:de:
d0:8f:c8:07:c3:25:f0:78:7a:2a:1d:3e:be:70:18:86:21:2d:
ef:26:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:35 2025 by rpki-client