
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
File: _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json)
Hash identifier: J3gtvyEczyq+Spspc003G7i1Rieong1lK/bAx2NlC3s=
Subject key identifier: BF:AA:B4:DE:9A:3D:24:09:EE:AD:69:30:A6:10:98:F2:74:82:89:D6
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Certificate issuer: /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial: 0194BC3BDE181D4B21C4AD1D0619F2DFE87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: dzAPmskz3dInKkNEIHLH2POPA7nrpz/FMkKC/FsH2/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:de:18:1d:4b:21:c4:ad:1d:06:19:f2:df:e8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=bfaab4de9a3d2409eead6930a61098f2748289d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:3f:47:9c:8f:0a:9e:6f:7a:6e:b9:84:20:
f7:16:27:43:72:f0:71:d6:27:d6:6a:1d:e2:42:9d:
a3:d7:cd:b1:56:c2:7f:ae:57:05:f2:ef:a4:3b:3e:
17:0d:11:e7:c6:b5:43:f4:93:5a:5a:81:b9:0a:0a:
38:5f:c0:47:23:b0:97:18:ad:5c:9c:99:38:6d:49:
ff:6f:05:6e:2f:58:0b:94:8f:24:56:f7:a7:62:49:
0a:d8:b2:39:59:5b:02:bb:d0:ec:33:4e:12:b4:84:
c8:50:d9:35:d8:49:b8:1e:07:1d:07:fc:7e:75:2d:
13:4d:68:43:99:f9:ba:31:bd:91:ab:99:dc:31:32:
4d:3e:dd:7c:b9:09:3b:4a:ed:08:e3:b6:4d:ff:06:
93:f3:93:ce:cc:eb:24:23:31:04:18:3e:d0:75:82:
ad:03:7d:2d:54:78:73:4e:cc:df:53:83:67:f1:c0:
3d:05:3c:31:e0:de:ac:98:ca:77:15:64:99:1f:58:
30:4f:6d:4d:4b:b0:c0:41:0d:fc:da:da:19:5d:4a:
50:b7:95:56:30:90:30:c1:6a:ab:a6:5f:99:15:ec:
a7:7b:df:17:54:ff:b1:62:f7:2e:07:3f:a2:04:89:
52:fd:fb:24:8f:6c:c8:39:77:64:59:06:80:d6:db:
3e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AA:B4:DE:9A:3D:24:09:EE:AD:69:30:A6:10:98:F2:74:82:89:D6
X509v3 Authority Key Identifier:
keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:65:93:6f:94:42:38:1f:44:43:6e:6e:09:35:96:24:31:f9:
f4:35:44:10:2d:cf:d8:b6:2a:29:98:75:63:a0:94:3c:f2:43:
6b:39:fe:78:47:93:52:6c:d6:32:55:3f:31:8d:96:25:5d:ce:
1d:25:b3:41:42:61:09:24:6c:a4:ff:48:ae:2f:88:bb:64:f1:
26:31:eb:9a:fa:15:e2:97:d6:fd:7a:16:c7:74:17:1a:a5:cf:
d6:16:2a:84:60:b4:96:db:91:c8:28:b6:81:5b:df:da:1b:4d:
84:81:16:6c:08:4a:41:4f:8f:3f:e1:bc:68:9c:dc:1d:fe:f9:
de:fe:e3:83:e6:b4:6c:ab:4a:8e:12:87:d0:e7:ec:11:b5:c2:
24:60:f9:7b:d1:7f:0c:00:4c:9f:da:eb:61:5d:96:dc:cb:08:
b8:b6:c9:34:9a:d5:fe:36:fa:42:46:1a:fc:1e:1e:d0:81:ab:
80:0d:1f:16:7a:b0:9c:5c:fa:cf:5a:32:0c:21:f3:d1:bb:71:
58:99:91:ef:d1:6f:84:f1:c5:fc:45:55:0b:7c:8b:cb:f5:a7:
9d:a4:23:ac:15:84:00:08:1e:be:48:7c:74:e6:da:bb:51:1a:
b5:93:54:09:c2:e5:0c:03:0f:6c:b3:54:40:11:01:41:5c:4b:
07:ec:ae:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:27 2025 by rpki-client