Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
File: s48zUI2SUxNJ3z0L6bVF_I4fXms.mft (raw, json)
Hash identifier: ZoXDkT8xBgHLSyXb435DdZBsipParIsIZSiPQSXOCPg=
Subject key identifier: 54:50:17:1E:19:A0:78:C5:61:28:1E:DC:F0:1A:A8:1D:9E:77:A8:56
Authority key identifier: B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
Certificate issuer: /CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Certificate serial: 0194BC72A9C483CA869AD3BE9EFCC04F0AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
Manifest number: 0877
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: s48zUI2SUxNJ3z0L6bVF_I4fXms.crl (hash: DriLiHoYlk82tXhixnbzNJKDm5YrNVLwywAI1ILfVig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a9:c4:83:ca:86:9a:d3:be:9e:fc:c0:4f:0a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=5450171e19a078c561281edcf01aa81d9e77a856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:db:15:59:4c:ae:7b:87:94:0d:56:b0:9e:
8b:30:20:47:19:e9:4f:f9:18:44:72:99:61:cb:1e:
2b:cf:83:d5:40:ff:06:79:e7:d3:97:57:32:06:49:
f3:67:05:ac:5b:73:24:43:83:7c:ff:ad:68:6d:e2:
0a:81:ea:3e:be:f7:e4:06:63:e5:82:24:f6:8d:97:
be:c9:61:26:ff:0c:29:f9:6b:52:24:69:ad:eb:48:
74:9a:db:e8:a0:21:c5:d8:1f:10:5e:43:37:36:e0:
0d:41:b3:2b:f3:d1:84:d2:d7:85:94:32:81:72:87:
99:d6:53:60:0d:80:47:86:a7:8e:ad:72:1e:69:c3:
f9:9b:93:f6:dc:1e:9e:69:b9:ab:32:9b:97:34:8d:
a5:35:7c:dd:d9:97:5a:64:2b:20:94:85:a4:bb:ee:
dd:ab:a3:2b:70:9a:5b:77:36:27:5c:0b:e7:5f:df:
8e:4a:36:e7:a3:82:ba:5b:89:5a:35:da:32:37:2c:
d2:6e:1c:8a:74:7e:ee:f6:04:b3:8d:f9:28:4a:08:
ec:1f:b9:fb:d2:1d:c5:8c:b1:68:22:0b:b3:60:a6:
63:42:f1:8c:97:10:f0:ef:51:5c:5e:01:15:50:6a:
7d:49:e8:19:59:f9:a1:36:a1:83:64:39:13:17:d8:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:50:17:1E:19:A0:78:C5:61:28:1E:DC:F0:1A:A8:1D:9E:77:A8:56
X509v3 Authority Key Identifier:
keyid:B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5b:cf:d2:2e:c9:26:dd:cb:98:04:a4:12:da:58:b6:d5:59:
1d:ee:08:9a:c0:59:6f:5e:b4:ee:42:10:b6:00:b6:38:0b:f4:
20:64:42:c8:e6:aa:7e:89:6f:42:2a:0f:13:59:da:b8:81:38:
3f:ff:77:dc:52:1f:49:f8:c2:ed:40:78:8e:ca:43:0b:3b:e8:
34:3a:dc:5d:e4:ea:d9:53:be:b0:a4:c4:ef:d5:7c:5b:85:43:
5c:28:cd:4f:26:52:00:ca:a5:ac:ab:72:f7:9f:93:37:56:f3:
c2:b3:d1:86:13:e5:46:2b:21:4b:c8:37:fa:e7:0f:7c:8f:f4:
04:86:01:a4:b4:dc:7c:8f:0a:ae:56:92:d0:f2:98:84:96:c3:
d0:b7:4d:80:98:8b:d9:30:de:02:35:66:65:14:15:3c:c5:59:
83:37:d6:ea:9c:18:13:39:3d:dc:72:46:7b:b0:19:b5:36:51:
e8:13:56:98:0f:66:a8:47:33:a6:b3:dd:b2:42:8c:a4:f6:91:
f1:be:38:03:11:49:bf:fa:08:19:ec:11:16:2f:4e:b1:09:7f:
a6:c2:05:1c:fa:93:56:bd:7f:c8:bf:64:bb:92:1a:83:84:9e:
ce:2c:e8:28:c8:ea:6d:45:93:03:bf:3d:d5:22:53:a1:83:b3:
27:a5:a4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:53:07 2025 by rpki-client