Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
File: 3XF0IQf16FBis-CuZa-kuuZw4Es.mft (raw, json)
Hash identifier: FV/kschDjtfxqLt7vevze8xVQu9EwvNS/eNfdGK/i00=
Subject key identifier: 19:D0:26:B9:E3:98:23:25:23:60:22:31:F7:CD:E9:79:3C:E3:9C:5C
Authority key identifier: DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B
Certificate issuer: /CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
Certificate serial: 0194BD179963C160C5B4E4B2132BEC791634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
Manifest number: 02AB
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: 3XF0IQf16FBis-CuZa-kuuZw4Es.crl (hash: XdnW/C8H5zklvhaeJeer0vhcvLzNTa7LZPkfOSB3Wpg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:99:63:c1:60:c5:b4:e4:b2:13:2b:ec:79:16:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=19d026b9e398232523602231f7cde9793ce39c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:28:18:21:1c:d4:e5:79:a6:12:81:dc:e8:df:
0b:51:5e:da:1b:01:4b:55:10:4a:02:24:60:38:f4:
4a:b2:98:54:19:ad:f9:f0:4c:fa:ef:70:0a:d6:fc:
d0:ee:82:a8:08:12:b8:5f:75:a8:25:62:8e:1c:44:
d9:63:df:d9:f8:c4:55:fe:4f:4d:2c:6e:20:f0:4a:
70:af:92:8f:25:bd:74:a4:4d:47:39:72:a8:2b:7f:
e5:ca:85:4c:a8:49:35:fb:ef:4d:6a:4b:ed:1b:73:
43:89:08:85:34:0b:b9:26:7b:fd:4e:76:02:de:99:
d6:ab:c4:76:12:21:1f:49:68:57:f3:42:ee:73:43:
ec:96:fc:ba:88:e4:2a:ba:21:29:37:a1:01:e1:91:
01:d9:c4:d9:55:0d:5d:e2:ca:7a:30:87:34:a6:ba:
ef:f4:55:f8:3a:4a:82:95:a5:12:a4:82:e0:f1:90:
8b:37:49:f8:70:0d:16:b4:8d:77:26:e9:b9:c8:7e:
07:bb:8b:ce:72:46:b3:91:8e:98:ef:39:82:70:6c:
d8:93:a3:21:c7:43:ce:64:31:fb:70:ed:d6:16:89:
15:ec:3e:5f:61:f7:bb:52:87:af:8d:ce:a8:0f:56:
9d:27:1f:60:cd:aa:f1:00:8c:33:0d:0b:9b:c4:a8:
96:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:26:B9:E3:98:23:25:23:60:22:31:F7:CD:E9:79:3C:E3:9C:5C
X509v3 Authority Key Identifier:
keyid:DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:df:f9:b6:a4:e8:56:46:7f:3c:6f:79:32:bb:e8:ab:0e:6a:
bf:e9:d2:8f:4e:43:5c:93:48:b9:ab:55:0c:4f:23:5e:7f:0a:
20:70:f5:3e:6c:d2:28:3b:ae:f2:ea:6f:50:d4:f6:79:68:72:
ad:64:d6:16:c0:ee:ad:ca:96:13:ad:39:e5:f6:00:fc:ab:06:
b2:bc:de:22:ac:9b:95:9e:3b:28:f7:a8:2d:c0:b3:1e:4e:e4:
f4:4d:f1:a4:fb:33:15:31:f5:e3:06:34:4f:6e:db:5c:e0:54:
55:f0:f3:0e:45:35:e0:2c:1c:07:a8:aa:b1:dc:e7:54:18:de:
93:d3:76:50:0f:d0:34:9c:14:da:4f:1f:9a:cf:d8:3c:f6:04:
8e:45:92:21:49:89:e7:b3:6d:17:82:fb:57:c0:dc:97:fc:e1:
3b:6b:6c:bc:c9:6b:64:3a:80:53:6c:2e:22:f0:b2:6a:ca:e9:
21:23:81:cc:90:00:bb:18:ce:2c:32:aa:d2:82:23:72:43:58:
0d:19:74:c1:6c:93:36:32:eb:e1:6a:f7:e9:41:9f:c4:9b:ef:
14:26:72:ee:05:a4:0e:57:11:72:f0:29:2c:ff:2d:a3:00:17:
93:44:5b:98:db:b6:cb:a6:76:e8:15:97:1f:73:86:88:42:de:
b8:0e:11:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:07 2025 by rpki-client