Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/41a53b-3543-46c7-a567-c95004f4b891/1/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.mft
File: b3AW9KTPZ0YJ8GKnppXK0eSgPfU.mft (raw, json)
Hash identifier: EkH5sglUiFovdpEYrQnqmqn2X8WFsfneCfUUbHazZ9c=
Subject key identifier: D1:3B:00:16:DA:FE:34:7D:8D:E2:AA:60:E1:EE:E6:01:91:D4:C0:30
Authority key identifier: 6F:70:16:F4:A4:CF:67:46:09:F0:62:A7:A6:95:CA:D1:E4:A0:3D:F5
Certificate issuer: /CN=6f7016f4a4cf674609f062a7a695cad1e4a03df5
Certificate serial: 0194BC728CCCBB6DD6D4B6A05CF4B9B39660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/41a53b-3543-46c7-a567-c95004f4b891/1/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.mft
Manifest number: 0761
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: b3AW9KTPZ0YJ8GKnppXK0eSgPfU.crl (hash: d/ZLj14QqB3WsHdtlO8wMCvNQkpuyDuRzd/T5R5Y9Zc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8c:cc:bb:6d:d6:d4:b6:a0:5c:f4:b9:b3:96:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7016f4a4cf674609f062a7a695cad1e4a03df5
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=d13b0016dafe347d8de2aa60e1eee60191d4c030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9f:4c:83:6c:bf:c5:95:57:90:87:f2:42:4d:
c0:bd:47:56:52:0d:3f:66:1f:cd:2a:99:aa:53:cf:
b7:ee:e7:a2:b7:ca:4d:08:44:fb:4a:1c:e3:c7:92:
fc:25:6a:9c:2b:da:8e:d4:df:2b:28:36:fc:42:1e:
09:4d:3c:c6:d0:f6:fa:30:f0:85:4f:12:c5:f2:dd:
fb:4e:ea:88:37:c4:a0:fb:22:0b:6c:6b:19:2b:db:
3e:be:57:f3:b2:41:e1:9e:2f:cb:b9:e4:38:9e:03:
2d:5d:34:a6:b3:85:4c:e0:57:c3:b5:6c:59:4d:4b:
47:1f:37:44:dc:bc:a9:d2:e4:22:06:a7:15:37:2a:
5e:7a:a0:8e:44:cf:a3:c0:81:87:89:8a:0c:9a:c3:
9e:cc:d4:94:ad:da:2b:e9:fe:29:eb:b8:34:a2:79:
0f:af:f2:95:bb:a3:60:dd:62:88:f7:4f:8a:53:08:
5e:64:db:b4:03:62:f6:67:67:9d:45:95:02:1d:c3:
be:67:10:fa:4f:78:72:05:96:ce:98:91:a5:3c:2b:
fa:76:59:1d:6b:47:be:6e:1f:ac:48:c3:01:8c:f3:
75:a6:15:60:25:22:16:4e:b4:8a:71:b0:5e:17:3d:
24:fe:71:e8:db:cb:82:32:e8:7e:be:66:64:cd:a2:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3B:00:16:DA:FE:34:7D:8D:E2:AA:60:E1:EE:E6:01:91:D4:C0:30
X509v3 Authority Key Identifier:
keyid:6F:70:16:F4:A4:CF:67:46:09:F0:62:A7:A6:95:CA:D1:E4:A0:3D:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/41a53b-3543-46c7-a567-c95004f4b891/1/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/41a53b-3543-46c7-a567-c95004f4b891/1/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0f:9b:ee:de:c4:66:b0:16:8c:61:90:f2:72:d6:ec:fe:4e:
d4:50:e5:14:b0:da:0f:37:4f:93:92:87:37:e9:a1:36:a2:c0:
e4:77:99:fe:4c:96:b5:8d:f6:41:6f:63:31:09:42:1a:4b:08:
35:a2:6f:9c:15:37:a2:ba:5b:d0:9a:b5:c8:c1:c1:ee:02:00:
c3:d9:39:d5:3d:fa:ed:13:6f:92:e8:a1:78:89:ba:9e:65:f9:
a2:f5:1a:d4:3f:73:5a:46:f3:2f:9e:5e:91:28:27:e0:24:07:
d8:43:43:fa:b4:a3:d5:a4:cf:57:10:d2:db:48:91:22:c6:04:
a2:5b:a7:d5:eb:99:37:9d:9b:ff:62:95:94:5c:97:4c:a1:10:
b3:c9:e1:7d:fe:2d:9b:fb:54:02:d4:8b:88:1d:4f:59:bf:2b:
67:1b:5c:b0:d4:0c:8d:9d:11:d7:c1:96:cb:a0:12:a8:f8:7d:
b0:a0:5c:fd:30:18:8b:fd:29:e7:63:da:5e:d5:ab:7b:07:33:
9c:a4:30:d8:d6:6e:bb:5b:90:90:80:85:82:00:74:1a:e5:e6:
08:c3:c9:5a:54:89:76:c4:88:a5:91:78:4c:48:1c:16:9b:71:
18:90:71:33:4e:02:eb:20:c2:ee:5a:94:e1:8f:73:03:fd:40:
6d:5f:52:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:09:58 2025 by rpki-client