Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
File: rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft (raw, json)
Hash identifier: zFGazGY/xCcgHYYJwVFXrCNDQ6Ay91kzPrbL2tNugmQ=
Subject key identifier: B5:AB:21:8C:6E:9D:32:02:05:9D:9C:5A:36:19:DF:BE:86:58:0D:97
Authority key identifier: AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
Certificate issuer: /CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Certificate serial: 0194BBCEC77450913BEF2851ECB4688F422E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
Manifest number: 0419
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl (hash: xmHq+r63jRkQMwI22HHalU2NVQ0/r/7WnHXEsAD2XR0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c7:74:50:91:3b:ef:28:51:ec:b4:68:8f:42:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=b5ab218c6e9d3202059d9c5a3619dfbe86580d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:4a:c9:ee:13:8e:f3:86:04:01:d6:6f:8a:
68:ae:da:67:a1:59:1b:65:2a:87:3e:8a:9b:ce:70:
90:53:32:2d:2b:4e:37:40:b0:18:7e:7b:b6:40:46:
09:e6:ea:ad:14:e0:15:d7:4c:f6:74:f1:1d:11:e7:
82:52:81:90:ce:c4:36:39:e3:90:bc:8f:3e:1e:40:
76:34:47:67:f2:9b:a7:a4:d4:c2:e0:03:3f:79:0e:
41:53:35:07:ed:84:58:c7:96:bb:b0:65:54:eb:85:
76:78:be:38:32:0d:5e:96:bc:58:1d:50:92:1c:3d:
2f:3c:9b:ae:bf:89:35:51:fa:8e:bb:b7:a0:88:71:
98:5e:4d:72:19:0c:54:1f:0b:6e:27:b2:55:b2:cb:
2b:6b:ab:5a:91:8b:6f:db:a2:6f:b5:b6:0b:4e:2c:
9e:67:5e:fd:8a:5f:6f:4e:07:2d:c4:2b:d9:ac:5c:
94:01:e9:d8:04:ff:19:cc:1f:37:ee:e0:17:3d:62:
e3:15:1e:ee:2a:8f:34:67:c5:bc:2f:47:bb:9c:a5:
f7:f6:68:f8:10:e0:de:41:42:5f:2c:27:4c:b4:45:
79:9a:67:b0:b1:cc:9b:14:cf:54:4c:67:ea:47:0b:
8d:23:3f:9b:b1:45:cd:20:9d:52:23:4f:b6:bd:a4:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AB:21:8C:6E:9D:32:02:05:9D:9C:5A:36:19:DF:BE:86:58:0D:97
X509v3 Authority Key Identifier:
keyid:AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3d:92:1b:ae:a0:1d:6d:1c:82:91:19:97:fc:44:66:5b:e1:
9f:8b:36:6b:fd:12:a7:ee:a8:dc:06:dd:e7:f3:19:18:ed:b3:
8b:d3:43:e6:34:3d:18:1f:38:b3:4a:2e:18:78:76:0f:fa:f2:
b6:a8:f0:b2:8d:84:ff:4d:83:67:2e:62:36:cd:0d:19:72:2a:
6d:4b:8d:f8:49:e4:9b:4a:c1:4c:e7:37:f3:5f:1c:ce:7b:48:
42:b3:6f:f0:2b:27:84:0c:f7:22:01:f2:17:54:7b:87:a4:b6:
31:5f:b3:89:d4:4b:02:e9:69:ee:84:5b:17:a0:4d:3b:5b:24:
de:65:27:a3:29:33:2d:16:bd:4f:30:ef:e9:70:98:8f:2e:2b:
48:8d:b4:de:eb:d5:55:1f:74:2f:d8:86:80:fd:ee:91:37:87:
c3:13:8d:e0:b8:a3:88:77:a6:ed:b1:0b:fc:73:57:83:e8:7a:
fb:fc:81:8d:64:cc:44:85:62:c4:2a:90:f0:59:b0:48:d1:cc:
76:74:e8:80:df:2a:c8:48:68:1a:26:a5:e1:33:1f:76:a5:9d:
a7:d0:c2:aa:db:57:c8:dc:05:65:e1:4a:7f:12:6c:b6:c3:46:
0c:a6:ff:30:ac:70:29:2d:a4:4b:cb:f1:a9:12:7e:f8:6c:64:
0a:fb:5a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:05 2025 by rpki-client