Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier: NwFMHO7PXwvUx5VbbtyK/rXuoI+hh7ZAXa8KkEnjS00=
Subject key identifier: AB:61:4D:58:ED:10:FD:E4:58:40:DC:02:96:19:BF:63:6F:69:47:BA
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial: 0194BBCEAA42A24B06647763875CBFF212F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number: 0759
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: KkwbIgiNcYOc1emNigm53/S6UeK4K7dtnfojwWNEtSw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:aa:42:a2:4b:06:64:77:63:87:5c:bf:f2:12:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=ab614d58ed10fde45840dc029619bf636f6947ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:17:b8:a1:9b:29:95:dc:fe:12:00:54:5b:
f8:7f:8c:20:ac:f6:da:02:ed:04:46:55:7a:6f:a3:
4b:00:82:8b:37:f8:a0:98:7e:39:8f:33:db:35:d5:
72:63:9f:49:04:ef:92:e7:e0:c7:b0:5e:4d:1b:9c:
3d:3d:e5:a7:57:34:86:11:74:e0:02:81:8d:6c:1e:
ee:b1:33:51:1c:36:e6:3c:7c:17:af:0b:d3:76:da:
e1:d9:d7:1d:2a:25:c1:df:ec:3a:5a:d8:eb:5f:e8:
ad:6f:7e:8b:6a:d6:b4:3a:ac:05:08:c1:b1:00:8d:
7b:d0:b0:dd:cf:97:c1:99:98:5c:da:83:eb:45:c7:
22:0a:b5:9c:e4:0b:6c:96:6d:3a:ff:e4:ce:ff:a7:
f1:b7:3f:25:1b:2c:f9:c1:52:a5:87:fe:13:2b:d9:
ab:49:75:bf:32:e6:48:ef:8a:c0:e8:b8:57:a2:04:
92:bc:ea:1b:3a:3d:61:b9:2c:ae:92:2c:3e:29:82:
5d:d2:af:7e:61:b5:61:6f:f7:a2:47:87:78:de:6c:
05:fc:81:42:d6:6a:f5:d1:2e:4d:65:bf:2c:e8:0f:
84:bc:f5:b8:b9:7c:03:45:59:76:40:14:14:0a:26:
51:85:10:2c:2d:0f:ee:f9:9f:63:de:9c:ce:87:b8:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:61:4D:58:ED:10:FD:E4:58:40:DC:02:96:19:BF:63:6F:69:47:BA
X509v3 Authority Key Identifier:
keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a2:79:06:47:39:f2:7f:24:7e:ce:db:74:24:36:c1:c7:d2:
9c:f0:e6:cc:df:6e:c7:ac:0c:2e:ee:20:87:2e:8a:67:26:4c:
58:c8:55:aa:27:fd:bd:bc:47:76:6f:e3:69:33:84:97:f2:35:
cf:28:3e:83:24:62:76:a0:de:0d:fe:8b:81:c1:cc:1f:37:bb:
de:04:29:9e:19:c5:5e:0c:f3:1a:c1:25:4a:8f:8f:2f:6b:c8:
d2:d9:1b:ef:08:36:7f:21:9b:01:6e:a4:a3:d2:c8:4f:8b:0a:
b2:9e:78:60:cb:e3:22:06:2d:cc:d8:09:9d:21:e8:b6:60:d3:
10:05:4a:43:8e:47:7a:3a:eb:fb:d2:ef:b8:2a:40:08:a1:f0:
aa:52:b2:96:e8:52:13:fb:75:fd:a8:6a:bc:39:fb:e6:62:2f:
88:c8:84:61:cb:81:55:62:a1:d5:f8:80:23:2a:9e:a6:6c:bb:
d9:45:ed:1b:7e:42:0e:8b:08:15:9c:27:17:cf:51:dd:c6:01:
ec:71:25:44:ac:13:b8:c2:01:4a:20:1b:73:9d:eb:7d:98:13:
dd:9f:10:9c:f3:12:9a:82:4b:3a:c3:8d:cc:c5:ed:bc:f3:94:
e2:7d:a7:4f:7d:3c:d8:f4:cb:3e:b7:d7:93:a2:75:57:2d:33:
75:96:6d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:16 2025 by rpki-client