Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
File: 3rwtwyLztJZucDtdjIi3FvDZsOk.mft (raw, json)
Hash identifier: iBsIGi5funhO+In9notSKmxVVZg90tlQFnXHPYEyQ/8=
Subject key identifier: 94:77:FB:02:1A:47:CA:E7:C5:00:65:41:A5:05:49:A4:3A:E8:60:55
Authority key identifier: DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
Certificate issuer: /CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Certificate serial: 0194BBCEDD54D31B1B8A056A75BF53EF74BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
Manifest number: 11E8
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: 3rwtwyLztJZucDtdjIi3FvDZsOk.crl (hash: fed36Ne1ndNWaFQxp3LOESY28zByZdGQfCZKuqKC89M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:dd:54:d3:1b:1b:8a:05:6a:75:bf:53:ef:74:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=9477fb021a47cae7c5006541a50549a43ae86055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:93:a0:74:88:81:a1:4a:52:03:f3:5b:71:
bd:25:c2:4b:e9:a5:64:be:69:8f:6d:e1:ff:47:e7:
e0:60:8a:06:18:b9:a5:35:28:aa:f6:6b:7f:d0:53:
66:9b:b3:21:8d:52:26:6c:00:7a:bd:29:62:2b:39:
2d:22:19:76:be:ca:96:eb:a3:4c:50:e6:54:42:0b:
4b:ca:9f:de:fe:35:f8:0a:3c:05:d0:bd:df:ae:8a:
ba:7c:90:d6:43:c6:8b:4a:b9:c6:6d:19:19:15:41:
48:bc:18:6d:67:15:b0:aa:24:c5:54:9c:fa:3b:5f:
8a:8c:99:15:5b:95:d7:46:97:e6:8a:bf:bc:44:b9:
b8:25:bb:87:44:75:2a:49:77:3c:5b:72:3e:49:ca:
3f:e0:6f:2a:09:32:de:48:08:14:a0:40:af:a5:68:
be:48:53:e8:73:11:eb:8b:8c:16:50:fb:99:c8:7f:
bf:07:9d:bd:48:84:89:36:c4:76:03:53:a5:f8:1f:
af:fc:5a:06:c1:e5:d0:16:1e:13:91:87:77:69:e9:
a2:3e:48:93:d8:33:d4:62:e3:9c:d9:b1:36:df:c6:
9d:9f:79:37:7c:b6:5b:65:8d:7a:01:14:78:69:33:
44:8d:f6:61:ab:f2:f4:b5:0c:11:55:0c:a3:40:d9:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:77:FB:02:1A:47:CA:E7:C5:00:65:41:A5:05:49:A4:3A:E8:60:55
X509v3 Authority Key Identifier:
keyid:DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bb:37:23:a8:87:b0:43:c2:c6:f5:3d:17:5f:7d:c6:93:3d:
70:b5:57:08:7c:bb:c6:0c:4e:af:88:75:8d:4a:3e:8b:56:b9:
2f:40:91:76:38:8a:bc:9a:5b:b5:03:52:cd:ee:8d:47:e3:b6:
2f:b7:02:99:ae:32:62:c8:26:73:f7:e0:2c:bb:88:2e:66:fe:
60:15:ab:95:5c:1b:80:9c:f6:2e:ec:6e:e1:5c:b7:20:e0:4a:
44:06:dc:48:17:3e:a0:4e:39:e2:a4:5b:9a:8f:24:fd:5e:e1:
5b:d3:25:7b:ee:36:b8:59:9f:56:ad:44:f2:87:0f:77:0c:29:
3b:44:b0:7b:28:99:db:8e:25:a4:c7:55:31:d1:b5:b1:9f:f7:
08:c3:27:d0:39:4b:33:ec:a4:b6:8b:5f:5c:40:f8:4b:88:af:
4f:8a:2d:15:68:be:95:d4:d9:61:b6:57:49:ad:9d:dd:d8:4e:
6d:60:7f:32:a7:11:8c:c7:42:7b:2f:6d:1b:f6:b2:65:27:33:
41:6b:76:6f:2b:fb:5b:79:b1:0a:0b:77:62:4b:4a:05:e3:c8:
00:3e:58:0b:6a:64:52:cd:a4:d1:c0:26:8f:b0:e8:9a:1f:37:
6f:ca:df:69:0d:1d:44:cd:0f:5d:99:18:ce:21:d7:9f:98:17:
e7:68:77:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:08 2025 by rpki-client