Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
File: PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft (raw, json)
Hash identifier: +++hXRI+wfd6ZYonVpFXFTgb65oayPho7jZavjZWVec=
Subject key identifier: 3B:A9:D3:63:23:10:9B:58:3C:70:65:C0:EA:2C:9D:32:92:B1:AB:95
Authority key identifier: 3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF
Certificate issuer: /CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef
Certificate serial: 0194BBCE9BC273411D813673292FE8B89A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
Manifest number: 1218
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl (hash: nSY82EqGPBN+EaPidLw26F/WmLK0dQgxJdG76khc6o0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9b:c2:73:41:1d:81:36:73:29:2f:e8:b8:9a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=3ba9d36323109b583c7065c0ea2c9d3292b1ab95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:1a:b0:9e:25:f3:10:38:7a:fb:13:23:a5:
fb:40:94:80:5b:4a:bf:5b:79:da:5d:48:92:39:1b:
c4:19:b4:c7:6b:ab:21:2a:17:3b:81:18:8b:b0:86:
48:2c:d6:17:bf:70:1a:72:13:a2:d2:1d:94:cc:73:
b1:94:91:d7:68:df:c9:2e:d5:73:73:6f:36:68:53:
77:1e:d0:c2:25:c0:13:85:77:70:c7:5f:79:d0:47:
9b:55:92:6f:f4:b0:cc:36:9f:c8:5a:89:98:41:8d:
41:8c:89:4f:b4:35:bb:49:d3:ee:e5:5f:d9:42:08:
b8:9e:30:3a:96:5d:43:ae:6e:d6:c0:af:a2:a1:ae:
b0:e8:43:17:09:5f:cd:04:70:4c:df:84:3a:71:07:
50:02:4b:eb:9f:a6:4f:c5:73:cb:d6:87:73:6d:73:
76:d5:59:86:eb:3a:e0:3f:cf:ea:ea:97:2a:fc:ae:
08:55:5c:36:3a:c1:73:07:d9:c4:9a:e9:7f:52:9f:
4f:52:bd:bb:02:9e:9a:ff:b1:dc:17:bc:53:f4:11:
24:9a:8b:cc:6f:fe:95:a1:55:24:fd:89:ff:e6:66:
04:c2:46:64:fc:ec:89:37:1f:ea:b2:39:10:9e:cd:
ef:f5:c8:32:ad:f2:cc:8b:ed:94:92:12:18:e5:c5:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A9:D3:63:23:10:9B:58:3C:70:65:C0:EA:2C:9D:32:92:B1:AB:95
X509v3 Authority Key Identifier:
keyid:3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4f:1e:58:3a:92:e1:c8:ee:b8:92:50:4d:14:6a:e0:16:5d:
f6:7a:c2:49:b0:e9:79:b1:c7:9f:32:8b:51:a0:7f:e3:78:9c:
1d:49:6a:e0:32:18:1b:a6:c8:c0:53:83:bb:a4:89:cc:9d:45:
ee:97:9b:66:44:8f:ca:dc:c5:08:ca:8b:59:21:6d:77:5f:a6:
c3:f3:76:ac:50:79:24:e3:36:75:c0:fe:32:01:b3:e3:09:dc:
a5:2f:dc:8b:ab:f2:1a:5b:a8:7e:2d:29:8a:bd:5d:24:1e:c1:
cd:31:06:bc:79:38:37:6f:07:e6:2d:53:ac:93:f1:ee:fb:af:
03:ff:c7:ca:d6:f3:01:70:e0:c3:b8:67:03:54:52:71:d8:6a:
d5:5c:a0:58:ed:94:a1:80:6a:81:c0:e0:3e:8a:13:6b:6c:a0:
4e:c2:45:25:14:63:f3:c0:db:3e:41:8c:9b:42:14:8f:42:32:
07:95:3b:79:26:21:6f:7a:60:44:ea:e3:37:3e:c5:29:39:d6:
4f:2b:64:38:bc:0d:cb:20:61:8d:ee:ae:93:7a:45:5a:e1:be:
26:2e:7c:c4:cc:4f:8f:04:ca:c7:1e:43:ec:34:d8:a7:19:8c:
f8:55:77:d6:1e:0c:c6:a8:a9:ce:d9:61:02:da:4a:79:60:f0:
09:b0:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:48:14 2025 by rpki-client