Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier: CUyjohZMLeexfA3J4xyQS1PfIFdregY9l4yT9h2vKqY=
Subject key identifier: B1:5A:93:CE:27:BB:F8:6E:47:05:B9:0C:FC:B6:5F:45:3C:20:7A:BF
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial: 0194BC72BC6FE779E5F5DC517D1D5DC3F970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number: 0311
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: h2EHJXvZUFA91MH7pD46jh2EKPomC6XBkZChlQPsb78=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bc:6f:e7:79:e5:f5:dc:51:7d:1d:5d:c3:f9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=b15a93ce27bbf86e4705b90cfcb65f453c207abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:6c:8a:73:94:ee:95:66:6e:ba:0f:12:e6:
59:5c:ab:c2:1d:83:d4:8f:0b:2a:ac:c6:95:bb:e7:
3c:40:e2:67:dd:e9:3f:c2:e8:9e:3d:4a:99:ee:d2:
69:0c:88:12:40:73:fc:aa:78:f8:e9:bf:0b:72:be:
1b:f5:91:dd:ff:59:97:52:82:06:86:35:c6:98:9a:
ba:36:4a:29:b3:6d:77:8e:b9:f4:02:13:54:84:70:
8b:b1:0e:38:3c:dc:9b:ea:66:6e:41:40:ed:de:0f:
69:fb:ba:d2:85:01:e2:54:cc:72:d8:78:6f:af:7c:
12:2c:da:33:64:50:50:98:e3:1a:c7:30:75:01:48:
d6:c8:79:30:46:fd:4d:14:c7:80:e4:ad:2a:3b:a7:
e4:75:c1:4b:f6:27:97:a4:8c:3e:3d:8a:69:d7:49:
9c:83:c3:cc:d4:4a:92:37:94:98:e1:4c:91:49:25:
c0:30:6c:08:15:4a:0c:4d:91:90:26:6f:12:4c:3d:
d6:c7:57:a4:85:8a:4b:7e:e8:17:36:10:2f:79:8b:
d7:48:6d:73:9f:9e:cb:44:d4:a0:01:84:f2:91:c8:
d4:07:2e:2a:56:5d:4e:e3:9e:6e:32:92:aa:97:62:
4b:cb:8f:bb:4d:fc:8d:70:73:aa:00:41:a2:9a:7e:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5A:93:CE:27:BB:F8:6E:47:05:B9:0C:FC:B6:5F:45:3C:20:7A:BF
X509v3 Authority Key Identifier:
keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:78:39:1b:3a:63:4b:05:25:38:83:7d:b7:2b:1d:0b:23:4d:
a1:e2:a4:7a:bf:66:ba:14:31:3e:cf:66:ce:0c:5c:f1:08:d0:
f3:e5:b8:21:31:ef:3d:a6:82:0d:ba:5f:79:af:84:ad:47:81:
a1:c7:0c:3f:d9:66:a9:c8:c3:44:86:39:7d:57:e2:a1:8e:30:
5c:72:54:f3:39:3e:7e:42:41:63:12:5d:47:41:65:f9:4e:ab:
5c:b8:70:5b:69:29:0c:5a:a3:cd:ee:95:f5:4f:a4:01:c8:c5:
9a:69:f7:2c:d8:48:c9:30:ff:51:cf:0f:fe:78:b4:7b:91:54:
59:cc:e2:a0:47:df:96:54:c1:25:be:a9:d7:de:51:7d:f8:fe:
00:bf:e6:89:2d:89:1a:3b:79:5d:0b:10:6a:6c:6d:36:65:58:
23:67:55:c7:c7:39:ae:68:12:5a:8b:c9:57:38:5e:95:45:61:
ef:9e:be:c3:d6:fb:fe:e7:87:0e:06:fe:36:c5:57:e4:cf:4c:
29:93:8f:05:68:a7:86:a7:37:d5:48:bb:b0:44:a9:72:99:6a:
96:4e:89:e7:19:81:b3:67:d8:57:63:82:ef:16:a0:74:d8:03:
21:d6:48:f2:5d:0f:a7:fd:6d:ef:5d:36:f2:b1:72:ce:12:99:
02:4f:9c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:23 2025 by rpki-client