Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.mft
File: iZFbtGEcVfYprTpMz-NXwECh3BI.mft (raw, json)
Hash identifier: OTufRq9tO6MAyfslIFCrsxS/W1E1LLPLiSVtWtANCys=
Subject key identifier: F3:9C:D5:6F:20:89:C6:2B:5B:1A:30:81:5D:31:C3:1B:47:3B:52:DE
Authority key identifier: 89:91:5B:B4:61:1C:55:F6:29:AD:3A:4C:CF:E3:57:C0:40:A1:DC:12
Certificate issuer: /CN=89915bb4611c55f629ad3a4ccfe357c040a1dc12
Certificate serial: 0194BD176B245D20453841E60C42247962C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZFbtGEcVfYprTpMz-NXwECh3BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.mft
Manifest number: 03F6
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: iZFbtGEcVfYprTpMz-NXwECh3BI.crl (hash: kdNnuu1hYrobZ8Tz7HCRTIe/AwMgld/QhJO1aC0dpAs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6b:24:5d:20:45:38:41:e6:0c:42:24:79:62:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89915bb4611c55f629ad3a4ccfe357c040a1dc12
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=f39cd56f2089c62b5b1a30815d31c31b473b52de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:a8:bd:26:3b:d5:fb:c5:24:49:6e:34:1a:
40:b1:07:06:a2:d2:83:74:9f:df:5d:67:bf:9d:ce:
f2:98:33:43:e1:5e:13:a2:72:9b:a4:0e:c6:ec:94:
af:c2:b0:cf:80:e0:a9:d2:00:79:b8:02:74:58:2a:
5d:29:e1:6d:00:29:22:1d:19:73:60:c4:f3:3e:ce:
9c:5b:e9:bf:94:a1:94:15:d4:03:17:35:eb:fb:ca:
10:f5:ab:39:83:b4:ca:26:08:46:d0:3e:bd:b8:99:
2e:67:ee:e4:a3:ce:d1:66:9f:6b:f1:a6:3f:ca:96:
fb:aa:c8:b8:9e:1d:8d:66:45:de:3c:a6:41:f9:dd:
58:da:1a:92:d5:9d:8f:11:2e:ea:9d:17:3a:93:52:
c1:74:69:8c:41:2b:12:01:76:d7:ba:6c:82:d5:66:
2f:d7:42:5f:2f:53:8c:da:65:4b:9d:55:63:70:2e:
67:3b:b1:f6:23:42:17:30:4d:0b:cc:18:9d:39:8f:
76:53:fd:f6:ba:22:0f:f2:a2:c4:cd:05:d7:bd:9f:
18:d3:34:b6:4c:8e:96:d1:ee:30:f4:9f:e2:00:7a:
69:06:c6:ae:c9:e2:10:ca:85:d7:9c:e3:41:4f:1d:
ea:48:5f:45:79:c3:f9:dd:85:34:b6:d1:ed:be:8b:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9C:D5:6F:20:89:C6:2B:5B:1A:30:81:5D:31:C3:1B:47:3B:52:DE
X509v3 Authority Key Identifier:
keyid:89:91:5B:B4:61:1C:55:F6:29:AD:3A:4C:CF:E3:57:C0:40:A1:DC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZFbtGEcVfYprTpMz-NXwECh3BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d0:23:c3:30:8f:ec:ce:1e:08:99:84:4e:46:5b:0d:dc:38:
3b:1e:af:d8:81:8a:c7:64:e3:e6:eb:0c:11:81:7e:1f:22:6d:
b8:de:84:27:e1:73:c6:df:50:2e:5c:32:b9:1b:5d:d6:e6:b0:
cb:a1:96:52:fa:eb:1d:e4:fa:7c:ac:5f:19:b0:7c:bc:14:c6:
74:d6:4a:47:7d:03:46:4a:85:43:03:c3:c3:99:e3:60:67:51:
0b:ba:88:29:85:03:5d:cf:27:c5:c9:d5:ba:9e:1e:a8:b4:dd:
84:78:43:a0:5b:8a:1a:84:de:ed:3d:05:f9:32:00:14:d2:08:
24:5d:b4:9e:f7:98:1e:33:e5:b9:7e:55:17:aa:c3:4c:c2:a2:
08:e6:da:db:a0:cb:7c:b2:7a:c6:a4:1f:a2:46:46:fc:46:e4:
b7:3e:c5:5a:67:77:bc:7b:20:e2:ff:b8:20:47:77:18:fe:b4:
13:57:24:2e:71:56:07:fc:8c:16:7e:d2:0e:61:e9:f2:b9:3b:
9e:60:0d:39:b8:4b:32:80:da:81:fe:ae:af:ac:64:01:2e:0f:
28:bd:05:47:84:25:81:d9:3c:ca:e4:60:52:da:bf:0c:aa:37:
2d:97:7d:98:38:db:53:8f:74:36:24:9c:e9:9c:83:b2:67:96:
61:bc:78:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:37 2025 by rpki-client