Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
File: _sQT3TZn54GV5SaKooWupRa8sZk.mft (raw, json)
Hash identifier: DEGDTiLsQAXamdJ0+r5v5Q+OEGgldilOImBoNkVwLBo=
Subject key identifier: 6B:0D:1D:FA:B0:74:55:3E:87:01:3D:B5:1A:EF:81:58:A3:02:93:53
Authority key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
Certificate issuer: /CN=fec413dd3667e78195e5268aa285aea516bcb199
Certificate serial: 0194BD17B296DC9E61D9A4290FAFF9BC4DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
Manifest number: 1154
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: _sQT3TZn54GV5SaKooWupRa8sZk.crl (hash: P0ss5JdVFoPxwvRHwr/XPdGXUP+YCKVF/VVqnBjorN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b2:96:dc:9e:61:d9:a4:29:0f:af:f9:bc:4d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec413dd3667e78195e5268aa285aea516bcb199
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=6b0d1dfab074553e87013db51aef8158a3029353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:ba:9c:2f:70:9e:99:92:ca:da:07:2a:fe:
a4:3a:3a:a3:15:f6:61:dd:e5:ae:e2:ce:1c:8a:fe:
23:55:4c:44:c6:da:c3:b0:cf:75:ac:1d:2d:39:17:
79:20:f7:b7:84:7f:c2:29:cf:af:66:52:c6:ce:7c:
5b:d9:87:54:85:b2:27:f7:6c:17:22:51:92:59:8d:
16:20:99:6a:44:0f:7f:3a:ce:84:ac:76:37:16:b2:
b0:0b:fc:06:0f:31:b4:e4:01:b2:3d:a2:37:f6:7d:
e5:d9:58:ec:77:d8:f8:73:ad:9b:b3:3b:f6:f3:57:
3d:c1:6a:40:eb:f0:53:e0:d5:a9:b3:27:47:a6:9b:
4b:5b:e5:a3:22:9a:cb:8f:56:0f:67:cc:0f:18:4e:
8e:ab:d7:a6:9e:b4:4e:1a:f7:17:21:5b:4b:8e:f5:
39:da:bf:73:4d:69:97:4d:a3:a1:8a:e0:90:c7:1d:
2e:f8:03:62:7c:e8:90:a0:d3:c6:48:b2:3d:e6:21:
e2:ce:8c:ae:66:0c:c0:cc:d1:43:cf:a5:e6:a0:44:
34:fa:0e:39:64:0d:77:a8:53:19:c8:72:95:fb:ef:
ef:9e:a6:c4:68:d1:24:00:1b:a8:05:26:b8:c8:f4:
fc:32:c6:0e:c6:1e:4b:61:d4:7a:f2:9c:67:f3:b6:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0D:1D:FA:B0:74:55:3E:87:01:3D:B5:1A:EF:81:58:A3:02:93:53
X509v3 Authority Key Identifier:
keyid:FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:89:db:0a:b2:1f:a6:42:3b:b7:67:73:fc:ef:8e:e8:28:da:
58:4f:04:b6:e0:e1:00:f6:10:02:c8:26:d1:cd:c7:28:5b:57:
f4:a0:61:fd:94:fd:1a:d2:25:0b:2c:ef:05:b7:d9:26:d0:84:
f6:e7:e0:2a:7e:6e:4b:ae:17:1b:6c:02:71:94:ed:3d:cf:e6:
5c:d6:8b:b6:80:23:72:00:ab:66:8c:35:cf:70:f6:eb:b1:30:
ae:8e:0c:a0:83:2a:f5:35:f2:25:06:6c:fa:5c:9e:59:41:e6:
d4:a5:dc:60:23:04:df:61:8b:4d:79:da:8c:e3:ea:b2:c5:63:
e1:d6:0e:56:66:e0:0e:51:4c:40:79:8f:af:be:ba:c5:5d:c8:
12:24:ec:f0:9e:19:9b:ab:f3:6e:6f:57:9d:01:3a:f2:a3:80:
dc:c3:c3:0a:4c:f5:41:77:07:9c:6a:29:98:ca:3c:40:c2:bb:
2a:60:b0:bb:4a:07:c9:3c:8e:ee:51:86:25:47:85:30:90:92:
77:fa:57:06:db:14:fa:a4:0e:69:90:6c:82:a9:b0:b8:b6:34:
de:f4:ed:04:df:67:35:ac:55:aa:5b:81:c1:e7:cd:35:dc:5b:
77:3f:45:e1:3b:17:c1:32:98:ff:af:41:f5:0c:05:6a:18:c3:
55:dd:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:02 2025 by rpki-client