Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4dac2-30d5-411f-b984-2e73403fd14a/1/ft5NBeOAZYGxt49yG1uAzEkCvZI.mft
File: ft5NBeOAZYGxt49yG1uAzEkCvZI.mft (raw, json)
Hash identifier: G5RQx2tzWf0000bDSzykPJ57oEiaGeK0LB5/stbIBfQ=
Subject key identifier: 24:27:4D:F7:EB:EE:8E:E9:E4:FB:C3:D3:10:18:9F:E3:D2:57:AA:07
Authority key identifier: 7E:DE:4D:05:E3:80:65:81:B1:B7:8F:72:1B:5B:80:CC:49:02:BD:92
Certificate issuer: /CN=7ede4d05e3806581b1b78f721b5b80cc4902bd92
Certificate serial: 0194BBCDECFACC9E10468BB747AAB12A2060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ft5NBeOAZYGxt49yG1uAzEkCvZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4dac2-30d5-411f-b984-2e73403fd14a/1/ft5NBeOAZYGxt49yG1uAzEkCvZI.mft
Manifest number: 03C0
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: ft5NBeOAZYGxt49yG1uAzEkCvZI.crl (hash: TVef8DPEBolZHRcTdo0335gQjhoyhzQjeKuNKuzTS98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ec:fa:cc:9e:10:46:8b:b7:47:aa:b1:2a:20:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ede4d05e3806581b1b78f721b5b80cc4902bd92
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=24274df7ebee8ee9e4fbc3d310189fe3d257aa07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:6b:ee:5b:53:a2:3a:44:4e:c4:1c:3e:6a:
8d:6d:13:77:cc:b4:cb:f9:6a:e8:25:56:df:ab:43:
7d:49:0a:b3:d5:27:1e:67:3f:73:c8:c2:10:ef:fd:
a6:08:c0:91:b5:69:0b:5f:cb:76:6e:21:e6:b1:49:
18:78:14:ef:cb:8d:99:bc:7b:c5:76:fa:93:e7:4a:
d2:ac:4e:fe:03:f1:8a:2c:26:43:74:38:1b:51:0a:
fe:4c:ea:46:83:0d:3e:90:77:fd:e6:b1:4f:c6:d6:
97:cf:39:4a:4b:85:4f:2c:cb:bf:b1:b3:ae:d1:4e:
2c:4f:c8:5c:06:97:45:53:61:3f:55:07:4f:ed:49:
47:16:c9:d6:a7:1a:c5:ba:cd:ac:3f:1a:10:2b:7e:
8d:b8:39:19:9b:d1:84:a3:03:da:9a:76:50:3c:64:
de:cf:30:0f:bf:f6:67:5f:7f:ca:ed:c6:b5:0f:18:
b0:99:82:c1:fd:4a:00:41:6f:be:bc:2a:0d:e1:3c:
40:b6:79:0f:ea:e4:a3:88:79:fe:2e:98:51:c7:2b:
21:43:cf:de:ab:dd:d1:60:6d:b0:34:6c:ba:ee:8b:
25:92:a3:7e:1f:3c:71:98:d3:6a:ae:16:c4:63:3a:
82:e1:55:57:0e:ab:dc:8b:66:d8:fb:0f:6d:a0:cc:
23:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:27:4D:F7:EB:EE:8E:E9:E4:FB:C3:D3:10:18:9F:E3:D2:57:AA:07
X509v3 Authority Key Identifier:
keyid:7E:DE:4D:05:E3:80:65:81:B1:B7:8F:72:1B:5B:80:CC:49:02:BD:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ft5NBeOAZYGxt49yG1uAzEkCvZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4dac2-30d5-411f-b984-2e73403fd14a/1/ft5NBeOAZYGxt49yG1uAzEkCvZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4dac2-30d5-411f-b984-2e73403fd14a/1/ft5NBeOAZYGxt49yG1uAzEkCvZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a8:3c:ae:d5:5c:11:1b:ad:c0:19:e4:e6:10:71:89:fd:af:
cf:2e:ea:61:0e:1b:55:6c:2a:07:f1:1e:02:ca:ff:90:b3:6c:
42:54:88:60:4a:d3:3c:f4:dc:44:c3:bb:39:d7:28:9e:2c:9f:
db:38:26:e1:46:5d:74:57:50:9f:6f:6f:b2:6f:eb:e0:49:bb:
2f:51:a1:53:c7:44:c4:c2:ce:7c:3b:94:69:e3:ff:7c:7b:31:
47:5e:ee:5f:42:5a:c5:78:06:07:60:a5:d5:8c:ab:e9:d2:96:
1e:00:c1:c2:26:c1:3e:76:99:24:a9:ca:fb:a7:c6:4e:ba:ef:
ed:d1:fa:5f:c1:be:3f:1e:7b:60:77:36:df:f7:8e:b1:ca:0e:
79:ad:cc:34:9a:40:53:67:e4:c6:7f:8c:86:45:67:5e:f0:85:
ce:60:25:9f:fc:85:48:f4:c5:74:d8:ef:b0:7e:1f:6f:b2:fd:
f6:b3:d5:60:64:57:1a:0c:ad:00:9d:ac:d3:65:66:68:41:60:
f4:3d:06:53:5f:fb:cd:86:3d:35:06:f1:d4:1b:3d:57:b1:7a:
89:51:98:c3:1f:8f:10:f7:90:0f:e5:f4:20:6f:c0:2e:a8:12:
83:8a:43:32:56:31:1f:0f:e9:37:5c:a9:94:fc:d1:c7:fb:82:
39:8d:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:33 2025 by rpki-client