Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
File: iSPXAiS3vTwqfOfceofJKtWv8mk.mft (raw, json)
Hash identifier: V0En1lANbT3uyMwuoFOKD+Jdsir0XT8BQFANsiMgWLk=
Subject key identifier: 59:B7:F4:C3:E1:A2:B2:09:2E:5C:38:94:97:54:10:BD:C9:33:1D:97
Authority key identifier: 89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
Certificate issuer: /CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Certificate serial: 0194BC3CA37FB1B2C178FB47684176EECE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: iSPXAiS3vTwqfOfceofJKtWv8mk.crl (hash: 3WZuew9C4KVTfJkc7cHK05EDy8KpcJA/BnAOZXSoTU8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a3:7f:b1:b2:c1:78:fb:47:68:41:76:ee:ce:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=59b7f4c3e1a2b2092e5c3894975410bdc9331d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:77:9e:2a:66:f0:a5:84:7c:32:7a:30:9b:
fd:e5:5c:77:e5:90:a5:cc:2b:14:08:6e:97:ef:03:
cf:ae:30:54:30:7e:bb:85:4e:8b:67:cc:c3:f7:6a:
8d:13:dd:27:93:88:53:a5:76:7e:5e:ee:60:eb:5e:
5a:79:70:37:3a:4d:2f:5b:ee:01:33:98:a5:49:45:
4b:67:3f:54:40:6d:80:40:e2:87:ce:41:0a:63:f8:
6f:ba:06:08:c9:4e:d0:0c:d9:ac:64:ea:ed:2e:29:
7b:2f:30:fc:e3:b8:8f:2b:f9:fa:0c:29:49:db:fc:
cf:32:01:b5:30:23:22:70:13:1b:1f:14:c6:1d:38:
18:62:e6:af:4e:d9:b5:d7:1b:27:d2:7c:c4:d1:06:
f6:f3:d7:c4:26:1c:30:02:67:bd:e8:55:8a:e2:50:
fe:88:93:0f:19:37:4b:01:ad:ac:64:02:90:15:73:
51:a7:c8:64:2f:c7:99:78:60:b2:b7:23:bc:8e:13:
2d:9b:2c:36:9a:55:34:b5:4a:3b:cc:04:87:5c:40:
ca:c0:21:70:ba:14:51:ee:1b:4c:1c:64:21:45:fc:
fe:eb:26:d6:1a:39:ad:89:83:60:96:f3:1f:9e:4e:
dd:3b:05:d7:0f:5a:21:db:c9:b2:05:aa:07:8d:4e:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B7:F4:C3:E1:A2:B2:09:2E:5C:38:94:97:54:10:BD:C9:33:1D:97
X509v3 Authority Key Identifier:
keyid:89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:79:7c:fb:47:40:62:49:99:d7:82:b4:59:b0:de:f9:29:f0:
64:d5:4c:d6:51:13:71:fb:57:4c:fa:84:1a:11:41:e9:66:0a:
db:e7:51:87:7a:c0:89:74:1c:64:26:47:fb:d1:db:f4:f3:b1:
a0:07:ac:8e:86:d5:4c:6d:c3:97:40:f1:9e:c7:61:64:a2:10:
fb:a2:94:c2:ad:e1:29:a2:d2:41:61:34:51:ed:ec:2e:a9:d1:
a5:a1:0a:fc:57:39:4b:73:4f:7d:54:c5:89:c7:bc:ff:01:0a:
fe:33:aa:cb:3d:b2:83:05:5b:53:a5:d9:45:f0:c3:ac:c9:f6:
ef:0a:3e:d0:af:a8:95:a7:1a:87:1b:79:fe:df:49:f0:7d:11:
e4:db:a7:5f:7f:a7:9f:35:6a:8a:3e:30:60:7d:2e:17:9b:cb:
08:aa:7a:eb:ae:5c:96:df:03:0b:b9:e7:5c:50:24:71:53:ae:
3d:4a:f0:22:b3:db:aa:f7:f8:11:3c:d2:7d:b5:14:3d:ea:e5:
8f:c6:cc:a5:d2:9e:88:b5:22:05:43:34:ca:ed:45:e0:2c:54:
d7:f4:a4:6a:25:30:48:16:ba:b6:47:9a:de:57:73:a8:08:2a:
36:e6:3d:47:a8:de:60:ad:56:bb:73:34:0f:b8:d8:25:a3:a4:
8a:af:5a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:18:02 2025 by rpki-client