Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
File: FK_dm9_GCroGLnxVwq4ukYoynMo.mft (raw, json)
Hash identifier: gZlq49SYUgp1FT0sclzE8ZRbGMlzuTOax/AdJeYqm3E=
Subject key identifier: 6C:76:68:B0:B8:00:E8:32:51:06:DA:95:D8:15:47:11:88:35:0B:81
Authority key identifier: 14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
Certificate issuer: /CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Certificate serial: 0194BC3C5B8CF744910A3BA59BE7276264B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
Manifest number: 083C
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: FK_dm9_GCroGLnxVwq4ukYoynMo.crl (hash: rJbC/tHBrtsUiclCOWE8XX6nLw5h1H14XjLpDz6DQms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5b:8c:f7:44:91:0a:3b:a5:9b:e7:27:62:64:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=6c7668b0b800e8325106da95d815471188350b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:a2:1f:14:2d:c9:60:31:70:9e:f8:f6:68:
6e:99:1b:dd:81:f8:e5:78:d2:b5:13:1c:d4:79:75:
07:7a:0f:ae:53:76:cb:ec:54:12:7e:64:f5:aa:ac:
f5:4a:e3:05:87:be:9b:56:0c:a9:e3:cf:31:50:17:
ba:80:ac:5a:f9:05:8c:b7:ec:3e:e0:a9:c6:66:0c:
cb:51:87:17:74:cd:d9:7b:ff:37:bf:27:46:99:47:
e7:5a:4f:b4:68:ab:04:70:ec:af:e0:65:84:62:71:
5c:73:83:b6:f7:76:53:a8:bd:99:f6:61:58:c0:6f:
76:fd:c8:4a:89:d7:dd:0f:79:65:0f:71:2d:c5:11:
41:75:33:63:e1:25:f2:da:9e:8c:4b:4f:4d:2b:b3:
f0:cf:a5:30:63:c2:e9:62:d4:39:fd:95:da:3d:44:
a2:e7:e5:af:48:7d:05:80:e2:c3:c5:05:b7:ec:0d:
fe:7c:9d:0f:b8:df:57:a7:a5:7b:02:d9:09:47:25:
20:85:61:df:80:cc:a9:bf:f8:e7:9b:8c:42:94:a1:
28:ab:86:4b:ff:f1:b9:17:71:21:32:4d:e7:33:e2:
9f:38:a7:08:e1:f3:70:37:2d:bc:f4:d5:22:89:39:
23:3e:1c:f9:4b:de:5b:bc:fa:aa:ee:11:e1:05:20:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:76:68:B0:B8:00:E8:32:51:06:DA:95:D8:15:47:11:88:35:0B:81
X509v3 Authority Key Identifier:
keyid:14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:15:45:52:02:d3:a7:0e:5b:0b:7c:98:d8:b9:81:4f:3e:80:
35:71:d6:92:1b:5f:95:df:4e:37:6e:30:c7:9b:ae:57:ad:19:
68:6f:41:4b:75:2e:ef:74:01:e7:3d:43:07:66:04:14:60:15:
1f:66:92:b1:26:70:05:c9:c5:13:f9:24:b9:52:3f:41:8f:81:
c6:65:0e:5d:42:62:54:a0:c9:5a:0a:18:9e:6b:e8:52:13:5a:
d0:51:85:e9:ca:33:99:e7:e9:ca:2c:db:c9:b0:7d:5e:37:cb:
cb:77:87:34:c3:81:90:b0:c8:e5:9e:ce:1a:9d:ef:9e:dc:25:
38:92:01:ea:a5:60:80:b7:69:9a:6f:8d:36:ac:b1:0f:2c:39:
b2:01:76:d8:bc:62:2b:1c:e6:f2:31:b6:6a:f6:e6:d1:57:9a:
69:e1:59:06:11:48:34:53:89:ac:f6:41:2d:6a:f4:64:e0:90:
19:07:3c:ab:f1:30:52:15:55:6d:60:bd:f3:0c:b6:cb:5c:bc:
8b:7b:33:84:80:53:97:8b:d9:3b:13:65:d1:23:70:2b:7a:a1:
00:3f:d8:39:74:92:c9:8b:62:e3:02:26:0b:84:13:bb:a5:67:
a4:f5:85:ea:33:c2:f8:93:69:7a:59:5a:1b:94:c8:46:be:a4:
c4:d5:f2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:22 2025 by rpki-client