Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: uIafrXn/EdDEsSsXHpECIVWjlmWEbKqDFZ9eLW2xpzw=
Subject key identifier: BE:C6:BF:F9:BD:DD:D0:39:00:7C:60:8B:05:EA:E9:B2:CA:DC:85:BF
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 0194BD17943FDEDB56D6C3794E655F3DCFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 66
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: 1dvGmS32o2jLp2+PNcFEp9eTRJMJKWdHTpi/J/0VH1w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:94:3f:de:db:56:d6:c3:79:4e:65:5f:3d:cf:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=bec6bff9bdddd039007c608b05eae9b2cadc85bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:55:15:b4:1b:3b:bf:7d:d9:95:9a:1a:bb:
92:f9:f5:18:47:c2:ab:a1:bc:86:4a:3b:ac:3f:48:
84:3b:9d:20:ea:42:34:62:2f:da:78:b6:f9:cc:16:
ce:bf:c7:d7:25:62:99:7d:1a:da:ae:3b:ff:cc:4e:
31:3a:d6:bd:b0:91:41:08:ee:3d:fc:0a:8f:dc:b0:
86:45:08:03:57:c7:49:5f:52:33:23:be:e3:d4:e7:
29:a3:7d:c2:11:0c:62:76:cf:29:21:6f:7c:e2:cb:
57:18:84:d1:16:6b:94:cf:67:0c:36:7e:82:5e:b7:
49:b9:43:29:08:2f:d4:94:75:14:87:3b:ad:a3:b9:
35:dd:cd:0d:08:b1:75:94:4d:87:ec:c4:43:2e:cf:
82:7c:97:d8:32:18:05:11:65:cc:7d:53:39:2b:e7:
af:51:26:d5:d4:46:2e:20:3e:3f:71:b3:1f:90:05:
5b:ea:ff:55:1c:3d:a2:04:08:e1:6a:66:41:37:75:
da:a1:3e:bd:4a:88:96:4c:fe:c4:62:e5:d6:d2:b3:
b4:42:46:64:71:ca:3d:a9:de:e3:1f:83:f2:3d:dd:
2d:16:da:dd:0a:d1:04:8f:87:74:60:e7:8f:4f:14:
72:08:9e:ef:69:31:3e:97:54:b7:29:51:7c:17:09:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C6:BF:F9:BD:DD:D0:39:00:7C:60:8B:05:EA:E9:B2:CA:DC:85:BF
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a7:0c:69:6e:a7:92:e4:89:63:98:b9:96:c7:59:b7:72:18:
6a:10:6b:33:5a:b8:9e:f6:2a:c1:d8:a1:42:00:dc:1c:0f:47:
9f:20:ba:0c:17:54:ff:b4:e4:77:9d:3e:7c:2c:5f:58:b2:7c:
84:7d:11:f6:6d:c2:58:e5:70:b2:47:16:5c:18:cb:ae:39:d9:
a3:66:8b:0d:a2:d7:28:25:99:f8:33:62:0c:90:ae:f1:42:bd:
4a:5b:d6:9c:13:a5:c0:ce:cb:c2:aa:b6:d5:38:62:50:2e:b6:
92:d4:a5:56:f0:88:82:2c:50:13:3c:80:f3:13:2c:c3:7e:9a:
53:cf:d9:c0:e8:c5:2e:73:f7:22:08:d7:c4:8b:65:5d:0b:b2:
da:95:d6:8e:61:71:da:08:a1:12:84:0b:7d:1d:85:83:55:a7:
fd:e9:df:45:59:e5:85:fc:e9:8e:37:ba:4f:82:ef:51:c6:54:
1d:43:9b:b1:41:2b:fb:cf:e6:af:7f:02:c9:55:14:e4:c1:a5:
58:b8:85:c4:a4:f7:90:7d:ff:90:e6:9c:aa:8f:04:0a:32:81:
51:00:c6:39:0c:5c:69:35:fd:da:11:fb:d8:ef:15:57:19:af:
99:5a:1b:c5:f2:df:34:f5:49:7d:4a:ff:08:e3:f2:48:37:c5:
b3:a9:83:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:09 2025 by rpki-client