Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.mft
File: 8d4LVDF8gVsFFTACYEv9VZBpqLA.mft (raw, json)
Hash identifier: nbwn7iwMAZ5X0mqqTkZA8Kno4GZTIuHKGCXR8kgw1f0=
Subject key identifier: F7:DA:68:B6:B9:98:03:51:C3:97:50:FE:C2:83:8F:BA:1C:FC:0D:0F
Authority key identifier: F1:DE:0B:54:31:7C:81:5B:05:15:30:02:60:4B:FD:55:90:69:A8:B0
Certificate issuer: /CN=f1de0b54317c815b05153002604bfd559069a8b0
Certificate serial: 0194BC3C24A3DDFE695684E443E7B6D9887D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d4LVDF8gVsFFTACYEv9VZBpqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.mft
Manifest number: 0459
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: 8d4LVDF8gVsFFTACYEv9VZBpqLA.crl (hash: ZHJG1ljSgRANh1hYpaORB6gJ22oAtF5upbT2RqZ6wDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:24:a3:dd:fe:69:56:84:e4:43:e7:b6:d9:88:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1de0b54317c815b05153002604bfd559069a8b0
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=f7da68b6b9980351c39750fec2838fba1cfc0d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:53:7e:7e:95:e3:5a:e2:37:67:8f:7f:dd:
a2:4e:2c:a6:48:62:94:d1:d7:f4:d3:8b:d8:b7:2d:
a8:37:92:ff:c4:de:cb:e6:3a:a4:3a:78:a3:ef:7d:
01:e5:06:a9:20:49:62:d8:4b:d3:a4:be:e9:85:89:
fa:27:07:3c:2d:23:e3:a6:7f:38:10:8e:7a:63:28:
2d:83:27:ce:5a:5f:75:27:ac:29:2e:bb:50:66:02:
f6:88:aa:b4:a1:13:b8:4a:10:6f:11:3d:b9:58:82:
8e:b2:75:45:63:f8:cc:44:63:dd:0a:0a:29:b1:4e:
93:01:ae:14:89:49:54:52:14:bd:2f:4f:cc:5a:f3:
0d:b0:87:e5:54:ab:66:5a:4c:7f:cc:4a:ae:74:42:
48:d6:02:b3:d0:82:d6:0c:42:fd:e8:14:72:46:63:
c7:3f:51:2c:03:89:4a:05:3c:8a:2d:85:c4:8f:e3:
fc:c6:f5:66:dc:1b:92:6d:a2:e9:42:b0:f0:54:2d:
9a:38:32:08:df:6c:fa:34:38:45:7b:b9:2a:ea:03:
c9:21:c1:99:4e:ae:23:c7:51:89:ba:23:95:48:e7:
d4:21:c8:12:50:b6:c5:44:e8:8e:9c:07:10:fa:28:
91:77:59:36:89:c7:3d:b4:ed:94:4a:25:c9:3a:9e:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DA:68:B6:B9:98:03:51:C3:97:50:FE:C2:83:8F:BA:1C:FC:0D:0F
X509v3 Authority Key Identifier:
keyid:F1:DE:0B:54:31:7C:81:5B:05:15:30:02:60:4B:FD:55:90:69:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d4LVDF8gVsFFTACYEv9VZBpqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7ccf7d-0341-4060-8bc3-020c230a26ff/1/8d4LVDF8gVsFFTACYEv9VZBpqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8c:54:2b:35:7a:73:c1:d2:82:7f:fb:cf:74:da:e7:f6:f8:
9a:64:c5:6e:3c:1d:c6:b5:88:b1:90:cd:c8:7a:e1:98:73:a1:
c8:1b:2b:7d:05:50:d7:64:be:10:c3:36:f8:b8:d0:8e:1e:c9:
bb:b3:87:0b:ac:c2:e7:c8:a8:41:a6:ed:ef:04:df:db:8c:85:
f2:f0:2b:25:b6:15:ad:41:13:d6:2c:b3:96:b4:12:1a:cb:01:
24:88:fe:a4:11:34:02:47:f3:33:74:c1:b2:26:f0:ee:99:46:
6c:8a:81:bd:f0:36:2b:9e:79:2e:7f:6e:09:bf:bf:1a:70:f9:
81:87:b9:02:3f:28:ba:dd:08:81:d3:90:9f:c5:f6:17:bc:34:
32:ad:a7:3d:9c:bc:76:72:4c:fd:0b:5f:34:5d:5f:10:16:e1:
65:6b:4e:f5:26:5e:be:74:33:b9:73:23:20:fa:02:28:19:0e:
7b:83:fc:77:a5:5e:c2:3e:9f:b2:c7:0b:ba:9f:ec:9f:11:00:
40:35:1f:ac:98:de:72:99:0b:f4:b2:da:24:5a:4c:66:d2:e8:
31:c7:31:c2:67:bb:b9:c3:42:6c:ae:39:77:f8:75:44:42:eb:
76:af:8f:96:64:6a:87:b6:b3:b1:24:38:a4:9c:92:9b:82:a0:
18:79:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:59 2025 by rpki-client