Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/512a77-50e6-4bd3-b46f-fdbf49da2cd8/1/ii3QX1WC-f6w8_e98E24skiGqS8.mft
File: ii3QX1WC-f6w8_e98E24skiGqS8.mft (raw, json)
Hash identifier: httuQTsxAPkTpbm3mWExPwO+ZQCcGNMkwm1xNQ0YZr4=
Subject key identifier: 76:DA:4D:20:E0:9D:F6:1E:5F:B5:D4:66:99:34:C5:70:E6:58:C3:ED
Authority key identifier: 8A:2D:D0:5F:55:82:F9:FE:B0:F3:F7:BD:F0:4D:B8:B2:48:86:A9:2F
Certificate issuer: /CN=8a2dd05f5582f9feb0f3f7bdf04db8b24886a92f
Certificate serial: 0194BBCE861C785EAC32B1F528842874F333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii3QX1WC-f6w8_e98E24skiGqS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/512a77-50e6-4bd3-b46f-fdbf49da2cd8/1/ii3QX1WC-f6w8_e98E24skiGqS8.mft
Manifest number: 0696
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: ii3QX1WC-f6w8_e98E24skiGqS8.crl (hash: xx2aBVjlx71p4OM96tAf59l/dLiPSTFEMTI5ZCKsnfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:86:1c:78:5e:ac:32:b1:f5:28:84:28:74:f3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2dd05f5582f9feb0f3f7bdf04db8b24886a92f
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=76da4d20e09df61e5fb5d4669934c570e658c3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:f8:39:64:7c:4d:51:25:e7:25:a4:27:2c:
d4:27:96:fc:3d:10:69:c4:3c:54:af:59:b5:79:83:
62:f5:1c:30:63:36:69:8e:92:96:6f:17:68:82:74:
b0:15:bf:dc:1f:b7:28:8f:c3:8a:59:c9:21:55:ea:
10:05:75:cf:ef:bf:38:dd:52:69:8c:90:b3:61:b3:
3a:f9:15:48:38:75:06:fe:ce:a9:8c:38:54:8a:0b:
ec:e0:ef:44:bb:19:5a:cb:65:4a:7a:b5:b6:28:83:
46:d8:e8:3b:e3:b2:44:fe:fb:f2:71:ce:51:f4:e3:
ac:7c:04:c9:c6:65:ad:0c:9b:d0:22:5d:0d:48:20:
55:5c:b5:7a:73:20:29:ab:db:a6:86:0b:e9:76:b2:
11:89:df:51:9f:f1:99:c4:88:62:ef:7d:a6:2e:4b:
95:34:80:dc:c2:0e:03:12:a0:64:d9:5d:70:29:d5:
09:ff:f5:9f:43:e5:c5:b3:6f:08:5a:1d:75:a5:08:
2d:95:4c:ae:0e:df:79:e0:3d:f4:e8:f2:75:e9:d4:
39:7d:d6:45:19:66:f3:be:f4:b7:6e:fd:23:66:cb:
a0:49:83:71:29:b5:5c:05:7e:ed:14:07:cd:d4:1d:
ce:20:c2:dd:5d:5d:4a:e1:51:e3:6d:e1:d2:4b:dc:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DA:4D:20:E0:9D:F6:1E:5F:B5:D4:66:99:34:C5:70:E6:58:C3:ED
X509v3 Authority Key Identifier:
keyid:8A:2D:D0:5F:55:82:F9:FE:B0:F3:F7:BD:F0:4D:B8:B2:48:86:A9:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii3QX1WC-f6w8_e98E24skiGqS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/512a77-50e6-4bd3-b46f-fdbf49da2cd8/1/ii3QX1WC-f6w8_e98E24skiGqS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/512a77-50e6-4bd3-b46f-fdbf49da2cd8/1/ii3QX1WC-f6w8_e98E24skiGqS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6e:23:6a:05:1b:ea:5c:8f:f4:a9:2d:fe:98:d2:0e:b2:21:
a4:74:48:9c:01:28:3d:97:fd:69:39:95:34:f4:20:00:eb:0d:
80:0d:5d:2a:65:2b:0e:a4:c8:43:46:77:b8:b2:4e:00:62:b9:
c1:6c:f2:2f:d6:42:4d:76:bf:49:ca:d4:be:97:2c:9f:c6:3d:
88:c3:dc:ac:07:1e:67:c4:f9:ca:94:50:1f:eb:40:b8:52:04:
b1:07:8f:1b:f3:d3:33:0a:ab:33:ae:fa:18:b6:c8:7e:67:b2:
b1:a2:a0:e1:d8:d3:ae:9a:ef:e9:48:ab:ca:65:5b:cb:2f:44:
85:00:5b:87:5a:c3:da:a3:c3:2d:7a:42:9b:da:c4:2b:34:00:
ac:ae:2b:d4:86:27:a2:8f:ba:2a:3e:04:f3:d4:5c:bf:c1:b2:
d0:ef:47:05:3c:08:c0:9a:55:55:77:62:af:11:2d:56:fa:3e:
27:80:e7:6b:4d:b9:0c:d2:3d:78:e3:b9:2f:f0:2b:03:92:a9:
24:f7:92:af:e3:b4:bf:49:b5:3b:89:1d:c9:ec:c2:fb:32:fa:
c8:78:52:6e:16:72:bd:41:86:c3:5f:d6:4b:7f:58:fb:79:16:
94:28:f3:2a:3a:2b:02:ec:86:03:5d:e4:50:16:d2:4d:94:35:
ca:01:01:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:53 2025 by rpki-client