Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
File: dWXhJLHEG5OxTX7eBda4B3eYmv0.mft (raw, json)
Hash identifier: tH5x5toabWyQTdoNdg0Ng+AGGnMKTw1wzskFi2dzyDM=
Subject key identifier: FC:3B:C7:73:C9:B8:92:0C:F2:F7:B5:A8:86:1F:FC:BE:F5:CF:7E:C4
Authority key identifier: 75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
Certificate issuer: /CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Certificate serial: 0194BD17F2B8499317AE6A94B6B3AB40E4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
Manifest number: 11CF
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: dWXhJLHEG5OxTX7eBda4B3eYmv0.crl (hash: eaHd/BjrjDVc9kWZIEYIMkp2E/8ugb/YB5q/GiepFCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f2:b8:49:93:17:ae:6a:94:b6:b3:ab:40:e4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=fc3bc773c9b8920cf2f7b5a8861ffcbef5cf7ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:3b:77:38:37:43:c9:b7:fd:1a:15:90:8f:
20:36:05:26:c8:54:d4:8a:7d:81:30:e0:9e:55:cf:
8d:ca:b7:cf:9e:b1:93:62:d5:97:84:b5:76:a2:91:
3b:e7:79:a2:08:05:68:b6:31:8d:84:32:46:12:04:
38:92:1d:69:65:6f:74:30:91:1c:80:5e:2c:e3:bb:
1d:9e:35:f6:3b:d3:e4:16:5a:ed:58:ff:3f:ad:45:
26:10:4b:3d:b4:ba:ce:63:2d:e5:43:c9:45:40:ef:
da:e8:ae:43:94:aa:f7:f7:42:22:0f:39:e5:92:ca:
98:f0:ee:b0:bc:fc:78:cf:e3:eb:5c:63:84:92:60:
47:52:97:ea:87:17:3e:0f:96:cc:c5:01:4a:81:c9:
b5:9b:06:ec:46:bf:bd:5a:50:58:6c:6d:5b:b6:81:
ad:aa:bf:ec:7b:c3:44:f3:5c:fe:f1:91:a1:71:6a:
63:45:21:b5:d2:3e:a9:41:34:0c:63:a3:da:30:4b:
90:d4:51:a4:15:8c:4a:01:ac:4c:86:e8:49:08:92:
24:90:53:71:8e:55:8e:7a:16:84:07:3c:c1:e3:64:
dc:ab:7d:06:4d:18:bb:d0:9b:23:50:a6:df:3d:03:
4e:c3:b7:3a:52:4d:80:87:81:ef:14:e3:82:7f:ac:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3B:C7:73:C9:B8:92:0C:F2:F7:B5:A8:86:1F:FC:BE:F5:CF:7E:C4
X509v3 Authority Key Identifier:
keyid:75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:73:a0:26:8e:69:7b:2a:dc:33:0e:90:7a:13:05:c6:be:2f:
61:2e:f7:26:f3:eb:5e:c3:b2:db:b7:21:09:fc:51:48:1c:73:
48:94:04:8a:37:9b:01:34:e9:97:22:a3:6f:54:73:6b:58:f4:
03:a3:4e:34:a8:d3:e8:d0:97:db:7a:d2:f4:12:53:10:20:89:
00:59:76:21:82:3d:68:18:2e:d6:62:86:a7:6a:81:d8:d9:65:
84:7e:55:a2:1e:b6:00:12:a1:d6:cc:6b:9b:83:2e:cb:6d:65:
1a:66:b8:44:f8:9d:cf:b5:10:3e:2a:70:1f:6f:92:98:bc:80:
a2:f5:7f:50:f8:91:6f:f4:cd:f0:1b:b3:11:dd:dd:41:55:0b:
40:ac:6c:80:95:51:6d:6a:6d:5a:b7:6e:37:5d:a8:6e:ff:cf:
0d:57:93:9b:21:9d:38:e0:0c:d6:57:e0:6c:a2:d5:02:db:6e:
ec:4d:4a:a9:23:cb:24:50:c2:ce:21:6c:0e:b9:10:0a:62:c1:
13:48:e1:e9:fc:66:af:bd:15:4f:5e:f9:e2:04:59:52:3b:eb:
69:05:7b:f3:13:0f:1e:04:94:c3:03:18:8b:49:a5:4d:8b:2e:
01:82:e6:57:ae:e9:71:f6:68:f1:45:5e:e3:83:62:2f:eb:c4:
ba:26:62:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:23 2025 by rpki-client