Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
File: idSzdf1Mr9XfusQG3SWmHSLdNso.mft (raw, json)
Hash identifier: BsLJmVIW1FnGgcIsnq1+eyYTKMcjYmDGeXo8EjF2H+o=
Subject key identifier: 0D:E4:33:CB:47:FD:A2:75:26:54:3D:00:C4:F7:C7:BA:11:FC:AD:12
Authority key identifier: 89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA
Certificate issuer: /CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca
Certificate serial: 0194BBCEF883D8DB23C438C6A31FF4D17423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
Manifest number: 0FA7
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: idSzdf1Mr9XfusQG3SWmHSLdNso.crl (hash: vPlxGwfLEKNPNGMKWWzdY+BiLj32ZA8ip/ZkgIi0qYA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f8:83:d8:db:23:c4:38:c6:a3:1f:f4:d1:74:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=0de433cb47fda27526543d00c4f7c7ba11fcad12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:9a:97:20:0b:40:41:77:8e:87:38:7b:eb:
5f:b2:eb:4d:f5:ad:3a:37:39:3a:d7:d9:19:f5:3b:
62:e1:65:41:c2:20:95:f7:fc:1e:3e:17:cf:95:6c:
ef:30:32:81:3b:7c:dd:a0:0f:7d:c8:e4:1a:e1:d0:
c7:f6:08:e8:a2:17:59:0b:ae:fe:66:7b:97:64:fc:
98:ef:99:cf:46:f1:94:7b:c0:f2:11:94:c3:82:51:
8a:0d:c5:79:ae:f3:45:a7:e9:17:60:24:c6:dd:41:
05:16:89:8f:73:b1:78:99:e3:ef:64:07:69:2c:41:
0d:18:5e:77:6e:a2:26:b1:98:25:81:3d:51:3d:be:
45:c9:a4:4d:d0:f4:41:f1:60:ef:8e:17:73:4a:42:
96:16:fa:27:52:0d:85:57:6f:2c:3f:a1:e9:93:d5:
3d:f6:35:a1:22:de:f4:85:34:e3:68:c8:c6:51:a8:
cc:4e:f4:56:15:3f:d5:c7:dc:76:66:e9:bd:a8:de:
13:b5:d6:56:33:a6:d1:79:8d:6e:88:08:82:65:4e:
c3:8a:11:1b:31:0b:f9:57:93:08:d2:ba:5a:ca:5d:
37:9b:c7:85:30:10:05:00:69:1a:a8:6b:cd:0d:e5:
b9:2f:68:97:da:83:cd:d9:98:be:47:00:80:31:63:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E4:33:CB:47:FD:A2:75:26:54:3D:00:C4:F7:C7:BA:11:FC:AD:12
X509v3 Authority Key Identifier:
keyid:89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:07:8c:7a:31:57:ec:87:c2:e9:4c:72:e6:0c:99:9b:c9:dc:
53:fa:b9:ba:96:6c:bc:a3:75:e3:a7:bc:40:50:ff:6a:b0:81:
93:05:85:9b:ab:bc:2c:4d:0e:fc:09:65:28:d7:82:e3:33:ab:
e7:36:a0:6d:d5:3f:52:15:cb:48:5a:03:43:f0:63:e7:d7:c2:
82:a9:0d:5e:90:e7:48:86:d6:46:ae:02:fd:44:0a:9b:7d:9d:
25:2e:0d:ad:41:d0:23:5f:36:a4:5c:e6:21:ed:00:a9:f0:04:
80:19:e3:56:77:43:03:a9:a7:66:df:91:e7:b0:2e:35:cc:0b:
53:38:70:04:40:a9:f8:d9:87:77:86:26:4a:8b:30:7c:e9:38:
44:f9:bb:32:ab:9e:49:14:7c:f3:f4:e2:4c:69:48:3d:e9:e5:
af:40:56:74:cd:67:c3:4a:a8:b6:46:5b:1e:f6:e6:40:99:0f:
1e:b4:86:6a:42:04:81:d3:3e:c4:b1:bb:e7:1d:61:91:53:fd:
79:3d:7a:71:fc:6a:b0:45:0d:d0:7b:e4:94:3e:1d:b3:39:1f:
75:3a:e0:3b:9c:41:0e:14:6b:36:9a:f6:27:10:f9:cb:90:0b:
a9:e0:37:1d:0f:54:f0:e4:d8:04:db:21:06:54:5b:1d:dd:0f:
d0:98:e4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:57 2025 by rpki-client