Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: ARDtO3isccCKCIe+EgVl9Zq589E6JqNpO/ZW0VwkVR4=
Subject key identifier: D3:B9:65:AE:0A:A6:E0:C6:B1:DA:84:EC:98:D2:BC:2E:89:6F:26:43
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 0194BBCE47ADFB83040575B9A84917A5A008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 09AB
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: ppan9u6dyl8wpsVMY2RZdBztmwTnl4w7Is6kyUQ3qH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:47:ad:fb:83:04:05:75:b9:a8:49:17:a5:a0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=d3b965ae0aa6e0c6b1da84ec98d2bc2e896f2643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:e2:30:7c:98:75:76:da:27:7a:ef:d4:a7:
50:f6:ce:6a:f0:d9:e2:d5:35:dd:2d:51:8a:e9:4c:
f7:c5:07:fb:29:4e:9b:30:74:ec:ee:52:f4:be:10:
c8:e5:0a:cd:ba:b5:48:ec:06:cd:01:e1:56:4a:db:
07:aa:e6:bc:7d:b0:00:f5:54:e9:3e:1b:95:b5:5b:
87:1e:6f:4a:50:53:56:c2:a2:a0:f7:a1:49:6c:e6:
3d:06:36:7d:bf:0a:2c:7a:b8:75:7f:a2:30:c9:8b:
6c:30:99:60:e7:ea:ef:f9:68:e1:ab:d8:77:5e:79:
98:96:af:c3:48:fa:67:81:27:96:74:8d:b8:e3:4c:
fd:8a:9a:92:7e:7f:45:6e:09:61:e7:4f:0b:5e:72:
7a:d3:bb:f0:03:d2:03:21:2f:f0:d6:ab:48:4d:78:
99:9a:e7:bd:d3:da:20:f5:8a:09:0b:52:e5:1e:f9:
8c:d5:27:18:16:2b:c8:a1:d7:03:8b:73:6a:36:3e:
21:b9:79:89:64:d7:91:d2:89:7d:fe:dc:10:a6:09:
d9:cc:4c:27:ac:de:1d:d3:99:84:84:11:ff:64:97:
21:12:00:3e:09:ce:ad:49:bf:e0:ca:cd:e4:a9:01:
f0:2d:14:8a:a4:b0:45:04:bc:3c:f4:63:80:fc:27:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B9:65:AE:0A:A6:E0:C6:B1:DA:84:EC:98:D2:BC:2E:89:6F:26:43
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4c:eb:44:c0:63:7e:0c:df:60:5d:f6:19:c2:7d:13:6f:11:
f0:4b:09:d6:10:11:52:c0:82:32:1b:3e:96:37:1f:9c:d4:79:
f9:84:16:11:86:19:53:93:e1:af:5b:d9:25:67:a5:01:3f:2b:
de:8e:4a:5f:e7:d2:46:e8:4c:cb:30:98:7f:95:ad:0b:23:a8:
82:d6:35:93:6c:b4:aa:c4:46:92:fa:e5:70:4b:a8:8f:07:24:
0c:52:12:37:56:18:13:20:1c:cd:f9:8f:e0:76:9a:e2:a3:2e:
fd:4c:aa:8f:89:9e:91:26:20:0a:2a:7d:79:0b:de:7c:f4:c4:
b1:c4:05:10:76:f7:c7:4e:c6:07:2d:c9:15:41:76:13:4b:6a:
ae:e1:d2:5e:dd:8a:a0:83:f4:f2:e3:8f:d2:95:20:b4:5b:a9:
12:4e:6b:e7:f5:8b:3e:f5:2d:46:52:0c:24:1b:ab:60:05:e4:
fe:12:80:88:8c:30:2f:60:63:b8:a6:1c:bb:98:7c:1f:a2:7c:
9c:a9:2e:38:dd:59:ed:6a:ef:70:d4:5b:af:af:cb:dd:35:95:
99:58:28:1b:e4:a9:92:5a:8d:33:e2:10:be:52:84:cb:5a:be:
fa:2e:ba:5f:8a:3d:1a:d0:75:9a:0a:47:38:8f:ed:44:df:04:
28:fd:1b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:52 2025 by rpki-client