Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.mft
File: nR3U4Tta-cKexamAJQniFjf6CNY.mft (raw, json)
Hash identifier: LDKd0u/yI8EtxHuiFmjnMR9DHy93FLOGN4zO/lKr1n8=
Subject key identifier: D1:96:BB:7F:AE:5C:A1:01:87:B9:8A:1A:5A:6A:CA:AA:1F:36:14:D3
Authority key identifier: 9D:1D:D4:E1:3B:5A:F9:C2:9E:C5:A9:80:25:09:E2:16:37:FA:08:D6
Certificate issuer: /CN=9d1dd4e13b5af9c29ec5a9802509e21637fa08d6
Certificate serial: 0194BCA9FB19ADAA53B487B2F5EA4E5D5CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nR3U4Tta-cKexamAJQniFjf6CNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.mft
Manifest number: 03FB
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: nR3U4Tta-cKexamAJQniFjf6CNY.crl (hash: A4M5S8CiIyRwbT1o/pz11SOiYKpCMxm3QOLyH/uYLoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fb:19:ad:aa:53:b4:87:b2:f5:ea:4e:5d:5c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1dd4e13b5af9c29ec5a9802509e21637fa08d6
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=d196bb7fae5ca10187b98a1a5a6acaaa1f3614d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:6d:c7:04:ae:22:e1:33:94:f1:82:40:fc:
a2:03:c1:1b:31:5c:0f:ed:43:ae:3c:29:ae:ea:08:
b4:17:e9:b1:7f:67:d2:5e:02:e9:ee:29:59:11:5e:
8e:73:94:f8:fd:5f:b7:f9:c8:98:fa:ce:c6:19:4e:
9e:bb:3e:ea:04:19:0d:1a:d5:82:ed:42:e3:f1:94:
ca:59:e4:6f:b6:79:82:ae:98:8f:04:a4:24:af:c2:
71:9c:76:76:27:f2:df:58:ec:ba:ba:80:90:1a:93:
a2:17:70:31:f3:86:f6:c0:c2:05:01:55:09:1d:c0:
d9:56:39:fa:cc:41:c8:9e:90:49:c7:82:9d:ea:95:
6e:c8:69:f9:61:78:29:22:14:42:a0:2b:28:df:67:
3b:0e:1a:29:76:89:6b:97:f7:66:0d:23:d1:c4:75:
95:b9:2b:87:57:bb:e3:4c:f5:09:5f:3d:e6:ae:6d:
13:e6:0b:27:67:6e:eb:91:b7:4d:2e:c7:8b:0e:82:
b2:82:9c:4b:09:e6:50:4e:02:45:e2:38:75:54:ea:
62:99:2e:19:84:c0:84:7c:ed:05:4c:61:1d:07:78:
85:cc:6c:0f:43:da:00:65:02:2d:89:19:95:a4:40:
0f:16:fa:0e:a0:33:6a:50:25:b0:eb:b0:f3:cd:3c:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:96:BB:7F:AE:5C:A1:01:87:B9:8A:1A:5A:6A:CA:AA:1F:36:14:D3
X509v3 Authority Key Identifier:
keyid:9D:1D:D4:E1:3B:5A:F9:C2:9E:C5:A9:80:25:09:E2:16:37:FA:08:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR3U4Tta-cKexamAJQniFjf6CNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ff905-43a2-4668-968a-a8ede965eb4c/1/nR3U4Tta-cKexamAJQniFjf6CNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:82:75:2d:e7:f4:38:9f:f7:5b:42:64:d1:3a:3f:89:ab:62:
1a:ea:ae:6f:b4:71:29:90:88:3d:5b:e4:c0:64:30:f5:1c:00:
c4:97:49:67:94:e7:f1:06:19:54:12:c7:42:15:1b:31:99:41:
4a:b3:82:30:b0:89:4e:27:b5:30:77:41:ad:79:56:2a:fb:a0:
b9:78:e3:ab:61:3c:ad:20:81:35:32:55:cd:ac:b8:82:f2:b6:
96:05:a1:d4:79:28:4d:a0:26:94:ae:b2:a6:eb:d3:36:0a:01:
92:0e:37:b5:a6:39:94:9b:17:4b:4b:e8:ae:26:87:7d:5f:d2:
f5:4a:99:67:02:58:ef:67:c3:2e:e0:c9:3f:66:5a:53:23:fa:
ac:aa:1c:ad:00:99:72:0a:63:22:3d:f7:a2:06:0e:f5:46:e9:
f6:80:69:de:ce:be:ba:a3:1d:c0:f6:3c:c7:6b:1a:76:36:da:
e9:54:5b:a4:23:a8:91:59:bc:8e:e2:1f:b9:92:2e:53:bf:f5:
d7:a6:03:af:6a:d2:d9:d3:17:14:10:0c:6d:78:79:b1:a2:1b:
dd:d3:22:f0:b8:11:1e:b4:cc:0f:84:4d:90:e7:36:6b:53:4b:
2d:e6:33:8c:5e:ee:05:c3:4f:3a:66:ab:21:82:a2:70:72:c0:
28:91:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:29 2025 by rpki-client