Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
File: g-3hynyzX11h-NWctQNumT6kO3A.mft (raw, json)
Hash identifier: LGPiJ2z/psmLfoEthBpjAH3d0e3CuwPe6tsRAbpp20E=
Subject key identifier: FC:76:3A:10:6E:EC:16:EA:48:72:69:7F:04:99:D3:87:C8:BB:AB:79
Authority key identifier: 83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
Certificate issuer: /CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Certificate serial: 0194BBCDC31626CFE9708595680EFD4B5D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
Manifest number: 0C51
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: g-3hynyzX11h-NWctQNumT6kO3A.crl (hash: wMvXHvPqAf/1ek6dFaguV6Bih8I1pTtqvw+ScW8luXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c3:16:26:cf:e9:70:85:95:68:0e:fd:4b:5d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=fc763a106eec16ea4872697f0499d387c8bbab79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:76:a6:ff:ba:8a:7b:a5:d6:08:e3:54:3a:
39:bc:69:05:03:30:46:81:13:56:60:27:cb:0e:ee:
3f:3d:9e:f3:b9:90:92:12:ba:81:d7:d3:f0:4a:c8:
dd:8a:df:c1:e4:93:79:57:70:58:1a:37:17:58:6d:
98:24:1e:b0:a7:ff:14:24:d1:fc:5c:e3:3d:6a:93:
ea:f4:e8:f4:16:f8:ff:ed:0b:7e:4c:57:40:c3:d0:
87:a1:a5:8c:95:f9:37:43:aa:a6:80:63:84:6c:6b:
b4:e1:7d:86:fd:42:5a:2a:9e:c5:ff:6c:ce:2b:a5:
6e:36:55:27:9a:49:ff:cf:d4:9a:ee:39:72:ed:16:
63:73:a1:c2:9b:ad:06:5e:b7:56:ca:1c:8c:57:79:
08:cb:00:07:b3:be:0f:62:98:63:d6:80:0e:4c:f9:
6b:22:94:aa:71:4d:8a:43:f5:f7:b9:66:21:87:34:
43:23:96:3e:a1:2b:07:a2:54:a1:f3:75:3b:22:72:
45:ca:6b:43:3f:d2:4e:77:79:65:92:b5:fe:29:17:
d7:80:bb:56:94:42:5d:57:b6:3e:76:cf:fe:e1:02:
55:7a:f2:7a:bb:6a:b7:c3:7b:a1:c3:f7:40:4a:90:
13:a7:27:13:e5:4d:bf:dd:57:c8:c8:86:75:dc:4c:
6f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:76:3A:10:6E:EC:16:EA:48:72:69:7F:04:99:D3:87:C8:BB:AB:79
X509v3 Authority Key Identifier:
keyid:83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4e:7d:dc:c0:73:3b:b6:08:4b:69:87:d0:08:2c:32:cc:90:
4f:ff:8e:dd:0e:fa:fb:fd:81:5b:c2:82:95:c4:39:f3:a3:06:
0e:54:65:63:0d:9b:81:8d:65:cf:08:a9:fa:c8:ed:5f:ce:bd:
81:c1:f0:1e:05:49:51:11:fa:25:a4:cc:de:b8:0b:bc:7a:93:
b6:a9:93:9e:7d:bf:81:8b:2c:44:39:f0:5a:46:15:68:0d:4d:
e0:b0:45:99:f3:21:ed:e6:89:fd:c0:56:62:cf:b1:44:30:e0:
31:60:ff:98:71:4d:e1:b6:8c:b3:9d:f0:5d:3b:8e:c5:61:65:
5e:3a:a7:3b:bc:31:56:aa:9a:f2:81:f2:50:15:e9:cc:54:1c:
bc:94:09:f3:7e:a8:ed:ba:a6:be:1d:e9:80:93:5f:ee:27:7d:
15:28:a9:27:39:dc:d0:d1:d6:b6:8e:ea:de:1d:3b:db:39:85:
33:3a:33:d6:41:18:25:5b:4f:d4:70:fd:d1:ad:b0:7d:44:18:
3c:be:1b:90:20:c7:69:a1:0b:2f:4a:da:7d:5e:af:b2:a1:15:
b4:85:9f:ee:53:a9:da:43:0d:2b:8a:da:60:ce:60:24:8c:91:
1b:82:db:72:bb:29:32:54:c6:dd:2b:67:c8:75:44:56:58:0e:
c5:07:25:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:39 2025 by rpki-client