Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
File: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft (raw, json)
Hash identifier: 3LpKf+stUakQyJQ4+5T/67hyrAOJH52DE4iUIoPnsoU=
Subject key identifier: 5D:31:3B:FA:E7:3A:FD:37:8E:2D:C4:89:EA:1B:63:C2:46:57:EE:1E
Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
Certificate issuer: /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Certificate serial: 0194BD857AE5B9092E6785D83CCA920BB68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
Manifest number: 019F
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl (hash: V0Lpclq0ziI69fk3kWdT5+/h8J/jxGMZZ0dz0Eo7zMk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7a:e5:b9:09:2e:67:85:d8:3c:ca:92:0b:b6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=5d313bfae73afd378e2dc489ea1b63c24657ee1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:91:46:ed:ba:d6:2d:63:29:66:17:25:0f:
1c:a1:ce:c0:e8:4a:1a:ee:ed:95:02:df:95:54:1d:
b9:26:fa:91:b5:52:73:ec:64:f2:c7:6f:64:34:f4:
bf:a9:c4:09:3c:16:e6:a2:98:b2:f5:a2:b1:a6:af:
47:41:90:23:68:fa:af:09:98:b8:c7:e8:18:fc:a4:
f3:98:f9:fb:38:74:74:b5:51:cb:ed:c9:bf:24:b6:
12:98:42:18:cf:f1:32:39:66:19:f7:f9:2a:0f:fa:
4f:fd:7b:b0:e7:eb:17:2f:69:66:b0:a8:28:c0:3f:
2e:58:4d:c5:49:bf:14:14:87:4b:03:91:52:8e:5e:
23:ef:ef:04:80:48:68:72:37:6a:ec:ed:60:65:6c:
75:2e:b0:89:45:83:02:cf:2c:85:c7:cf:11:a0:ef:
1f:28:34:d8:29:aa:44:64:3c:67:7c:0c:f5:23:25:
24:8d:f7:db:cb:66:10:1a:45:bd:a0:d2:a5:d1:d5:
52:b7:52:60:51:9e:84:0f:44:fa:90:7c:3e:91:a3:
e2:25:e0:44:30:77:70:12:c2:12:3e:12:68:3e:97:
40:79:a3:05:86:15:9b:8f:55:fe:49:b0:32:13:90:
dc:fb:53:4c:c4:12:5f:1f:36:5f:1f:66:20:52:6f:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:31:3B:FA:E7:3A:FD:37:8E:2D:C4:89:EA:1B:63:C2:46:57:EE:1E
X509v3 Authority Key Identifier:
keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:17:2c:2f:8d:b5:20:0e:0f:be:9d:af:98:9c:f9:89:38:a4:
d1:05:18:c8:65:80:08:b0:33:9d:83:09:8b:ab:66:e6:5a:07:
7d:12:95:4c:fb:cb:d2:d2:90:47:0b:e2:e2:fb:69:d7:a7:28:
9b:5b:5f:fc:6a:3f:ca:fe:98:ea:08:0d:70:ec:85:36:62:76:
c4:dd:a6:91:e9:cd:2d:fd:f8:c8:7e:bd:b1:cb:2d:f8:43:54:
c0:06:d8:50:c1:f6:49:fe:22:ce:46:e9:25:6e:dd:f9:7d:c2:
4d:6e:4a:6d:78:12:46:09:2b:9c:4d:dd:eb:0b:17:ab:58:ec:
57:79:b7:92:e9:05:88:ef:a7:d2:f8:40:10:0d:bd:d3:b9:e7:
16:d4:a9:c4:cd:55:e9:48:e4:48:67:ff:a5:57:d2:9c:45:96:
ac:60:41:7d:7d:56:22:12:0f:2b:5a:00:2a:c6:2a:4d:58:08:
39:99:9a:23:a9:56:2b:2f:99:6a:a4:c0:10:9a:ea:1b:36:a6:
08:d8:22:64:40:38:93:4f:b9:0c:1f:42:6d:4d:02:1d:2d:4e:
c9:1f:2a:2c:09:3b:1d:23:d8:b4:3e:a5:5f:e1:0d:39:d6:4b:
34:4c:f6:8e:ac:4a:f8:33:d3:47:4d:97:70:b8:8b:5e:73:7a:
8d:2b:c2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:28 2025 by rpki-client