Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File: u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier: i/ssYZDRB5+/hhcMSXVse8i21tfWZd0X5g7K8E2sz/g=
Subject key identifier: 35:B3:5B:C1:7A:C2:0D:BD:AD:AD:AC:D6:02:29:00:EB:0D:E8:30:65
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer: /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial: 0194BC0507A33B9EDD047137F003DB077075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number: 034E
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: xeid6lhPRoBYZvBYhtVoPlK1sMiJnrXXb1f6qcdsUUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:07:a3:3b:9e:dd:04:71:37:f0:03:db:07:70:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=35b35bc17ac20dbdadadacd6022900eb0de83065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f0:f8:07:a8:2d:b8:b6:38:12:59:96:1b:33:
9e:15:37:a2:d8:d7:c4:83:2d:fe:26:2b:8e:0f:bf:
3e:b2:d2:ee:99:81:55:4b:fb:c6:36:f1:08:c3:10:
8f:6b:c9:1d:b8:42:fd:dd:cb:9d:8e:93:94:2f:10:
bd:3f:54:58:20:9d:02:3c:10:14:32:f0:28:77:28:
04:11:3c:2f:f5:0e:5c:4d:90:29:08:c3:e5:7d:d6:
86:54:c4:ad:08:5b:fe:85:1a:8c:b0:d7:67:19:50:
6b:1c:50:83:cf:27:af:a8:3b:56:55:32:1b:8a:f3:
c6:68:2c:91:ab:fc:16:ce:e0:59:04:b0:0d:2c:96:
98:50:99:97:87:b2:e8:40:24:dc:69:43:04:b6:69:
a1:47:f5:2a:8a:f0:36:fe:51:27:2a:83:89:a8:bf:
1f:53:18:f6:ce:59:bb:49:2a:e2:12:8a:de:1f:4c:
24:ec:5b:89:6b:0b:8a:1b:44:75:36:26:ca:f3:18:
51:75:ce:19:69:78:ae:c3:d1:e7:bc:5a:18:9a:4a:
31:e3:9c:d6:ea:51:5f:46:aa:df:2b:73:40:8f:1e:
65:05:56:d6:de:3f:d3:96:45:57:2c:93:28:fc:b7:
58:0f:74:1f:ae:66:00:ed:b4:78:19:78:dc:a4:13:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B3:5B:C1:7A:C2:0D:BD:AD:AD:AC:D6:02:29:00:EB:0D:E8:30:65
X509v3 Authority Key Identifier:
keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:97:3b:57:9a:e3:a6:23:75:6e:2e:32:58:62:77:e5:c5:0f:
4a:50:11:55:32:b2:ad:55:a8:7d:18:10:4d:22:8a:7b:5e:88:
11:8a:33:bb:2f:40:77:9c:69:cc:2a:c4:74:10:ac:1d:4b:1f:
cd:cf:23:63:db:0a:5e:7f:53:d6:55:d6:5a:c3:e1:72:3f:0f:
19:fc:a6:0e:86:47:da:f0:5c:1e:c8:3e:39:88:ea:53:b3:36:
1a:41:cd:7f:fd:a0:e1:98:5b:89:c9:f6:4f:fe:6e:2f:0c:dd:
81:dd:28:da:55:a9:42:08:c1:f8:9b:37:f3:7b:7e:12:61:cd:
5c:43:3e:58:9b:02:c1:22:d6:75:b2:c2:94:e1:62:c0:f3:e3:
e6:f0:b4:4b:16:71:4d:af:c5:50:33:8e:23:bc:3e:c7:c6:94:
05:9b:5f:49:3e:3b:a5:cd:38:51:f9:5c:20:88:0e:e2:8e:03:
ab:fd:61:fc:90:75:ae:af:90:b3:72:a3:5f:ce:db:c6:ae:86:
92:6a:87:1d:a2:c4:1a:95:70:2b:93:2c:d4:82:71:0d:13:2c:
ef:25:34:36:25:75:93:c2:b4:ce:78:94:12:08:67:91:d3:73:
94:d1:77:82:12:93:b7:82:4f:a8:17:d7:4e:5b:17:17:bf:31:
c3:e0:57:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:15 2025 by rpki-client