Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
File: fsS92Wu94fVcNATX7Ga-BH6xfZw.mft (raw, json)
Hash identifier: B4uOMKNAGaf3+kyfhOrOmJRVADRkfSg3OWJuWwIX8sY=
Subject key identifier: 0C:AC:78:01:26:C7:1A:9E:67:13:22:05:CD:0C:CF:90:F0:CA:75:DE
Authority key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
Certificate issuer: /CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Certificate serial: 0194BCA99A05E7B988E467551E44BC951140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
Manifest number: 08A0
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: fsS92Wu94fVcNATX7Ga-BH6xfZw.crl (hash: PCsOJVvXgnqpSBQzVUkhXo45vlaoGyMfisdlkIKmtu4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9a:05:e7:b9:88:e4:67:55:1e:44:bc:95:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=0cac780126c71a9e67132205cd0ccf90f0ca75de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:c0:78:04:51:71:95:ad:12:42:08:86:b9:
24:1c:53:a7:47:4f:49:ca:2f:33:83:fb:1f:3d:7d:
8c:06:c6:e8:52:c7:7e:78:d2:d6:e8:c1:54:6d:4b:
16:12:9f:8f:13:8d:85:f7:df:79:44:50:54:b8:5c:
9f:b2:87:ec:43:99:a3:80:be:9d:73:50:ab:c2:fa:
ef:ae:b5:66:32:4e:80:27:88:fc:8f:c0:fb:bf:9c:
99:4e:8a:c1:d4:f1:8d:da:b0:d4:66:d8:78:d5:66:
df:df:55:ad:22:40:48:a3:1c:c4:e6:25:7e:12:ef:
bc:38:73:b3:96:23:4a:3d:3d:ae:cd:aa:fa:79:de:
e1:76:fd:21:36:4a:1f:55:07:86:f7:a5:2b:70:7e:
d7:07:49:60:31:d1:08:f3:68:c8:ff:15:1b:15:4c:
08:35:91:8f:bf:f0:a9:ee:f3:42:74:e0:d3:56:56:
00:f8:22:04:83:9f:22:01:63:83:f0:6a:5a:dd:a9:
83:f0:bf:cd:49:f3:eb:eb:f7:de:5a:68:93:92:d5:
89:e3:ac:8c:74:a4:a2:f1:97:b9:c3:34:f8:59:2b:
69:6a:0d:4f:bd:dc:23:47:4c:4c:3a:f0:2f:ce:10:
ab:97:9c:e1:e1:17:5a:93:81:da:3e:8a:1e:c5:38:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AC:78:01:26:C7:1A:9E:67:13:22:05:CD:0C:CF:90:F0:CA:75:DE
X509v3 Authority Key Identifier:
keyid:7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d1:31:52:80:e6:26:e9:31:63:ae:c1:b6:51:31:bc:90:53:
08:5c:2c:43:86:e9:ff:04:e8:05:ec:90:3f:9b:de:fe:c6:b9:
c4:6c:8c:05:26:d1:8c:34:21:db:46:52:a9:4f:63:4c:00:fc:
db:ce:cc:6d:6f:3d:75:2f:24:65:d5:41:11:a3:ec:49:bf:42:
62:48:4b:f1:35:1d:19:f8:7e:5f:75:2f:75:08:11:45:d2:55:
fc:c8:73:43:2d:7f:f6:78:ff:75:4b:e8:46:4d:ba:d6:40:3b:
a9:11:9e:93:6b:53:eb:f5:87:8b:28:00:b0:e8:70:0d:4c:7d:
8a:43:61:08:8c:06:fa:d5:9b:c7:4e:1a:01:ff:94:5f:e1:de:
d3:64:94:e2:8e:7a:cc:74:cd:75:fe:f2:e1:4f:8f:03:f3:e1:
f6:6e:e7:cf:b1:79:57:05:11:28:35:84:4a:6a:04:e6:a7:81:
f7:5e:cd:7f:be:33:e3:ec:fe:8c:bd:a9:7f:14:31:a8:1b:10:
1b:c8:f6:ea:24:9e:1a:ee:86:3b:a6:ad:a2:a9:aa:6b:d8:fb:
3d:23:c9:fb:7b:9b:40:8c:fa:13:f8:82:b5:45:27:bd:f8:a4:
8c:52:62:0b:91:ef:81:8b:c5:69:87:5a:43:f4:e0:dc:1c:7d:
c7:17:28:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:57 2025 by rpki-client