Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
File: h3OqvdPia0S3mDfBRwq44XQV6o4.mft (raw, json)
Hash identifier: 4r+Vu5dLD8PL5EkwCE5YpnbfADXNI9e+E1iASpFscQ8=
Subject key identifier: 6F:9D:60:A3:57:A8:13:54:61:65:EE:2F:E1:6F:67:A0:C5:C6:92:AC
Authority key identifier: 87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E
Certificate issuer: /CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e
Certificate serial: 0194BC3C4616DD927F04CFD353D99675CBEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
Manifest number: 16
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: h3OqvdPia0S3mDfBRwq44XQV6o4.crl (hash: YzlDyr3aQ8ZUg6Kork2CrMKgvHdUKUJFdaTKo+xNydc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:46:16:dd:92:7f:04:cf:d3:53:d9:96:75:cb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=6f9d60a357a813546165ee2fe16f67a0c5c692ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:db:dc:b1:3d:0a:79:13:79:18:b8:e5:dd:
ef:8b:e9:98:f4:61:13:cd:d7:df:ec:a4:68:b7:fd:
31:e8:11:66:7e:b1:7d:92:62:0a:f7:31:06:57:ea:
bc:7e:58:a6:3d:cd:f5:f6:a5:d4:1d:41:cb:82:23:
16:6d:3c:00:4c:39:fb:22:48:9e:ac:80:6c:71:71:
64:b2:53:b3:d5:26:e5:a2:95:ab:4e:1b:3b:8c:8c:
b8:1b:6a:c9:a9:cc:2f:c1:53:35:e6:7c:b0:56:ff:
71:cc:2f:b4:9e:26:d2:b5:7d:3f:de:b6:56:db:0e:
36:be:cc:f8:46:54:83:72:bd:52:bb:5d:d5:49:7c:
5d:d9:0e:fd:3f:e5:93:3d:a2:d9:80:ef:a6:97:39:
bf:cf:40:25:25:7f:72:42:44:9e:2c:2d:a2:b2:a7:
e3:63:21:a5:9d:66:90:78:85:11:45:5f:df:52:d8:
1d:d2:12:88:fd:59:58:46:5f:04:60:71:76:90:a2:
cf:c6:c6:06:32:e3:8d:73:ec:51:0b:3b:3f:8d:bf:
67:de:e6:6a:8b:df:82:cf:5e:5f:85:0c:9a:81:15:
83:93:4c:d2:ed:72:73:5d:18:48:41:d7:32:76:b2:
4a:55:e0:46:bd:df:05:2d:07:a7:75:fd:13:40:62:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9D:60:A3:57:A8:13:54:61:65:EE:2F:E1:6F:67:A0:C5:C6:92:AC
X509v3 Authority Key Identifier:
keyid:87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:19:3f:40:7c:5b:1e:c2:14:a2:fa:1b:7f:76:d5:f9:7f:65:
e1:de:ea:3f:1c:12:72:18:7e:ab:3e:b7:f7:4d:01:a2:01:e9:
04:4b:c3:8f:cc:cc:1a:00:6e:5c:34:68:7a:8c:d3:6e:4f:1d:
fd:0c:3e:46:c9:04:7c:63:fc:72:b3:36:2c:de:ae:5c:9c:78:
1a:af:6c:75:f6:fa:92:cb:8b:e3:eb:75:f2:9f:9b:c4:f4:b6:
3e:4a:5c:51:99:8b:6c:2c:cb:8b:3a:dc:e0:a4:c3:64:96:90:
39:43:c3:a5:48:da:64:2b:18:36:32:50:b2:eb:82:bb:79:14:
1e:bc:2d:f7:d5:ee:42:23:22:31:16:c8:fb:01:9b:68:cf:44:
65:24:44:48:3b:7c:1a:66:6b:85:01:e9:72:11:04:22:d0:96:
7d:85:9d:4d:d9:c7:b4:dd:d0:1a:6a:96:2e:c1:9a:1f:44:7b:
b4:8a:64:c8:ae:8e:76:0c:7f:fa:88:de:2f:bd:50:df:2f:ac:
b8:0a:b4:3b:27:f0:68:df:52:1a:4a:a7:0c:92:74:a5:11:94:
3f:52:29:f4:ce:15:fb:ed:18:e4:11:1f:b0:be:79:cf:a7:cf:
69:00:94:42:0e:75:01:a3:72:61:7f:61:69:43:d2:15:c5:e6:
51:79:e2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:21:14 2025 by rpki-client