Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
File: F3khM2kRpWiNeOk__l5HIRO7Gb4.mft (raw, json)
Hash identifier: 32YOttemUm1HwWz7+fIEmkRSi9PULs0/XyWepKUmS0Q=
Subject key identifier: 9E:67:09:92:72:21:7F:2A:45:D6:C2:D6:13:5F:98:3B:DB:A4:A8:A2
Authority key identifier: 17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE
Certificate issuer: /CN=177921336911a5688d78e93ffe5e472113bb19be
Certificate serial: 0194BD8535C8FC815E9F3864BA97C663070F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
Manifest number: 040C
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: F3khM2kRpWiNeOk__l5HIRO7Gb4.crl (hash: LEM2mJqE+aGwm9vz9IKHSDHaDfdJ+JNGJbNIm1g4KXw=)
2: WN1QsY4J0xzhzXI37At9k24AG4s.roa (hash: aONG4etXL5aCmGtS97ulkTYk4UjXjlB6E7tpLdYeDEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:35:c8:fc:81:5e:9f:38:64:ba:97:c6:63:07:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177921336911a5688d78e93ffe5e472113bb19be
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=9e67099272217f2a45d6c2d6135f983bdba4a8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a2:71:e8:8e:ac:e1:12:80:aa:6a:68:4d:7f:
10:61:1d:c3:f5:81:31:a2:4c:8f:07:91:81:d0:d5:
cd:57:ac:0f:0d:55:9a:fc:47:32:11:41:dc:c8:ab:
b2:b8:f3:f0:d3:6b:75:ea:0d:78:f8:ea:82:c9:1c:
22:4a:1a:37:9d:12:00:c4:33:e2:6f:fc:91:c2:64:
8c:4f:3f:fb:0e:79:1b:86:45:66:68:82:8f:f5:65:
0f:da:37:e3:cc:d8:75:3e:e4:f9:a1:00:9b:7e:b7:
76:ef:33:b8:d0:50:62:c4:4e:96:66:08:3c:43:fd:
c8:f6:57:ad:f5:f5:ce:ac:2d:10:5d:fb:95:84:4e:
70:01:74:16:ed:61:f6:92:b1:06:2d:08:cb:05:71:
16:5f:6d:17:a0:1c:ad:de:0a:54:41:55:1b:5b:39:
2f:d5:df:b4:a2:ad:ba:7f:6c:37:97:7a:42:f7:ce:
5b:d0:7b:ab:45:2a:02:6e:e6:b2:49:21:dd:00:68:
06:ed:e9:b0:aa:88:6b:fe:51:c8:fe:a2:6a:7a:02:
5a:e3:4b:42:8a:7c:16:49:ba:e8:bd:8b:ff:e2:6f:
fa:79:e8:ca:96:27:35:8f:be:5b:8c:c6:b7:a5:a4:
10:e6:59:64:5c:d1:28:b4:af:f8:ef:65:0d:22:74:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:67:09:92:72:21:7F:2A:45:D6:C2:D6:13:5F:98:3B:DB:A4:A8:A2
X509v3 Authority Key Identifier:
keyid:17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:7a:eb:d2:c5:3c:3f:30:f8:54:5d:f4:ba:de:f8:c9:6b:b2:
3b:cc:f8:32:52:ef:01:53:45:34:c7:ba:61:07:10:b5:88:2f:
c2:a9:ad:ab:aa:3c:63:3f:cf:ae:fd:fe:56:66:01:17:8e:9e:
0a:48:b8:56:cf:f2:0d:52:13:e4:d3:05:d8:e4:b0:13:32:de:
30:42:f4:cf:6b:bf:06:2c:10:a7:4e:0d:cb:81:69:20:52:7f:
fd:2d:e5:fc:84:cd:f9:f6:4d:d7:72:36:79:91:39:55:47:07:
44:e4:26:d4:2d:48:e9:fb:32:f3:8b:b2:29:ed:32:dd:d3:52:
53:e4:bf:25:86:58:73:b4:55:13:c4:02:9e:10:ed:3c:3a:03:
d8:b6:b7:d2:76:f3:86:df:e6:f3:dc:ca:d9:82:9f:3d:b1:4d:
4b:31:86:f8:2f:13:78:08:c6:a2:46:47:15:6e:ae:8a:d2:60:
49:03:4c:f4:ca:c2:d1:b9:55:c5:b7:f5:f2:39:06:94:9d:dc:
d9:28:24:b0:71:0e:67:66:26:0b:86:14:5d:e8:08:0c:5d:e9:
05:73:40:ac:e4:3b:9e:d5:a6:56:dc:df:e2:dd:61:c8:44:3e:
e4:ba:89:de:be:40:41:46:7f:74:e5:fe:f7:ed:08:b1:89:f9:
f8:55:92:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:45 2025 by rpki-client