Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
File: 03h3GhBvaw0FSld4U1aSLK8C40M.mft (raw, json)
Hash identifier: SEeB7Y7hbxi+EKXurdd+5pJCQTI+cFcbJyTe/1k/nPM=
Subject key identifier: F4:D6:A7:E8:57:61:91:BB:B9:14:BC:C1:91:16:E9:10:EA:21:41:B7
Authority key identifier: D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
Certificate issuer: /CN=d378771a106f6b0d054a57785356922caf02e343
Certificate serial: 0194BC3C50FD65571FFBFEFB8AEA7529357D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
Manifest number: 07D4
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: 03h3GhBvaw0FSld4U1aSLK8C40M.crl (hash: 7OV894BiwDHs5n7d2O50yuyWYmO6bor/77bzpaOgg1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:50:fd:65:57:1f:fb:fe:fb:8a:ea:75:29:35:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d378771a106f6b0d054a57785356922caf02e343
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=f4d6a7e8576191bbb914bcc19116e910ea2141b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4c:7f:07:93:09:64:07:20:8d:69:e0:b8:d2:
d0:81:6f:38:42:32:83:7c:b9:46:9b:a4:fe:33:23:
79:d5:bf:6d:8b:3d:fb:1a:23:e8:0d:f2:fb:47:13:
9c:93:dd:81:6b:b7:d1:9f:a2:38:62:61:fd:8c:c6:
89:db:ef:21:d0:a0:09:14:2f:ab:6d:10:f3:76:cd:
44:71:2b:12:84:7e:19:ac:d9:47:80:b0:e2:18:0e:
55:19:77:3e:1b:37:f1:55:6c:54:20:e1:e8:42:a3:
43:f3:fb:d7:8a:1f:fd:19:f5:60:90:43:05:61:00:
30:1f:5d:45:bd:98:48:d3:84:48:e9:d9:22:7c:9d:
d0:3e:0d:a7:28:d8:5a:56:2e:eb:c3:f2:99:dc:1c:
35:b9:61:c8:d9:8e:b0:87:86:d8:e2:6f:8e:d3:d0:
a5:4e:41:90:5d:79:c6:9f:0b:31:87:77:dc:90:bd:
ce:b0:bc:96:b9:3c:63:66:3d:0a:42:d2:87:3f:7e:
8b:09:54:96:0e:c0:f2:33:9e:d5:48:eb:a4:78:6e:
e6:7f:d7:97:a2:93:0f:ff:57:18:c8:de:c5:ea:a2:
ff:20:3c:7d:b8:0b:8b:b9:1a:94:e2:3e:66:17:54:
d2:4e:d3:0a:3e:e1:51:b5:fa:b3:a9:72:79:5b:67:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D6:A7:E8:57:61:91:BB:B9:14:BC:C1:91:16:E9:10:EA:21:41:B7
X509v3 Authority Key Identifier:
keyid:D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:97:25:b5:84:1c:67:b2:10:c1:b3:e2:15:47:11:bb:b2:99:
9b:0c:b3:ad:ee:2a:71:f9:04:1f:86:ab:4b:7a:30:98:6e:0a:
fe:19:08:52:be:e9:39:28:2d:59:47:78:ee:6d:be:2e:dd:ce:
d7:d5:bc:17:e4:74:21:bb:8f:80:e9:75:9f:ca:f0:14:02:39:
cd:5d:74:db:b2:8f:7e:9a:6a:32:98:78:e1:17:7e:0d:cf:b7:
c5:69:ad:c5:b8:81:01:b3:37:b9:a6:4c:91:c0:f3:48:8e:46:
e8:b7:de:18:62:93:c0:1f:81:46:5a:17:62:55:f4:86:ce:63:
19:d8:a1:88:3c:01:a7:2b:36:11:f3:30:22:8b:0a:fe:c2:71:
2d:68:39:68:f3:a0:36:23:1d:13:54:63:56:c5:fc:2c:f0:9d:
7b:c2:08:0c:cb:33:43:bd:63:b4:30:b0:fe:5d:47:2b:a3:18:
77:f1:b9:a5:ed:c4:9a:bb:ff:09:b8:c5:b4:fa:d9:44:22:74:
70:5c:e7:d9:4e:13:76:41:b0:3b:65:21:c5:05:08:15:10:84:
8e:4b:72:67:11:7d:36:ae:71:6a:8b:cf:84:cf:e3:d7:41:2e:
e1:79:d7:82:ab:ed:8c:45:c0:e5:32:83:a1:8e:e9:2d:b1:02:
f7:b9:88:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:14 2025 by rpki-client