Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
File: rCRVsahZvE1mGBdQVfDsiWB_BS0.mft (raw, json)
Hash identifier: PjlmCqNSeQWsWAFCu7L02Mo9jFG7W+r3GVBoH7GF/iI=
Subject key identifier: 64:64:E8:76:0A:EE:16:89:EA:20:E9:7C:45:25:18:E8:84:F5:7E:7D
Authority key identifier: AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
Certificate issuer: /CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Certificate serial: 0194BD17DFE84FC98C8BDD2E24F30F76EFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
Manifest number: 1168
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: rCRVsahZvE1mGBdQVfDsiWB_BS0.crl (hash: GV45ErjZRmTuXIZQOdcqSFPmcNjkORQQuok+s6NSSEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:df:e8:4f:c9:8c:8b:dd:2e:24:f3:0f:76:ef:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=6464e8760aee1689ea20e97c452518e884f57e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:a7:64:d6:6b:c8:47:f7:f2:d0:20:31:4b:
dc:eb:3f:b5:c8:26:2a:3d:7a:3b:3c:18:04:9c:f5:
66:30:04:e7:a1:2a:5f:db:d7:99:d8:b8:f0:9d:b3:
d2:f4:ff:3b:e9:90:a1:37:7d:92:f9:97:f0:55:53:
1d:a0:4b:9b:a8:ee:9b:41:ca:ad:6b:18:fb:fa:a7:
d6:9e:78:e3:49:e1:3e:53:99:0c:bb:9b:08:03:8a:
28:53:21:1f:cc:4b:83:e7:4e:6c:a5:d4:aa:09:3a:
52:28:ef:a5:7a:69:85:0f:cc:15:c4:85:2b:20:aa:
b7:cb:cf:e1:26:f5:62:f7:1a:b3:3a:1b:7b:0c:25:
df:0c:8d:28:33:02:c3:c7:0c:b5:81:9d:37:2b:a8:
2c:40:d2:be:4f:10:83:4f:12:02:3a:51:00:b8:09:
8c:06:20:6e:d8:fa:04:a5:dc:85:54:00:8f:ff:98:
fa:09:ea:95:9a:02:eb:3c:38:3f:22:96:fa:f9:67:
70:6a:00:5b:6f:c9:a5:ff:bb:ff:78:3f:e9:c4:83:
a2:f2:29:4c:c8:4c:35:30:8b:4c:80:b4:18:f2:15:
7a:68:1d:77:34:21:bf:b4:c9:59:37:07:c3:3a:b6:
a4:e7:e7:a6:72:20:4e:c0:31:21:59:45:0f:3e:b8:
1a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:64:E8:76:0A:EE:16:89:EA:20:E9:7C:45:25:18:E8:84:F5:7E:7D
X509v3 Authority Key Identifier:
keyid:AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:26:9d:ce:d8:d7:2b:e2:f8:ae:80:e6:4c:fb:c0:4a:25:4d:
0e:d3:d2:93:db:fe:8d:3d:56:ff:f4:b6:e1:26:c3:49:05:aa:
5c:ed:6b:ed:66:50:50:ce:95:4d:d2:57:2d:f9:58:05:fb:77:
ec:f9:2f:54:fb:fb:72:08:16:20:3e:44:6d:66:36:e5:7a:7f:
78:1b:5f:b8:91:48:e9:ee:e7:b2:21:96:08:c6:0d:54:9d:3e:
94:4b:92:de:66:d0:de:5b:0b:19:fd:30:bc:72:c1:97:e6:2b:
73:da:7c:ca:b7:27:1d:c6:86:0d:b6:58:a0:fb:5b:4a:c4:f7:
5c:70:84:37:d2:03:b5:56:27:b9:2a:f8:52:24:4c:73:6e:e9:
5e:8d:6b:74:d1:7c:48:26:4f:b1:ea:29:0b:df:14:fe:46:4f:
f0:20:0c:3a:78:23:8b:1a:f9:f1:1e:f8:db:66:23:f8:cf:47:
17:43:64:a7:49:52:bc:a0:1e:55:f1:23:41:69:11:de:c2:3b:
aa:41:c0:e5:2e:5b:63:f3:29:a8:4d:e0:fc:55:35:8e:bf:80:
d0:f1:80:fc:0c:59:08:e9:ee:de:79:ce:aa:e9:0e:8e:46:7f:
33:69:c5:77:f4:13:c3:de:e2:f3:80:bc:36:18:40:cf:f8:c5:
f5:5b:d1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:45 2025 by rpki-client