Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
File: tT1dyv8VkDIr61fsPrrvYlBBKVU.mft (raw, json)
Hash identifier: TlzQMwsmIp4YZSCFxvID4Kv0J+uiLhU5GQMDiCJta80=
Subject key identifier: 2C:CC:B8:5C:81:D1:AD:AA:79:5C:79:6E:4C:FF:52:0F:85:74:94:FF
Authority key identifier: B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
Certificate issuer: /CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Certificate serial: 0194BBCDF8B33C3CBFD111BF4592F1F49057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
Manifest number: 06F0
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: tT1dyv8VkDIr61fsPrrvYlBBKVU.crl (hash: BzLGh7xLoTTQX0UttUa2MEWV6EkNEqTsig8/3VGXTTc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f8:b3:3c:3c:bf:d1:11:bf:45:92:f1:f4:90:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d5dcaff1590322beb57ec3ebaef6250412955
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=2cccb85c81d1adaa795c796e4cff520f857494ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:24:e2:d1:1d:1b:3c:fd:85:47:34:8b:3f:
76:49:7d:82:b0:62:84:5b:9f:d6:52:3f:06:64:e1:
87:2b:2a:5e:ac:89:8f:6d:1e:eb:e2:2b:4e:09:7c:
6d:55:df:c5:18:d0:71:86:df:e8:18:fa:a0:e6:23:
21:29:42:1d:b6:22:e5:f3:10:8c:74:41:6b:d8:00:
ea:87:c8:a4:35:35:1a:de:37:49:7e:4a:e0:ae:6b:
7e:48:7e:46:8c:9b:76:f8:50:bf:17:7f:60:36:1e:
ca:f0:02:6e:92:01:21:91:c2:91:f1:62:28:3a:e6:
55:cd:cb:d3:fa:f4:34:b6:ca:18:5e:08:92:a0:b1:
33:ad:e9:a2:c8:aa:ce:56:e7:46:c7:42:6a:8a:83:
37:02:75:d1:f7:03:ba:bb:e6:53:ac:07:cd:68:fa:
80:05:d0:97:95:3e:c4:06:54:ff:c6:e5:56:b1:26:
12:a6:ae:88:39:48:39:d9:2c:f9:84:5f:db:a9:65:
af:54:f8:36:8c:4e:e0:8b:73:74:35:f5:48:e5:29:
1a:da:8f:9d:51:62:ff:90:e4:d1:67:dd:7f:b3:99:
17:71:66:92:c9:6c:bf:b7:44:0c:89:92:7e:48:0a:
fe:9e:f7:7a:9f:2c:06:11:b2:07:d9:d9:b5:d6:4c:
3d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CC:B8:5C:81:D1:AD:AA:79:5C:79:6E:4C:FF:52:0F:85:74:94:FF
X509v3 Authority Key Identifier:
keyid:B5:3D:5D:CA:FF:15:90:32:2B:EB:57:EC:3E:BA:EF:62:50:41:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT1dyv8VkDIr61fsPrrvYlBBKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1f889b-4445-4770-a95e-f8063230e183/1/tT1dyv8VkDIr61fsPrrvYlBBKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3c:7b:f1:4a:bc:cc:37:55:88:1b:4c:f6:09:89:d8:fa:45:
42:3f:59:40:8d:da:b8:43:51:31:32:98:83:e5:14:0e:66:71:
54:45:58:19:c5:7c:f8:ed:de:ad:1a:25:33:57:cb:b6:24:00:
e0:d8:94:ea:96:93:d0:6c:d3:38:3a:e2:4e:2b:10:81:a6:e0:
84:3c:5c:73:53:9c:be:0e:ee:8c:bd:08:de:6f:b4:68:6e:e8:
37:f4:9f:09:2c:c3:7a:a4:d0:76:5b:b2:b9:b0:d7:c0:73:53:
a4:12:d0:73:94:57:4a:5b:25:c5:de:7f:f3:03:b2:a0:98:21:
37:19:9c:84:01:c0:88:a0:84:a0:51:0d:e6:ec:02:99:90:78:
32:ea:90:3b:d1:c7:63:59:37:c4:80:85:c1:ab:01:5f:9d:7e:
f2:11:ac:82:ba:3d:d1:b8:8d:8c:a7:d3:b7:04:01:9f:4a:2b:
10:03:18:f5:0a:e4:d2:70:4d:cc:90:53:f2:22:2d:ef:82:78:
6a:15:ea:c0:bc:d2:cd:1b:34:92:d7:23:0d:da:84:7c:48:8f:
aa:a8:9b:92:43:b4:a7:9f:68:3d:e8:db:86:1e:67:f6:5c:33:
0f:54:d0:7b:7a:a7:19:85:51:52:ee:16:f1:c9:20:ae:d8:46:
36:76:d4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:42 2025 by rpki-client