Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
File: fgdwhBDMdkNEuM-k8-NopeJStlA.mft (raw, json)
Hash identifier: U5Q7BhhOLNKGKrku4eFWjBlGuiOcOX0D71Z5An4ZD8I=
Subject key identifier: B0:36:AD:CA:A9:44:17:C6:DB:25:AE:46:7C:77:C9:E6:BA:38:E1:09
Authority key identifier: 7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
Certificate issuer: /CN=7e07708410cc764344b8cfa4f3e368a5e252b650
Certificate serial: 0194BCAA17FD7837675B3D3D47264D38ED11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
Manifest number: 0851
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: fgdwhBDMdkNEuM-k8-NopeJStlA.crl (hash: 0ROaYhZs+5LxUt8mCCCpScdynUzzdSsT72OMAfYDjZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:17:fd:78:37:67:5b:3d:3d:47:26:4d:38:ed:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e07708410cc764344b8cfa4f3e368a5e252b650
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=b036adcaa94417c6db25ae467c77c9e6ba38e109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:ab:3e:34:50:d8:3a:0b:9f:c0:ec:cb:c3:
d3:fc:d8:0c:c3:9a:8d:22:9b:11:46:80:a8:cd:0f:
7b:20:76:f6:0a:ef:98:53:8a:9d:bd:72:b7:c5:32:
8c:f4:ca:06:37:71:dc:2f:4c:6c:9b:29:22:f2:a5:
a9:76:47:c1:55:7e:f5:ca:50:92:be:22:61:63:cf:
f4:15:a4:f3:fb:14:ee:12:fc:a8:5b:f2:68:9d:48:
2c:5a:a1:7c:97:e3:8b:92:0f:cd:73:18:c9:75:b2:
bb:0e:05:a4:e0:99:0b:55:ac:43:3d:73:7d:57:63:
44:29:06:6b:ae:c3:06:0c:0c:1a:42:3c:70:3e:33:
bf:8e:78:95:85:a5:dc:d7:00:53:17:ac:1c:38:cd:
4a:c9:a3:42:f9:ee:15:88:ee:de:75:6b:95:10:8f:
5a:ae:7a:01:2a:3e:df:ad:af:8a:f9:f3:d8:e6:dd:
85:0f:c5:49:ba:28:b2:d3:5a:77:90:6a:da:34:d6:
ec:79:ab:88:7f:62:c1:32:d6:26:e4:3c:83:49:7c:
c0:81:4e:b9:62:33:73:ac:f7:65:fa:d5:80:30:73:
ee:9b:c6:46:ee:44:00:14:e8:30:b7:1e:f9:9f:5a:
4f:52:f4:89:b5:cf:90:cf:8a:82:87:82:70:80:d1:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:36:AD:CA:A9:44:17:C6:DB:25:AE:46:7C:77:C9:E6:BA:38:E1:09
X509v3 Authority Key Identifier:
keyid:7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:de:ce:6a:98:9a:42:c2:75:d4:4d:64:9d:03:12:79:44:24:
cb:43:25:d3:3c:47:85:03:c7:2c:2a:be:a9:49:7a:61:0c:61:
ff:94:b2:4e:42:9a:08:4d:61:a5:de:58:77:7c:39:27:8d:10:
5f:62:b9:e6:3e:92:44:5e:30:78:cc:6a:50:f2:1f:f4:5a:6d:
b9:85:fc:00:23:6c:e4:fe:f6:44:41:02:8f:6e:5d:61:0e:be:
a5:5e:94:e8:38:ec:bf:b7:1a:f8:1f:6e:86:45:79:bd:1c:18:
43:da:5d:36:3b:f7:4b:72:1e:ae:0c:2d:0d:69:45:c7:aa:15:
8e:2f:98:c1:fe:ee:79:54:76:b5:7e:7f:7b:e2:83:a9:2e:0a:
6e:69:4a:84:23:09:21:52:e1:c6:67:c0:c0:1c:6a:d0:91:93:
ae:8d:3e:cd:8d:84:39:a3:ae:15:e0:2d:fa:c0:49:e0:34:47:
50:66:e9:19:4c:59:54:d4:29:c7:af:95:67:54:ef:4d:6d:f1:
93:6e:54:ac:e0:71:03:db:69:b6:39:62:38:bd:4b:31:5c:98:
83:5b:b8:f5:34:99:29:8f:0f:44:c9:35:0b:78:3a:9e:d1:63:
b7:8b:56:bf:a7:81:a6:16:b6:7f:be:de:71:f1:0e:14:74:d7:
3f:c7:3d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:04:03 2025 by rpki-client