Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0b3cc1-318e-497f-a2b5-1316ad805e64/1/pol1o9gy4UUny7or4QujwebGOFY.mft
File: pol1o9gy4UUny7or4QujwebGOFY.mft (raw, json)
Hash identifier: t1h1G+FmCrLJzVNBvueJeWVWOz/j/uLSQDC3clPR7K8=
Subject key identifier: F9:5C:53:AC:23:BB:59:0F:96:DF:7F:8C:56:25:E6:CC:54:FC:25:97
Authority key identifier: A6:89:75:A3:D8:32:E1:45:27:CB:BA:2B:E1:0B:A3:C1:E6:C6:38:56
Certificate issuer: /CN=a68975a3d832e14527cbba2be10ba3c1e6c63856
Certificate serial: 0194BBCF03B7AC178F48E602686E576CD116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pol1o9gy4UUny7or4QujwebGOFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0b3cc1-318e-497f-a2b5-1316ad805e64/1/pol1o9gy4UUny7or4QujwebGOFY.mft
Manifest number: 03FE
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: pol1o9gy4UUny7or4QujwebGOFY.crl (hash: ptid/j3ZHXx0lX0UA4nJYMU/io7j0m48Qxh8ygkZoS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:03:b7:ac:17:8f:48:e6:02:68:6e:57:6c:d1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68975a3d832e14527cbba2be10ba3c1e6c63856
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=f95c53ac23bb590f96df7f8c5625e6cc54fc2597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:54:21:a4:0b:d1:3c:2f:80:b6:5b:f8:9d:
79:03:ca:09:93:55:ce:b1:6d:6f:a3:32:91:74:1a:
c1:16:8c:3b:b2:ee:5c:50:57:80:1f:8c:8d:43:ff:
0d:7d:ae:2d:94:63:2e:36:ba:8d:be:be:fb:1a:10:
77:7b:52:47:a4:2f:c5:32:84:a8:e2:c7:b8:f1:97:
90:cd:7e:dd:c2:c3:9a:be:c4:bd:4a:07:ec:8b:8d:
79:d3:70:45:17:c3:48:a3:d1:fe:d2:54:20:61:3c:
b8:a6:4d:35:91:6b:3a:9a:36:ab:80:fb:10:c3:9f:
fb:51:2d:ff:37:36:0d:80:e0:39:21:3d:b8:bf:2a:
88:61:28:9e:2a:3b:af:01:0b:73:4b:da:e6:ce:ad:
92:2d:8c:25:d2:9c:e7:48:a2:0e:ae:6d:50:b6:60:
3f:14:77:51:66:95:bd:ba:2b:07:77:4c:ed:3e:dc:
b9:ee:bc:cd:b7:40:fa:db:29:94:79:10:3b:af:d6:
7d:b7:49:85:6b:ef:4c:ad:d7:a0:ea:68:9e:aa:8b:
b3:f7:8f:4e:51:41:03:39:8e:52:27:66:6c:07:59:
9a:b4:ad:d5:7b:0b:5f:12:2e:11:77:4c:6a:c6:e2:
75:22:15:5c:d3:63:42:7d:50:8a:f6:42:b8:1a:8e:
ff:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5C:53:AC:23:BB:59:0F:96:DF:7F:8C:56:25:E6:CC:54:FC:25:97
X509v3 Authority Key Identifier:
keyid:A6:89:75:A3:D8:32:E1:45:27:CB:BA:2B:E1:0B:A3:C1:E6:C6:38:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pol1o9gy4UUny7or4QujwebGOFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0b3cc1-318e-497f-a2b5-1316ad805e64/1/pol1o9gy4UUny7or4QujwebGOFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0b3cc1-318e-497f-a2b5-1316ad805e64/1/pol1o9gy4UUny7or4QujwebGOFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:23:ed:5d:30:dc:0c:07:3a:0f:8e:e4:1c:d6:4d:8e:d3:59:
8c:aa:84:20:a4:2c:41:9d:a6:24:28:6a:57:b2:6a:57:5a:64:
71:ef:52:7a:62:e9:d4:66:b8:b5:0c:a9:52:01:9e:2c:b5:10:
bd:46:1f:19:0b:a0:8a:ae:db:c3:45:73:37:ed:55:8a:d8:4e:
b8:52:02:86:6a:94:e6:6b:1f:f1:71:1d:d2:25:a7:22:20:1d:
60:12:38:b6:80:14:57:f1:09:a6:28:4d:4c:50:03:43:76:e1:
bf:f4:2e:64:01:4f:50:35:29:4f:fd:ec:2d:fa:b8:a6:c8:52:
aa:d3:8a:c4:f3:2d:c1:4c:cd:20:e7:d7:86:a0:6c:fd:fd:bc:
38:27:65:c0:89:d1:d5:03:50:b7:a5:64:a3:d7:12:3b:41:ff:
e7:94:6b:29:cf:42:26:35:be:1c:6b:10:a4:08:23:cb:a6:23:
9b:11:54:2a:ba:ed:20:a3:81:66:74:b0:8e:13:23:4c:a1:49:
d4:31:06:d0:ce:c8:b6:b4:9d:f5:ba:8b:03:27:64:f8:0a:20:
69:ca:5f:dd:94:2e:fe:23:49:79:fb:de:04:93:4c:25:65:e3:
ab:02:52:9d:31:4c:5e:19:6f:00:e3:05:89:99:4d:b3:4e:be:
92:4e:a6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:07 2025 by rpki-client