Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
File: _s4nFs6tjACFRiJL5LVocIaD_0s.mft (raw, json)
Hash identifier: Rs0+0mf6uBnasKbPst8s3+w6CuYsiTJQhESooEUv8SI=
Subject key identifier: 4C:1D:82:18:79:F6:EB:78:36:61:6B:7F:32:B2:3C:28:F4:B1:DE:71
Authority key identifier: FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
Certificate issuer: /CN=fece2716cead8c008546224be4b568708683ff4b
Certificate serial: 0194BC72B38DAC63CCE70E38D5981A171A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
Manifest number: 1387
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: _s4nFs6tjACFRiJL5LVocIaD_0s.crl (hash: g4+q8ukmXHyHSiFC7PiU0Ca1BoEelkbIvmD7PeJoOyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b3:8d:ac:63:cc:e7:0e:38:d5:98:1a:17:1a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fece2716cead8c008546224be4b568708683ff4b
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=4c1d821879f6eb7836616b7f32b23c28f4b1de71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:df:25:73:bb:e8:5c:1f:12:e7:54:91:5b:
8f:61:fc:e8:86:0f:76:99:81:82:ab:7b:28:0e:29:
b5:ff:a6:7b:24:f8:49:cc:c6:c9:d8:ef:17:60:64:
37:1a:3a:cc:22:18:60:fe:6f:0f:f9:aa:54:a0:ed:
7e:57:af:16:4e:94:74:e8:1b:83:4c:83:52:3d:1a:
f4:64:90:8e:b8:e4:29:4d:f3:f2:b4:4e:c2:5f:23:
a4:e5:6a:39:8b:f9:46:ff:65:de:eb:07:2f:72:ab:
ef:d3:eb:a8:be:31:7e:22:ed:6f:a7:46:c4:50:2e:
10:ee:ba:96:d4:83:a7:82:57:5f:bf:22:ba:4e:66:
5b:59:e3:a7:1f:1d:9c:23:5c:a0:a6:65:fb:6e:9e:
8e:f4:f5:c1:6a:92:86:22:f2:b3:1f:28:b1:c9:52:
62:e0:a3:9a:70:3f:ff:62:72:77:7a:cf:31:12:7e:
d0:c6:9c:79:d8:b2:94:0e:60:54:9b:0e:c7:ad:50:
f0:b0:28:e7:cc:23:b0:8a:85:da:5c:36:3d:0f:de:
8c:67:71:af:03:0e:73:04:58:6a:50:0b:ed:b1:1b:
f1:99:91:dd:0c:79:42:97:a5:57:04:e8:e6:b5:3a:
8a:82:f3:5e:d7:12:f3:0e:69:5f:d4:bf:ea:0a:22:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1D:82:18:79:F6:EB:78:36:61:6B:7F:32:B2:3C:28:F4:B1:DE:71
X509v3 Authority Key Identifier:
keyid:FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b3:13:2c:d4:af:72:7d:89:c1:7a:bb:49:59:1d:d0:4f:f5:
33:23:68:28:72:ae:6b:1a:33:0f:13:0f:6d:5f:f9:80:9f:67:
4b:94:2a:b5:1b:08:8b:42:7d:16:27:98:ea:a7:fb:ef:51:5b:
c2:2d:4a:49:54:0f:f5:c1:9b:16:1c:83:a3:ae:5c:7d:69:bb:
15:cb:ea:4e:91:c2:b8:83:4d:04:49:1e:46:0f:44:3c:8c:e9:
43:ca:cd:cb:09:8d:5c:18:e3:be:64:85:3d:5f:40:fa:10:0a:
7c:d8:c3:6e:16:d4:42:39:42:21:d3:57:3b:11:d8:1f:05:15:
a1:cd:17:75:ea:66:0d:a8:65:92:d4:80:37:e7:5d:d0:ce:d6:
f8:68:92:68:96:aa:4a:49:59:65:28:9d:49:ca:e5:82:65:09:
18:09:cc:af:60:a5:ae:f3:67:20:00:61:f5:af:fa:2a:dd:8f:
09:e8:0f:9a:a3:d0:85:18:89:e1:0c:45:e3:b6:2c:99:28:b7:
00:7f:af:fa:f6:04:f0:9c:93:ba:07:70:73:57:b9:93:8a:ff:
85:25:85:99:be:93:e6:7b:d1:33:4a:4a:2e:1a:ce:71:21:6c:
fa:96:07:3d:91:67:c8:1b:10:46:e2:9a:d1:87:9f:26:64:fe:
0a:19:86:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:31 2025 by rpki-client