Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
File: RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json)
Hash identifier: z3GShOU9/6vss7pAssM180ANaW4eq1pLCjUKYNlGYE4=
Subject key identifier: CB:63:2C:D2:8E:E8:42:96:85:82:3B:EC:07:D2:FD:01:76:1F:2F:24
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Certificate issuer: /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial: 0194BCE0CFF60F323CC9E7F916570673B2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
Manifest number: 01AA
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: 0IGHMvAERBA8S7KMIurQQ4kwW4yGtqpr7gtnZxhAWUw=)
2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cf:f6:0f:32:3c:c9:e7:f9:16:57:06:73:b2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=cb632cd28ee8429685823bec07d2fd01761f2f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:d4:67:9a:a3:0a:37:88:b6:ea:f3:a8:ea:
d9:98:04:20:e9:b9:32:33:71:de:89:9d:9c:f1:ca:
4f:9d:8a:e7:85:2e:31:dc:57:f3:4e:ed:42:16:d4:
07:1b:de:28:b6:f6:32:a2:75:9d:8f:c9:e6:a2:e9:
0c:85:2d:c0:3b:38:6a:24:2b:82:1d:f3:d4:ac:e5:
ff:fb:77:8a:80:a1:07:16:1c:58:ac:97:b1:34:b6:
76:6b:95:2d:ca:f1:ac:30:f1:14:11:0b:99:5e:02:
d5:eb:92:ca:89:f3:b6:1a:5a:f1:0e:45:8c:b8:67:
e7:87:67:b0:2a:4b:6a:b7:43:a5:67:b7:8d:23:bb:
36:df:41:96:bb:32:cd:86:fb:57:d9:8f:50:31:07:
f6:72:4c:5c:cc:f7:ae:5c:97:7a:b3:4d:ce:75:53:
37:f9:ca:1b:4c:1a:b8:e7:f2:53:16:c7:0f:b7:eb:
3c:53:3d:14:f9:59:e8:89:51:7e:32:fa:50:6a:e5:
b6:00:2c:8d:32:cc:b9:bd:d3:bf:86:df:71:17:96:
b6:24:09:fe:91:df:15:65:b1:9d:a1:2f:bf:f3:b2:
5a:fd:f1:8e:53:b5:c5:4f:03:e5:d0:b1:f3:2c:0c:
75:07:5f:26:c6:da:57:c3:7e:be:ad:44:ba:a0:17:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:63:2C:D2:8E:E8:42:96:85:82:3B:EC:07:D2:FD:01:76:1F:2F:24
X509v3 Authority Key Identifier:
keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cd:d4:df:18:d5:ad:0e:83:b8:43:0f:79:45:51:27:f8:fb:
b0:e0:55:31:c4:a0:62:77:84:24:65:60:25:d4:fd:28:bc:d4:
f2:f0:38:d3:75:76:87:6b:b7:68:ed:f5:89:6d:c7:2f:52:07:
f0:0c:33:a7:58:e2:c8:b1:be:47:79:71:cf:28:6d:8a:1a:1d:
f2:d9:c4:55:32:86:e6:85:f9:09:75:bf:de:d6:8b:17:64:ce:
a2:3f:0d:b4:95:c9:f0:cf:f9:bc:4d:a5:9a:f7:fd:cd:ad:ef:
28:d7:8b:76:2b:1f:56:f6:f6:c4:38:68:95:2b:19:51:44:7d:
69:f6:b7:af:f1:29:4f:e4:b2:92:17:e3:19:88:95:5e:aa:f7:
62:cf:74:f0:a2:19:b6:b7:80:22:df:2f:03:f6:d9:97:c3:50:
0b:f8:5b:40:02:e8:e7:6b:af:db:18:70:d3:0e:73:18:14:39:
db:eb:1d:88:20:d5:90:6b:d2:18:13:7c:d2:fd:6e:d4:d5:82:
5e:43:3c:25:f0:87:91:08:8f:6c:ff:72:2f:2e:02:a7:22:86:
7e:45:eb:35:a2:2b:16:36:49:07:da:b1:0c:94:65:4e:02:78:
49:18:9d:1f:e8:81:a9:56:95:a6:8e:b1:3f:8e:85:3c:3c:9b:
18:2d:00:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:01 2025 by rpki-client