Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f3e745-7fa2-4bfd-a365-8f895f2eae59/1/1CW1lbM28nYClQ6cwTseMncohAg.mft
File: 1CW1lbM28nYClQ6cwTseMncohAg.mft (raw, json)
Hash identifier: KgIWDKN9lb57jmFBiehsCCKhjhaiJ9M9C01MNrxKPCo=
Subject key identifier: E3:4B:FD:59:AE:4D:7F:C6:22:A3:AE:93:5E:E2:C1:43:DB:80:2C:3A
Authority key identifier: D4:25:B5:95:B3:36:F2:76:02:95:0E:9C:C1:3B:1E:32:77:28:84:08
Certificate issuer: /CN=d425b595b336f27602950e9cc13b1e3277288408
Certificate serial: 018B0092F8AC71A81E7AD0174A5675B4CE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CW1lbM28nYClQ6cwTseMncohAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f3e745-7fa2-4bfd-a365-8f895f2eae59/1/1CW1lbM28nYClQ6cwTseMncohAg.mft
Manifest number: 0565
Signing time: Thu 05 Oct 2023 16:01:53 +0000
Manifest this update: Thu 05 Oct 2023 16:01:53 +0000
Manifest next update: Fri 06 Oct 2023 16:01:53 +0000
Files and hashes: 1: 1CW1lbM28nYClQ6cwTseMncohAg.crl (hash: fDyD6uCXQygBtqzYK89zdkEbb7Nft1TFy+H+JbpTpoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:92:f8:ac:71:a8:1e:7a:d0:17:4a:56:75:b4:ce:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d425b595b336f27602950e9cc13b1e3277288408
Validity
Not Before: Oct 5 16:01:53 2023 GMT
Not After : Oct 6 16:01:53 2023 GMT
Subject: CN=e34bfd59ae4d7fc622a3ae935ee2c143db802c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:e1:18:85:7b:61:07:24:eb:58:06:ab:cb:
8a:2f:3b:4c:5b:bc:64:60:64:9d:a6:49:87:77:22:
ac:1d:8b:26:76:d5:a3:53:e6:99:aa:dd:9c:a9:19:
4e:d7:de:9c:e3:7e:ea:8b:03:86:bf:23:5e:18:a5:
c1:85:4c:7d:f8:fc:15:24:da:a6:85:d6:fb:8d:fb:
0c:fe:47:db:c2:c0:a6:62:29:23:f9:58:60:99:be:
1a:0d:49:08:9d:16:34:82:7b:81:c1:38:d5:0f:6b:
d8:20:8f:43:3f:46:b7:50:a2:9d:96:73:53:5b:d2:
d8:45:05:cf:84:9a:ce:e4:13:8a:22:1c:37:b7:f7:
42:f5:c7:2f:ab:c4:37:4b:aa:ec:23:4f:1f:15:a0:
c5:ec:b3:e7:6f:b0:35:2d:8d:b3:fa:8c:65:bf:8d:
ee:c7:92:0e:fc:17:b2:5d:1c:ce:14:34:d1:48:2a:
f8:5e:88:28:76:ba:84:79:a3:86:63:d5:e6:4b:b6:
b3:03:60:9e:c8:64:43:a2:30:ff:8f:cb:79:bc:c9:
6c:86:ec:b3:ff:f9:83:aa:b0:5c:de:bb:c8:ba:ea:
13:13:aa:a9:70:3e:68:98:25:c3:e3:c3:99:7a:c8:
c4:31:fa:b7:42:37:95:41:db:7f:9e:b8:bc:57:4c:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:FD:59:AE:4D:7F:C6:22:A3:AE:93:5E:E2:C1:43:DB:80:2C:3A
X509v3 Authority Key Identifier:
keyid:D4:25:B5:95:B3:36:F2:76:02:95:0E:9C:C1:3B:1E:32:77:28:84:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CW1lbM28nYClQ6cwTseMncohAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f3e745-7fa2-4bfd-a365-8f895f2eae59/1/1CW1lbM28nYClQ6cwTseMncohAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f3e745-7fa2-4bfd-a365-8f895f2eae59/1/1CW1lbM28nYClQ6cwTseMncohAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b5:56:51:81:0c:80:56:3d:32:2d:eb:49:c1:0e:2e:3e:79:
fc:14:45:da:4c:1c:a0:e5:67:e8:ec:01:f5:1d:99:8f:6b:d7:
c0:9d:cd:77:37:a3:b8:54:83:39:8c:2b:1f:0e:35:79:68:88:
31:0a:b2:10:7e:0b:ce:1c:e0:a0:a7:d1:c3:ce:8a:6c:de:12:
74:46:ba:85:1e:eb:e7:49:08:9b:08:3c:16:42:21:7b:fb:e2:
23:c7:37:80:3d:65:e5:94:fb:6a:65:e8:c7:a0:ee:95:23:35:
79:04:5a:85:e2:95:67:86:3a:ea:3b:a6:fc:f6:c6:21:ca:e2:
b6:28:78:9d:58:33:e3:d3:7d:b8:87:bc:f6:42:d6:3d:dc:a6:
59:46:00:18:34:87:1f:7e:58:fe:fc:dd:97:ca:b5:d3:31:8f:
05:0c:cd:46:6d:be:f5:77:9c:31:67:e6:84:4e:3e:32:94:4a:
9f:44:7d:b1:82:a9:ae:cd:3b:3b:34:d7:9f:b9:75:a3:85:58:
99:8e:4a:ca:2b:04:a0:6a:79:62:03:f7:4e:30:65:f4:6f:e1:
88:83:bc:a7:3e:88:be:ca:0e:54:b9:57:c4:7c:12:b5:5d:45:
a0:54:17:0a:6e:86:73:41:20:82:fe:a8:84:24:2a:0d:b8:37:
80:6f:45:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:21 2025 by rpki-client