Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft
File: 3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft (raw, json)
Hash identifier: dvKx41SQ3vfHslz8dghx74SEH+69k8oV2aXrf2eibqU=
Subject key identifier: 22:B6:26:4A:70:E5:E4:78:95:CD:F3:13:96:B5:BA:DD:40:BD:41:FE
Authority key identifier: DC:09:B2:0C:F0:23:C7:30:2F:EF:EA:49:C8:14:9A:1C:B0:AB:22:46
Certificate issuer: /CN=dc09b20cf023c7302fefea49c8149a1cb0ab2246
Certificate serial: 01926BCA1F6A9FE0A304CB7955A8C16B0BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AmyDPAjxzAv7-pJyBSaHLCrIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft
Manifest number: 0674
Signing time: Tue 08 Oct 2024 11:01:01 +0000
Manifest this update: Tue 08 Oct 2024 11:01:01 +0000
Manifest next update: Wed 09 Oct 2024 11:01:01 +0000
Files and hashes: 1: 3AmyDPAjxzAv7-pJyBSaHLCrIkY.crl (hash: tOBAk2XeNVZKiL/eCbqs016dnaFffe4rtG052SQ930I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:ca:1f:6a:9f:e0:a3:04:cb:79:55:a8:c1:6b:0b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc09b20cf023c7302fefea49c8149a1cb0ab2246
Validity
Not Before: Oct 8 11:01:01 2024 GMT
Not After : Oct 9 11:01:01 2024 GMT
Subject: CN=22b6264a70e5e47895cdf31396b5badd40bd41fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:71:6b:bf:ff:fb:59:8b:20:c7:c5:7d:1a:
8e:f2:74:9c:e9:2b:39:f6:d8:d8:36:4e:6b:88:c4:
cb:b9:fd:52:b6:3a:c5:19:8d:e3:f6:33:9e:2e:07:
64:87:30:b9:40:1a:e9:90:23:f6:72:3f:06:93:c0:
ab:c3:83:6a:ff:39:41:0e:e4:ce:d0:2c:ba:04:2d:
3b:2c:8d:4c:7c:8c:b6:b9:6e:95:13:99:b6:0e:58:
71:19:db:6b:37:19:95:4b:be:bc:c4:dc:d5:2d:59:
20:b9:c1:de:9c:b2:71:ed:42:05:0e:61:5d:b1:2f:
82:0b:64:6d:b8:5d:4e:e2:08:af:4a:1c:3c:97:06:
81:1c:02:be:08:cf:c8:20:64:e2:29:f4:84:07:59:
cc:ce:14:49:88:5e:6f:33:80:cd:92:48:ca:db:ac:
97:af:69:f8:a9:ac:25:05:b8:e5:c6:33:87:07:26:
ce:80:a5:0b:1b:41:e0:34:87:d8:ed:4c:af:f9:bf:
19:f1:94:64:c2:00:e6:ed:61:85:de:a1:a6:79:cb:
52:9b:70:07:49:d1:8e:f5:9a:bd:fc:ec:98:8f:17:
74:84:61:67:89:ff:d4:4d:3a:88:2c:a2:34:e6:0e:
ab:a5:47:86:e6:55:20:91:34:f5:eb:79:2f:6b:12:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B6:26:4A:70:E5:E4:78:95:CD:F3:13:96:B5:BA:DD:40:BD:41:FE
X509v3 Authority Key Identifier:
keyid:DC:09:B2:0C:F0:23:C7:30:2F:EF:EA:49:C8:14:9A:1C:B0:AB:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AmyDPAjxzAv7-pJyBSaHLCrIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f4:90:0a:14:8b:7b:76:56:f0:32:b2:0e:fa:49:9f:c4:2b:
3b:e7:8e:d4:31:86:be:72:e8:a5:f3:f1:90:f6:54:b4:e2:e6:
52:96:d1:65:09:3b:51:cf:2a:ff:b8:cc:d8:67:b5:52:e6:45:
99:07:25:a4:19:82:36:ee:38:d0:c5:2e:0f:53:25:c5:c6:ee:
be:da:d8:8b:6e:5b:e8:8e:35:3f:59:8f:61:6c:4b:c9:a0:0d:
50:fe:3f:c3:0d:83:09:28:3f:12:6f:7e:f1:e6:61:77:22:50:
bc:c6:09:c6:b4:e6:3b:c4:f7:fa:e5:e5:76:0e:c7:39:82:c4:
a6:75:e7:6c:92:32:fc:d8:10:f9:5d:7a:fe:0c:8c:97:c2:5a:
95:bf:1f:3a:57:0f:79:92:28:26:60:ce:a5:bc:2d:c6:39:75:
6f:5c:0d:6b:aa:e8:8e:22:45:f1:0f:56:1b:f1:c2:a4:07:57:
0a:4c:83:ba:3a:11:e1:d8:69:1e:ce:df:4d:0b:09:6c:2f:df:
82:7d:08:ea:ef:89:f6:42:5c:9a:27:14:f6:5c:e7:cb:b5:33:
86:27:91:04:85:92:68:6a:84:d4:c5:78:79:86:1c:7f:e8:37:
78:e9:0e:8e:37:d5:39:10:e5:f3:92:88:a4:90:fc:7a:87:28:
85:85:38:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:32:47 2025 by rpki-client