Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/fkjfjrkRmEdcx7Hmci0qsSXhZns.mft
File: fkjfjrkRmEdcx7Hmci0qsSXhZns.mft (raw, json)
Hash identifier: gY3l+Mqr6GUl+U6ckiU8pTtSE/FDpJ7/an26SBeKDRk=
Subject key identifier: 63:3D:FE:CC:F4:66:EA:78:B2:FD:4B:27:7D:D8:7E:A0:12:B0:4D:70
Authority key identifier: 7E:48:DF:8E:B9:11:98:47:5C:C7:B1:E6:72:2D:2A:B1:25:E1:66:7B
Certificate issuer: /CN=7e48df8eb91198475cc7b1e6722d2ab125e1667b
Certificate serial: 019488BC787E41954641F755F25166797862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkjfjrkRmEdcx7Hmci0qsSXhZns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/fkjfjrkRmEdcx7Hmci0qsSXhZns.mft
Manifest number: 0517
Signing time: Tue 21 Jan 2025 12:00:40 +0000
Manifest this update: Tue 21 Jan 2025 12:00:40 +0000
Manifest next update: Wed 22 Jan 2025 12:00:40 +0000
Files and hashes: 1: fkjfjrkRmEdcx7Hmci0qsSXhZns.crl (hash: 3ZRVW0rTkjntd9DMHDKN0VqMP+8NLUMgpN4YUvUnrzk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:bc:78:7e:41:95:46:41:f7:55:f2:51:66:79:78:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e48df8eb91198475cc7b1e6722d2ab125e1667b
Validity
Not Before: Jan 21 12:00:40 2025 GMT
Not After : Jan 22 12:00:40 2025 GMT
Subject: CN=633dfeccf466ea78b2fd4b277dd87ea012b04d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:12:c3:c6:a2:e0:0b:57:19:d3:b2:51:97:
9d:d6:28:29:d1:b0:ef:81:e0:c5:e9:9f:93:72:a7:
50:5e:c2:57:37:bd:09:63:21:9c:e0:94:4d:4a:16:
28:7c:fd:45:77:7d:a8:d4:41:8b:5a:d7:69:25:21:
40:c0:c7:b8:d5:fc:64:91:dc:45:47:a1:3d:28:63:
a0:c8:59:51:f9:12:f6:00:21:6f:6b:3b:2d:bc:1b:
e6:5f:ca:53:29:5d:32:17:49:18:1a:a1:a4:7b:ce:
12:41:c8:13:c9:63:a3:72:c8:6c:12:73:73:1d:7c:
cc:de:e2:16:0c:95:a4:9f:81:2e:fd:5d:c3:24:77:
c6:fc:8b:41:65:1d:49:06:1f:0a:b1:2e:36:7d:3b:
42:7d:ab:b6:ea:51:be:70:af:5d:f9:c1:0d:ad:10:
4b:86:d9:14:40:81:5c:84:39:33:7c:81:cc:c4:dc:
73:00:03:bc:b7:b1:1b:87:c1:f9:de:bc:19:77:a4:
de:27:1a:ef:5f:f1:7f:86:5c:37:ed:88:2b:93:cf:
64:01:2f:6d:a0:58:ac:bf:f3:18:f3:04:a4:f5:8c:
73:c6:74:81:d1:e8:10:89:04:d2:f3:3f:61:d2:e1:
bf:02:91:20:3e:fc:b9:1a:37:36:01:64:0c:6a:89:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3D:FE:CC:F4:66:EA:78:B2:FD:4B:27:7D:D8:7E:A0:12:B0:4D:70
X509v3 Authority Key Identifier:
keyid:7E:48:DF:8E:B9:11:98:47:5C:C7:B1:E6:72:2D:2A:B1:25:E1:66:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkjfjrkRmEdcx7Hmci0qsSXhZns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/fkjfjrkRmEdcx7Hmci0qsSXhZns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/fkjfjrkRmEdcx7Hmci0qsSXhZns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:30:b6:ac:20:42:70:d6:b6:2f:01:3c:18:40:99:52:fa:05:
0b:a6:63:62:74:11:75:23:cf:ca:40:e3:9a:9f:04:14:c8:7e:
8a:8e:d4:35:da:e9:89:ee:03:4f:71:47:5f:c6:60:27:04:7f:
58:34:af:46:ad:77:21:b9:d7:5b:dc:66:ec:88:42:d6:83:b0:
74:b5:d8:81:b3:ce:af:1b:f6:76:2c:a8:74:c7:a5:af:1a:8b:
d2:bd:10:86:ad:55:02:bc:24:eb:3d:a6:c6:10:e7:13:7b:17:
27:ac:9e:2b:a2:e4:33:d9:d8:6b:9c:a0:cb:29:0b:22:2a:4d:
32:bc:b1:f6:f2:26:ae:d9:8c:22:fa:28:21:3f:14:4d:20:3d:
90:66:7a:f9:7b:f9:92:25:df:17:aa:ee:38:c4:fc:c7:55:21:
91:08:da:0c:55:49:87:64:d7:5e:0e:a5:ff:6d:21:05:ce:ee:
df:81:28:c1:8c:22:7f:13:58:88:3e:72:51:da:2e:09:c8:b6:
23:12:df:9e:59:9e:fc:78:18:e2:20:4a:8a:6c:55:41:c8:72:
e4:d5:4f:a9:e8:ca:bd:ed:56:70:49:a8:64:37:0e:7f:a2:06:
dc:20:e3:78:6e:14:e2:37:09:8f:8e:01:5b:36:b6:17:5b:c3:
26:5f:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:13 2025 by rpki-client