Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/3ac16c-e979-419a-a43b-8d1a783d1910/1/41FdROoARSPu02E7LRLpX0TYEg0.mft
File: 41FdROoARSPu02E7LRLpX0TYEg0.mft (raw, json)
Hash identifier: WiyzqHds0KYM6RihpdNBuhUeNGKGb+Rkkqe4lzXWNiY=
Subject key identifier: F6:81:B9:60:98:BB:7B:C0:BB:85:4B:F6:D0:07:7E:09:39:66:B4:78
Authority key identifier: E3:51:5D:44:EA:00:45:23:EE:D3:61:3B:2D:12:E9:5F:44:D8:12:0D
Certificate issuer: /CN=e3515d44ea004523eed3613b2d12e95f44d8120d
Certificate serial: 018AD0812DED3DB696CD2D5F704943187FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41FdROoARSPu02E7LRLpX0TYEg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/3ac16c-e979-419a-a43b-8d1a783d1910/1/41FdROoARSPu02E7LRLpX0TYEg0.mft
Manifest number: 0F04
Signing time: Tue 26 Sep 2023 08:00:41 +0000
Manifest this update: Tue 26 Sep 2023 08:00:41 +0000
Manifest next update: Wed 27 Sep 2023 08:00:41 +0000
Files and hashes: 1: 41FdROoARSPu02E7LRLpX0TYEg0.crl (hash: OVZ+jU8TcQkQuq5JJXDib27tj4cgm+RjLleX40LDprw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:81:2d:ed:3d:b6:96:cd:2d:5f:70:49:43:18:7f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3515d44ea004523eed3613b2d12e95f44d8120d
Validity
Not Before: Sep 26 08:00:41 2023 GMT
Not After : Sep 27 08:00:41 2023 GMT
Subject: CN=f681b96098bb7bc0bb854bf6d0077e093966b478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:ec:f1:67:7b:1c:5a:9b:7f:61:2c:3c:a8:
5a:c0:af:9a:24:c7:35:1f:34:92:5a:6d:86:42:3f:
63:21:90:4b:f0:4c:19:d8:4f:b5:16:3f:d3:92:b4:
d1:0d:49:01:3b:3e:57:5c:33:8b:0d:25:74:07:b2:
de:60:40:e3:56:4d:25:6d:60:02:b3:6c:ea:f7:35:
3b:84:16:f2:4e:a6:22:28:88:0c:ea:c1:40:7c:7c:
93:10:d8:db:5d:59:c9:a1:e3:46:16:44:1c:2e:97:
64:a0:59:ae:62:12:77:0d:c0:f8:9e:b8:14:bc:da:
bc:66:27:3f:dd:5a:95:eb:6b:f1:ab:4d:1f:46:5a:
f1:e5:88:fe:b0:01:b9:54:cc:39:9a:6a:4e:23:0b:
76:3c:9b:f4:ad:d1:1d:41:69:e4:a9:87:bd:09:7e:
5b:fc:46:a5:c1:3c:6c:1a:4f:4b:67:ad:dc:5f:d5:
af:db:cf:99:9d:21:10:4b:94:18:bf:d3:91:95:c2:
ac:91:fd:dc:d7:b4:7d:79:5d:63:2d:d2:a3:99:c1:
8f:38:0c:5e:7f:49:ec:72:49:77:b1:6e:7d:d9:60:
50:a8:74:da:2a:ec:bb:48:93:a1:0c:b4:42:44:8e:
38:71:95:22:d5:61:e7:55:e2:2d:77:3d:40:ea:61:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:B9:60:98:BB:7B:C0:BB:85:4B:F6:D0:07:7E:09:39:66:B4:78
X509v3 Authority Key Identifier:
keyid:E3:51:5D:44:EA:00:45:23:EE:D3:61:3B:2D:12:E9:5F:44:D8:12:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41FdROoARSPu02E7LRLpX0TYEg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/3ac16c-e979-419a-a43b-8d1a783d1910/1/41FdROoARSPu02E7LRLpX0TYEg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/3ac16c-e979-419a-a43b-8d1a783d1910/1/41FdROoARSPu02E7LRLpX0TYEg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0a:ad:34:56:b5:58:21:e9:aa:73:f6:e7:0d:9e:24:26:d9:
ff:16:56:30:12:59:8e:4e:39:9c:5d:11:52:45:cd:fc:cc:cb:
f6:0d:de:76:d8:b3:c9:c8:7a:5d:e1:15:84:ca:8b:68:cf:44:
68:a4:63:75:61:8a:dd:2c:bf:61:36:ee:60:f0:dc:38:7f:81:
56:2a:19:99:1a:67:2f:90:31:f7:30:ed:7f:ea:0f:8b:49:ba:
46:d3:00:57:81:d0:e4:d5:4a:5e:69:36:ad:c7:55:1b:c2:ce:
a5:73:c2:04:6d:2e:28:f2:eb:00:ba:6e:34:2b:b1:1a:35:25:
0d:3e:cf:0e:b0:2c:47:9b:33:76:89:5d:36:61:43:f5:7f:1c:
69:75:34:61:8e:27:86:b7:84:e3:12:ae:0d:a9:97:88:5b:d5:
8f:7a:8c:8c:f3:83:96:79:f8:bc:13:3b:e3:38:eb:38:22:8d:
e5:3a:75:4f:2d:63:b1:a3:92:50:42:4f:5a:e7:8c:19:f8:23:
17:21:30:20:eb:b7:24:71:b9:4d:70:ae:5a:ae:b6:dc:5b:35:
4d:dc:7e:70:77:d2:cc:38:50:89:91:f7:8f:96:9f:bf:6b:8d:
40:38:fa:51:6b:1b:b0:97:cb:e0:74:98:3e:a8:48:1e:4f:63:
0f:f8:0e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:23 2025 by rpki-client