Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/00871d-8f2e-486c-84af-e813d97ec3e5/1/rf0_D8x-GvBSmX2TVFYqyezSwZE.mft
File: rf0_D8x-GvBSmX2TVFYqyezSwZE.mft (raw, json)
Hash identifier: buTJBFzBCRfCqhJWnGXG1pQXtQuYruDdbV2iYOmRSgY=
Subject key identifier: 8A:CA:11:51:18:2A:63:08:CA:F5:0D:52:3B:D9:1A:3E:24:6A:0E:8F
Authority key identifier: AD:FD:3F:0F:CC:7E:1A:F0:52:99:7D:93:54:56:2A:C9:EC:D2:C1:91
Certificate issuer: /CN=adfd3f0fcc7e1af052997d9354562ac9ecd2c191
Certificate serial: 018B526939B120FF7335C1442DF4A0A984F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf0_D8x-GvBSmX2TVFYqyezSwZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/00871d-8f2e-486c-84af-e813d97ec3e5/1/rf0_D8x-GvBSmX2TVFYqyezSwZE.mft
Manifest number: 01
Signing time: Sat 21 Oct 2023 13:25:09 +0000
Manifest this update: Sat 21 Oct 2023 13:25:09 +0000
Manifest next update: Sun 22 Oct 2023 13:25:09 +0000
Files and hashes: 1: rf0_D8x-GvBSmX2TVFYqyezSwZE.crl (hash: r8rAQCYiqI6Nk1nWydkSPTS6luEXIDvGf7ZT/k9ueNY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:52:69:39:b1:20:ff:73:35:c1:44:2d:f4:a0:a9:84:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfd3f0fcc7e1af052997d9354562ac9ecd2c191
Validity
Not Before: Oct 21 13:25:09 2023 GMT
Not After : Oct 22 13:25:09 2023 GMT
Subject: CN=8aca1151182a6308caf50d523bd91a3e246a0e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:94:f7:14:8f:3f:89:b9:57:a1:4b:02:c6:
4a:8e:10:7f:b5:55:85:73:55:9d:9a:c5:20:5e:3e:
c1:87:03:a3:0d:e8:c0:dc:28:c4:20:89:94:23:5e:
ec:4a:cc:20:27:66:3b:76:c2:ab:de:50:9f:7e:f5:
75:47:84:65:22:a0:36:a8:b6:4e:9d:a3:71:6a:cc:
cb:2f:6b:c4:4d:9a:17:41:47:1b:53:36:88:b9:98:
c2:c8:24:d5:aa:30:f6:16:cd:ca:24:44:ee:be:9f:
96:4a:b9:01:26:2f:73:cd:1b:2d:8c:74:1a:13:18:
7f:49:7a:03:69:77:52:af:ad:7d:ff:82:e9:c2:9a:
ca:25:85:36:d2:12:c1:20:9a:94:56:f1:73:52:0e:
25:72:48:74:82:e7:81:19:8d:0a:30:04:f3:a2:83:
dc:2e:46:d5:5a:3e:fb:f1:85:cb:db:50:31:7b:4b:
63:6f:8d:4d:17:f8:00:e2:de:2d:e0:b6:54:e6:72:
6e:92:2b:dc:3b:00:2f:8b:3c:50:bc:c6:91:b2:09:
9c:3f:d1:1a:10:3e:b4:16:2c:2e:6e:dc:ef:09:ba:
e5:dd:78:19:04:47:d1:d8:df:38:1a:69:7d:40:03:
dd:bc:3e:8c:e0:4d:15:f8:ca:5f:2d:2c:09:53:47:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CA:11:51:18:2A:63:08:CA:F5:0D:52:3B:D9:1A:3E:24:6A:0E:8F
X509v3 Authority Key Identifier:
keyid:AD:FD:3F:0F:CC:7E:1A:F0:52:99:7D:93:54:56:2A:C9:EC:D2:C1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf0_D8x-GvBSmX2TVFYqyezSwZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00871d-8f2e-486c-84af-e813d97ec3e5/1/rf0_D8x-GvBSmX2TVFYqyezSwZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00871d-8f2e-486c-84af-e813d97ec3e5/1/rf0_D8x-GvBSmX2TVFYqyezSwZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3a:69:d9:ed:16:b2:6f:9b:c6:a6:e6:09:8e:b9:c2:e2:b0:
8e:04:42:d6:7a:bc:bc:6e:5c:85:54:ac:f6:90:65:94:3c:2c:
2b:4d:24:3b:31:a6:03:29:14:a7:5d:f5:11:d0:c4:ab:7c:f5:
d8:a4:13:20:8c:dc:21:a6:67:4e:fa:59:c8:52:f3:30:b2:0a:
27:23:20:9c:19:4f:0a:2f:9f:55:da:ff:08:ae:c5:37:69:4c:
f3:8f:49:d0:0c:39:42:98:ac:7e:11:27:7e:66:81:a9:3d:cf:
72:28:31:27:12:9a:0c:37:2e:c4:db:23:75:1d:27:56:c6:55:
6b:f6:80:ac:86:cb:d7:94:28:86:b6:d6:d8:be:1e:11:9a:a9:
9f:6b:a8:2d:3f:81:e1:90:4f:44:35:a5:2c:81:48:4a:de:9e:
8e:da:da:72:8c:02:2d:25:24:d8:7f:ec:da:b5:52:d6:d6:d4:
ec:83:f0:ed:8e:ca:03:14:c3:e6:2a:ac:33:dd:5b:0e:72:e3:
c7:e0:c4:75:a9:69:88:65:24:93:1c:c4:1b:02:79:ea:7e:90:
6b:86:d5:b4:7d:35:d5:00:52:3a:32:88:74:91:c0:7b:41:eb:
bc:f4:28:4c:5f:b7:84:8f:9d:34:7c:b6:ed:ab:cd:d4:5a:eb:
31:61:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:55:51 2025 by rpki-client