Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ac4d63-5759-4f92-aee6-d66ff6c18f94/1/85n9xZofIeTKd_cxzNotdZZFoKc.mft
File: 85n9xZofIeTKd_cxzNotdZZFoKc.mft (raw, json)
Hash identifier: jcXgVcO3G0K4n8WKKnFrKASDZhowlQ8oXAHLxSezykk=
Subject key identifier: CD:F8:FC:CA:F0:D5:2A:E1:8E:4B:BC:80:5E:24:85:DD:A3:D5:3A:0A
Authority key identifier: F3:99:FD:C5:9A:1F:21:E4:CA:77:F7:31:CC:DA:2D:75:96:45:A0:A7
Certificate issuer: /CN=f399fdc59a1f21e4ca77f731ccda2d759645a0a7
Certificate serial: 018D310B813369D58772848C7F1B3DC12536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85n9xZofIeTKd_cxzNotdZZFoKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ac4d63-5759-4f92-aee6-d66ff6c18f94/1/85n9xZofIeTKd_cxzNotdZZFoKc.mft
Manifest number: 0343
Signing time: Mon 22 Jan 2024 12:00:53 +0000
Manifest this update: Mon 22 Jan 2024 12:00:53 +0000
Manifest next update: Tue 23 Jan 2024 12:00:53 +0000
Files and hashes: 1: 85n9xZofIeTKd_cxzNotdZZFoKc.crl (hash: E/pqhdf1K50suTrmLgJFozrk5x10CZiHjBLeZo5Llwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:0b:81:33:69:d5:87:72:84:8c:7f:1b:3d:c1:25:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f399fdc59a1f21e4ca77f731ccda2d759645a0a7
Validity
Not Before: Jan 22 12:00:53 2024 GMT
Not After : Jan 23 12:00:53 2024 GMT
Subject: CN=cdf8fccaf0d52ae18e4bbc805e2485dda3d53a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:7b:95:4e:fd:8f:4b:07:85:21:60:81:96:
74:f5:e8:79:22:40:24:31:2b:79:34:8b:e1:cd:b3:
59:40:63:4d:7b:9c:e3:18:79:37:cc:1b:48:d8:e9:
f9:d4:83:2f:4f:0d:28:3d:f6:df:84:03:b0:ae:37:
9d:50:15:df:e7:be:3e:80:92:39:ac:b1:62:3b:7c:
4a:a6:98:d1:7f:1c:82:42:8d:18:85:3d:b3:b3:88:
4a:a4:2f:0e:92:d8:07:fd:04:2d:0d:c3:09:3e:01:
53:20:92:f5:bc:6d:a6:a5:0b:80:85:6d:2a:b4:f2:
15:13:55:d2:b4:76:0b:8a:3b:a9:25:78:62:d0:d7:
d7:c0:78:a3:64:c5:55:07:9a:1c:19:53:27:4f:2b:
49:3e:c8:0f:15:14:68:9d:70:d2:0e:70:52:50:fa:
96:8e:d2:39:a8:fd:6d:62:d5:43:7a:d7:4d:23:8b:
ca:4a:bb:28:f9:46:99:ce:30:c6:53:be:05:9a:26:
c3:6c:fa:31:47:ed:f8:fb:c2:ba:06:af:f4:41:f8:
0f:26:fe:65:26:13:ff:2e:d9:ff:be:e2:3a:99:a4:
1b:cd:31:8d:7c:41:eb:a2:68:e8:26:1c:10:54:a3:
88:63:e7:9e:2a:9e:38:da:c6:5e:41:d2:ae:07:41:
f5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F8:FC:CA:F0:D5:2A:E1:8E:4B:BC:80:5E:24:85:DD:A3:D5:3A:0A
X509v3 Authority Key Identifier:
keyid:F3:99:FD:C5:9A:1F:21:E4:CA:77:F7:31:CC:DA:2D:75:96:45:A0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85n9xZofIeTKd_cxzNotdZZFoKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ac4d63-5759-4f92-aee6-d66ff6c18f94/1/85n9xZofIeTKd_cxzNotdZZFoKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ac4d63-5759-4f92-aee6-d66ff6c18f94/1/85n9xZofIeTKd_cxzNotdZZFoKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:48:01:d1:ca:cd:a6:41:e9:f8:26:ed:ed:eb:33:ca:9e:0e:
b7:db:7a:35:8d:aa:4a:3f:bd:c3:78:1d:00:87:16:00:2b:d6:
f1:a7:c2:24:bc:82:8f:7f:f1:0c:39:a6:62:8b:f8:57:d1:54:
4f:84:b4:15:0d:60:6f:0c:0d:a6:8e:38:77:78:ef:84:f3:d3:
ed:33:59:72:e9:93:40:a0:3a:65:38:dd:22:51:60:36:09:52:
45:03:ae:0e:fa:3f:0f:3f:71:f1:cf:2d:80:0e:22:43:d7:0a:
6a:b9:00:1b:d8:a0:bd:dc:d7:d8:9c:76:f4:50:7a:f1:98:a5:
53:63:e3:d7:d1:92:c3:93:a2:81:a0:45:26:db:14:23:99:97:
48:06:e9:ef:7c:92:c4:ef:6d:88:37:06:e4:57:db:0e:18:24:
df:90:33:d6:32:aa:cf:f2:58:0c:e5:a8:8c:55:d2:be:35:75:
6f:0f:8a:de:77:43:95:2b:dd:c3:03:77:b2:cd:d3:0b:10:2b:
12:9f:fa:17:4f:d6:44:37:26:fe:3c:64:0c:7b:f0:02:47:bd:
da:9f:1b:a0:7b:3c:3d:e3:4a:dc:f3:90:bb:b1:42:28:a4:a1:
25:91:5f:8c:df:f8:ef:36:6d:7e:09:3e:6d:6f:25:5e:4e:93:
02:6f:48:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:58 2025 by rpki-client