Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b764c-66db-425a-a8ee-e6b51b65e8dd/1/x7J3FsXQI9zkS6eLTpRQrQz6tBQ.mft
File: x7J3FsXQI9zkS6eLTpRQrQz6tBQ.mft (raw, json)
Hash identifier: fKFomuzeAPPSQsVrz/E5C+SQCVkCGWLCzghM3C6316E=
Subject key identifier: 23:DF:74:30:75:C3:A5:2B:BF:A3:C4:0C:77:72:1C:11:DA:2A:51:E5
Authority key identifier: C7:B2:77:16:C5:D0:23:DC:E4:4B:A7:8B:4E:94:50:AD:0C:FA:B4:14
Certificate issuer: /CN=c7b27716c5d023dce44ba78b4e9450ad0cfab414
Certificate serial: 0194BAF285E8FC4F5B571297CC3E3DA94159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7J3FsXQI9zkS6eLTpRQrQz6tBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b764c-66db-425a-a8ee-e6b51b65e8dd/1/x7J3FsXQI9zkS6eLTpRQrQz6tBQ.mft
Manifest number: 03AB
Signing time: Fri 31 Jan 2025 06:00:43 +0000
Manifest this update: Fri 31 Jan 2025 06:00:43 +0000
Manifest next update: Sat 01 Feb 2025 06:00:43 +0000
Files and hashes: 1: x7J3FsXQI9zkS6eLTpRQrQz6tBQ.crl (hash: Fd9MD7WlxD3KuCBGabfjy8UdE7Y5gqF28GCcUp2sEaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:85:e8:fc:4f:5b:57:12:97:cc:3e:3d:a9:41:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b27716c5d023dce44ba78b4e9450ad0cfab414
Validity
Not Before: Jan 31 06:00:43 2025 GMT
Not After : Feb 1 06:00:43 2025 GMT
Subject: CN=23df743075c3a52bbfa3c40c77721c11da2a51e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:ee:af:2c:6a:48:99:f1:77:4a:bd:1c:35:
3a:9f:44:9a:20:b1:4c:b0:3d:f2:f1:21:a3:bc:9b:
37:c7:d5:46:f8:ea:96:b8:eb:e3:b7:14:98:72:d4:
03:19:49:98:17:04:36:8b:2c:8b:93:54:5c:85:15:
a7:9a:65:de:02:db:98:67:ab:69:68:c0:ac:3a:03:
92:e5:80:ee:6c:d5:46:b3:42:db:6c:21:20:a3:0c:
9d:55:90:49:c5:44:4a:03:fe:a9:e9:0a:77:43:a7:
51:f3:18:20:e6:48:6b:5b:2b:0d:ca:70:0b:62:ac:
c5:3a:5b:c3:cf:b2:14:f6:e0:e3:ed:38:53:51:3f:
69:0c:27:a7:ad:af:c6:f5:3f:08:82:41:5a:b1:c8:
ae:be:5b:9e:0d:48:8c:7c:2c:aa:3c:c5:38:d6:f9:
31:c7:fb:5f:f6:6a:05:12:93:98:d0:0f:e7:02:b0:
55:f4:74:20:e6:0e:4c:a5:22:cf:5b:4a:45:05:31:
48:30:34:f3:1f:99:f6:e2:ce:3d:8c:8b:04:48:56:
df:59:47:98:2d:c1:cc:6c:56:14:68:ed:dc:90:76:
98:84:00:19:a4:75:84:3e:79:aa:68:8c:fe:fe:12:
08:06:2e:e4:b1:8f:9f:dd:5e:56:02:58:da:6f:1f:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DF:74:30:75:C3:A5:2B:BF:A3:C4:0C:77:72:1C:11:DA:2A:51:E5
X509v3 Authority Key Identifier:
keyid:C7:B2:77:16:C5:D0:23:DC:E4:4B:A7:8B:4E:94:50:AD:0C:FA:B4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7J3FsXQI9zkS6eLTpRQrQz6tBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b764c-66db-425a-a8ee-e6b51b65e8dd/1/x7J3FsXQI9zkS6eLTpRQrQz6tBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b764c-66db-425a-a8ee-e6b51b65e8dd/1/x7J3FsXQI9zkS6eLTpRQrQz6tBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9d:8b:7a:08:29:d3:25:18:b7:5c:23:0a:96:21:51:8c:9d:
16:3c:b0:11:26:8b:f4:74:bf:46:07:9c:91:ed:bc:bc:35:5a:
ec:5e:29:dc:31:53:22:6e:3f:b7:c0:4a:c6:ec:85:d3:01:0a:
9a:f4:38:bb:52:36:fc:1a:c1:ef:d5:f8:dc:b2:a0:bd:b4:bc:
a0:e8:60:e7:73:12:c1:6d:d8:cd:44:11:f9:d7:45:80:69:38:
92:10:c5:f5:0e:b0:e3:d3:f4:9b:ab:f6:82:d9:e5:df:73:10:
83:34:f8:30:d2:9a:b8:8a:ee:72:d2:70:7b:7a:6a:aa:7d:7a:
fd:7d:eb:29:ae:34:f8:3a:02:c0:c6:e7:3b:8d:e6:93:b1:a4:
75:71:39:da:38:f6:47:00:4b:fe:f6:23:ad:3f:6b:c5:3b:ea:
5e:d8:a3:94:cb:df:b9:3f:9e:a1:e4:89:93:e2:40:25:b3:b0:
fa:63:24:69:b8:b3:90:a6:03:67:10:35:bf:d6:6e:47:2c:4b:
f5:47:57:85:e7:06:8a:be:ec:ea:ce:08:33:d0:c0:7e:81:4a:
ee:ef:c7:e4:c9:f0:be:8e:8a:c5:64:25:1c:5e:e5:28:e2:a6:
ac:ef:5b:79:e2:4b:dd:63:54:e8:6f:ab:0b:d6:22:4c:29:d6:
7e:3d:97:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:40:10 2025 by rpki-client