Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.mft
File: 925jlSS9okW5LbTLvKVr06ekrgw.mft (raw, json)
Hash identifier: 7pcG86H9cgA282xsoYScBwc1wFKVGWU8F1XoEJYm4hk=
Subject key identifier: F1:29:B8:3D:CD:C4:E3:F7:22:95:73:86:D0:BA:A3:3B:00:33:D5:E4
Authority key identifier: F7:6E:63:95:24:BD:A2:45:B9:2D:B4:CB:BC:A5:6B:D3:A7:A4:AE:0C
Certificate issuer: /CN=f76e639524bda245b92db4cbbca56bd3a7a4ae0c
Certificate serial: 0193DD80B25ADF71BC9D088BA1625E5B1833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/925jlSS9okW5LbTLvKVr06ekrgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.mft
Manifest number: 03FE
Signing time: Thu 19 Dec 2024 06:00:19 +0000
Manifest this update: Thu 19 Dec 2024 06:00:19 +0000
Manifest next update: Fri 20 Dec 2024 06:00:19 +0000
Files and hashes: 1: 925jlSS9okW5LbTLvKVr06ekrgw.crl (hash: yWX2+PGskVQPAAvGESvafb6G7mfTHHxeCWLlws2IRmw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:dd:80:b2:5a:df:71:bc:9d:08:8b:a1:62:5e:5b:18:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76e639524bda245b92db4cbbca56bd3a7a4ae0c
Validity
Not Before: Dec 19 06:00:19 2024 GMT
Not After : Dec 20 06:00:19 2024 GMT
Subject: CN=f129b83dcdc4e3f722957386d0baa33b0033d5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:39:e4:38:98:0d:88:60:8d:d7:1a:26:2a:
47:20:12:cb:54:5a:11:18:e3:0a:bc:b0:cb:65:b5:
e0:9f:92:8c:25:2b:b7:3a:95:22:52:49:dc:1c:63:
72:67:f8:1d:a4:61:8c:58:63:c7:c2:e3:6e:12:18:
3f:34:8a:78:cf:15:f6:38:b6:cd:67:c5:a5:24:25:
2e:ae:ef:30:2a:57:d0:88:cb:0d:7a:62:5d:b2:d0:
8e:32:cf:67:1e:95:5d:99:96:4a:22:9a:5f:40:d5:
32:77:f5:b4:3c:18:74:de:b4:85:54:af:0b:d6:92:
30:6e:89:b2:fb:d5:04:25:9d:99:96:99:3d:c8:f5:
67:63:a5:c0:ac:5d:d3:73:23:24:a3:e9:6d:33:d5:
db:e1:72:15:69:de:d6:94:2f:7c:6d:34:05:60:4b:
51:9e:3d:a9:ac:71:c1:12:20:5c:d1:21:9c:b7:db:
2a:d0:44:25:66:b7:a8:ce:09:40:87:4e:c2:bf:52:
4a:3b:72:d2:0e:93:c5:13:17:15:36:f0:ee:79:c5:
7a:25:a2:52:1b:f8:52:68:b8:59:af:20:6c:d6:be:
55:c6:4e:4c:12:ff:f8:06:9a:77:19:bd:a6:b3:f6:
4c:a4:06:34:c1:9c:71:80:d8:02:48:af:7c:9e:41:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:29:B8:3D:CD:C4:E3:F7:22:95:73:86:D0:BA:A3:3B:00:33:D5:E4
X509v3 Authority Key Identifier:
keyid:F7:6E:63:95:24:BD:A2:45:B9:2D:B4:CB:BC:A5:6B:D3:A7:A4:AE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/925jlSS9okW5LbTLvKVr06ekrgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:87:e5:5d:6c:68:a8:b5:16:b4:0e:6d:38:b0:1e:45:5f:20:
ed:2b:43:8b:ed:62:d1:f9:49:fa:d6:96:1a:5a:e9:ad:61:6a:
d3:ae:8e:57:f6:65:01:a2:7c:b1:19:7f:5d:28:5b:f5:f8:dd:
9e:0c:09:7f:ce:f5:89:d2:57:45:57:0c:56:05:32:25:2d:db:
0d:5b:e7:45:84:6c:2a:e2:1b:91:5d:be:8a:3d:42:ff:89:5f:
6a:b0:46:d2:5e:34:a4:12:eb:9b:6a:b0:a0:88:b4:d3:bd:83:
90:ff:43:66:3c:dc:2f:32:fd:fa:03:3c:d4:b8:eb:2e:50:f2:
2b:6e:9d:ab:88:6c:aa:40:d9:05:8e:3c:6c:31:5e:0b:3f:a6:
34:0a:ec:1b:a1:1f:d7:d4:f8:ab:cf:35:e6:69:dd:06:40:0e:
ad:f1:d8:a7:4f:31:ed:a2:27:99:f9:fc:55:73:25:fa:20:e5:
10:2a:eb:b5:32:5d:7d:d2:ec:0a:85:ce:b8:01:e1:ce:dc:93:
a9:d4:d2:0e:c4:b1:91:d1:32:d3:cc:bb:f3:e7:72:8b:c3:49:
85:85:c5:9c:50:b6:d0:76:f4:2d:1b:eb:5f:4a:f8:64:a2:19:
89:e1:71:0a:ca:38:ac:78:df:7b:55:17:7a:da:f0:87:ca:4e:
8f:74:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:36 2025 by rpki-client