Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/68f06d-2bdd-49a3-bb3e-07bb3421d24c/1/i3tlLy8nHja2O0EZcn241Bi4Z_k.mft
File: i3tlLy8nHja2O0EZcn241Bi4Z_k.mft (raw, json)
Hash identifier: /ntqrTk5xX94OYFhqD9I01ktcWri7K2itPL0m62Hol8=
Subject key identifier: 64:D8:8F:D4:6D:7D:36:2D:BA:7D:D0:5C:75:AE:25:AD:C6:E6:49:34
Authority key identifier: 8B:7B:65:2F:2F:27:1E:36:B6:3B:41:19:72:7D:B8:D4:18:B8:67:F9
Certificate issuer: /CN=8b7b652f2f271e36b63b4119727db8d418b867f9
Certificate serial: 019514A3D8C9265733CE5D89CA959F7FAD9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3tlLy8nHja2O0EZcn241Bi4Z_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/68f06d-2bdd-49a3-bb3e-07bb3421d24c/1/i3tlLy8nHja2O0EZcn241Bi4Z_k.mft
Manifest number: 07AA
Signing time: Mon 17 Feb 2025 16:00:36 +0000
Manifest this update: Mon 17 Feb 2025 16:00:36 +0000
Manifest next update: Tue 18 Feb 2025 16:00:36 +0000
Files and hashes: 1: i3tlLy8nHja2O0EZcn241Bi4Z_k.crl (hash: 0owM4ZSGEhA1pxDt+1zAD/zqWynbUpJUjUwg1+JLwHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:a3:d8:c9:26:57:33:ce:5d:89:ca:95:9f:7f:ad:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7b652f2f271e36b63b4119727db8d418b867f9
Validity
Not Before: Feb 17 16:00:36 2025 GMT
Not After : Feb 18 16:00:36 2025 GMT
Subject: CN=64d88fd46d7d362dba7dd05c75ae25adc6e64934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:48:c6:89:16:07:72:a9:a7:66:be:3b:f3:
7d:1d:de:7e:18:da:91:e0:72:ab:83:c6:04:8c:52:
40:1f:28:d5:e8:9d:ff:c6:46:ea:54:0f:55:c8:0b:
de:7f:5a:5a:0e:fd:2c:f5:78:5d:7a:5d:fe:69:24:
23:55:9f:60:93:11:87:64:f3:67:d0:a8:af:49:49:
b1:29:b4:aa:07:bc:c0:c6:0f:5c:55:09:28:f2:3e:
c5:f2:62:85:e9:04:1d:0d:b6:ad:26:2a:71:98:bb:
9d:18:16:a7:13:67:ff:86:ab:97:70:22:bf:eb:25:
4c:7a:bb:40:14:03:34:08:0b:ff:e4:01:35:e5:38:
4b:de:3c:87:71:fc:29:9b:bc:c2:df:0b:8d:fb:e0:
0c:24:96:ac:f6:82:f0:40:4b:47:a2:e5:bc:45:90:
c6:d4:30:8d:4e:1c:f7:84:db:a1:06:68:83:78:46:
49:51:b0:1e:7b:6a:45:54:56:75:7c:5e:2c:07:2f:
1f:d5:e6:b1:d0:a6:a8:87:9a:7e:b5:39:9f:10:f4:
08:4b:18:ab:1a:9b:8f:32:6b:79:3c:f4:f1:34:bf:
b5:86:19:16:b4:7f:1b:5d:90:f6:19:6b:92:1d:cb:
ea:12:4f:09:fc:db:40:2e:19:6e:6d:a4:d0:bb:85:
aa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D8:8F:D4:6D:7D:36:2D:BA:7D:D0:5C:75:AE:25:AD:C6:E6:49:34
X509v3 Authority Key Identifier:
keyid:8B:7B:65:2F:2F:27:1E:36:B6:3B:41:19:72:7D:B8:D4:18:B8:67:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3tlLy8nHja2O0EZcn241Bi4Z_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/68f06d-2bdd-49a3-bb3e-07bb3421d24c/1/i3tlLy8nHja2O0EZcn241Bi4Z_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/68f06d-2bdd-49a3-bb3e-07bb3421d24c/1/i3tlLy8nHja2O0EZcn241Bi4Z_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:35:92:50:6e:14:b7:4c:17:f3:19:17:e2:42:b9:38:78:84:
b3:09:f6:cd:44:3e:93:48:1a:2f:77:fb:84:be:48:78:ba:17:
b6:07:f2:48:f4:2c:e1:4c:94:94:16:d3:bd:38:33:e3:3f:70:
a4:e4:cf:8a:d8:ac:77:0d:4b:7e:08:cd:22:12:d3:cd:c7:60:
a2:90:6a:92:66:33:6e:4e:96:a1:31:61:d8:06:8d:35:9a:6d:
98:18:cb:ee:c3:a4:49:9b:6f:2c:4e:42:6d:80:1d:83:cb:e2:
87:41:e4:07:3a:95:9e:61:45:7a:91:c8:ef:6a:1c:47:0b:0e:
c6:07:59:b7:30:c5:f8:ec:70:cb:42:db:f1:b7:36:9f:b6:86:
3b:35:3d:23:2d:6c:e6:69:68:2b:3d:c4:f1:d7:fd:55:d8:9c:
8d:b9:62:c8:21:f9:f9:bd:f5:fd:1e:1b:b8:20:6b:9a:a9:8c:
cf:d2:2a:b6:50:fe:64:4e:d4:79:b8:29:ed:52:57:47:41:b9:
94:53:40:b9:7d:02:f8:53:c7:78:87:3b:ca:59:a1:0d:b6:31:
f6:0d:6e:00:a6:fc:bf:a7:f5:f8:2d:2e:93:79:4f:ab:31:f5:
63:8b:c2:68:45:9f:57:4a:69:cc:01:3b:b9:73:a5:70:d7:f7:
95:56:66:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:23:10 2025 by rpki-client