Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/03abaf-f8a0-41ff-a1bc-9dc4657f4975/1/40aW5qhVeR3hjKFc9njupXNgZys.mft
File: 40aW5qhVeR3hjKFc9njupXNgZys.mft (raw, json)
Hash identifier: V0EIKszGoPe+2qQ+MhjmfjJ5b/admw2iHpBjc+Nl74A=
Subject key identifier: F2:A8:7A:4C:A1:90:24:54:51:92:D5:1E:09:9B:67:2F:A6:9C:E2:82
Authority key identifier: E3:46:96:E6:A8:55:79:1D:E1:8C:A1:5C:F6:78:EE:A5:73:60:67:2B
Certificate issuer: /CN=e34696e6a855791de18ca15cf678eea57360672b
Certificate serial: 01929D23F569F86DD10889031C90F175B23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40aW5qhVeR3hjKFc9njupXNgZys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/03abaf-f8a0-41ff-a1bc-9dc4657f4975/1/40aW5qhVeR3hjKFc9njupXNgZys.mft
Manifest number: 130B
Signing time: Fri 18 Oct 2024 01:00:32 +0000
Manifest this update: Fri 18 Oct 2024 01:00:32 +0000
Manifest next update: Sat 19 Oct 2024 01:00:32 +0000
Files and hashes: 1: 40aW5qhVeR3hjKFc9njupXNgZys.crl (hash: 17k9gc3UaQZJTTtEyQctZ4CHlkTkNrhT40J5iCR2bOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9d:23:f5:69:f8:6d:d1:08:89:03:1c:90:f1:75:b2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34696e6a855791de18ca15cf678eea57360672b
Validity
Not Before: Oct 18 01:00:32 2024 GMT
Not After : Oct 19 01:00:32 2024 GMT
Subject: CN=f2a87a4ca19024545192d51e099b672fa69ce282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e9:6d:96:29:84:ff:19:2b:e8:f6:cf:e4:14:
02:cd:0e:ff:c2:66:1b:d6:b1:7c:17:be:e4:6c:2d:
da:45:12:9a:93:61:bc:b1:26:cd:83:a9:25:1f:bd:
2e:aa:0a:f5:71:26:ab:e9:41:0f:23:d1:6d:be:a4:
9c:9a:9e:07:35:1a:0f:73:c1:11:77:e4:15:f3:fd:
b7:f5:41:ac:ba:ad:9e:e9:4a:f7:98:88:8c:fb:c3:
d1:37:46:08:2b:38:6e:03:e4:ea:8e:83:25:5d:f5:
ca:38:44:ec:63:1c:3e:e6:08:26:68:e6:93:79:6e:
92:31:15:1f:11:48:5c:6e:43:02:a6:bd:9d:4a:f9:
e2:ec:55:5d:21:16:aa:f1:82:f3:28:2a:60:32:c9:
f1:45:d0:b1:5e:13:23:38:d2:69:53:50:6a:5b:8b:
48:d9:48:86:e8:a7:a1:b7:0a:f9:0f:38:58:bf:da:
08:8f:5c:69:f9:0e:27:38:67:17:e2:bf:52:af:a5:
da:96:75:87:ea:f1:eb:2a:ff:72:93:a7:b7:5f:60:
eb:4e:80:8a:86:4a:14:f1:cd:0d:99:38:3c:09:35:
bc:b8:46:61:22:84:a2:76:b5:22:50:e7:bb:b6:7b:
46:26:35:b0:b0:50:b6:04:15:32:58:ee:54:f3:9d:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A8:7A:4C:A1:90:24:54:51:92:D5:1E:09:9B:67:2F:A6:9C:E2:82
X509v3 Authority Key Identifier:
keyid:E3:46:96:E6:A8:55:79:1D:E1:8C:A1:5C:F6:78:EE:A5:73:60:67:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40aW5qhVeR3hjKFc9njupXNgZys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/03abaf-f8a0-41ff-a1bc-9dc4657f4975/1/40aW5qhVeR3hjKFc9njupXNgZys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/03abaf-f8a0-41ff-a1bc-9dc4657f4975/1/40aW5qhVeR3hjKFc9njupXNgZys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e2:bc:0c:c7:23:d7:1c:aa:18:05:bf:01:f9:69:26:e9:b2:
ba:55:60:8d:84:86:d0:15:08:98:04:f0:1c:17:fb:b9:24:cd:
0e:07:e6:c1:a6:3c:e8:fc:74:16:f5:2d:93:a6:d0:b0:be:3a:
12:de:f5:96:13:60:57:54:08:f6:bc:8b:f0:8f:0a:24:fe:fd:
54:4a:0b:d2:d2:78:da:5d:41:af:87:97:76:7e:c2:e1:6a:e3:
91:51:e5:7d:9c:5f:f6:50:b8:f8:20:f3:75:9d:d7:b6:f9:42:
56:ae:77:ff:e0:fe:25:7d:9f:57:f0:83:c8:4c:5b:9e:0c:16:
b4:76:c6:98:e0:90:75:a4:57:b6:10:4c:b8:51:3c:a8:f7:96:
c0:9b:5a:ee:74:b6:71:45:34:90:3d:9e:a0:da:82:aa:04:df:
f2:73:44:04:ee:75:b8:a2:d1:46:84:37:6b:2e:82:38:88:d5:
3e:30:76:a8:8f:13:c2:b8:a2:80:4c:09:75:4d:e8:8a:8a:a8:
d0:3c:be:2d:d5:79:68:d2:58:ce:9c:c7:7b:a2:2f:26:ee:0d:
34:f6:4e:f7:f6:64:c9:4d:2c:36:92:94:92:03:76:33:88:63:
79:8e:a6:79:12:5d:a0:65:28:7e:05:95:b9:e5:6a:20:ac:ee:
5a:38:b2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:17 2025 by rpki-client