Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
File: mtVmfEEoFBE5zKfFBH_BclC_Y68.mft (raw, json)
Hash identifier: oeFBPKFDCF+A9JpTYazfyVdJRrHO8s17y7RwTr9WfQo=
Subject key identifier: 67:04:E0:B1:B0:AB:C4:84:E7:F7:27:C2:DE:A0:61:AD:5D:A3:E5:1F
Authority key identifier: 9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF
Certificate issuer: /CN=9ad5667c4128141139cca7c5047fc17250bf63af
Certificate serial: 0194BC3C1678A507014FF202C1BB3A4783F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: mtVmfEEoFBE5zKfFBH_BclC_Y68.crl (hash: LA2x4hMG5VUSf7XWgOcYoYUpEQT4/13ErwDJczaCem0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:16:78:a5:07:01:4f:f2:02:c1:bb:3a:47:83:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad5667c4128141139cca7c5047fc17250bf63af
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=6704e0b1b0abc484e7f727c2dea061ad5da3e51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:bf:ff:30:23:b5:ba:95:dd:93:3e:04:77:
85:42:3a:65:7d:60:1d:8b:82:c0:1e:b6:f0:7c:55:
15:7f:a8:8e:8e:ec:09:18:93:fb:b7:a6:db:f0:49:
41:d5:ea:9f:29:4f:da:34:63:74:a0:ba:93:cc:c5:
ab:a7:f4:1f:c3:65:b9:bc:00:a6:ec:dd:da:78:e3:
57:70:20:8b:92:29:a1:b2:42:58:c9:bc:7f:43:a1:
d2:fa:c4:5e:64:df:0a:96:bb:39:64:b7:e4:a7:24:
9a:ec:b9:6a:b5:b4:4e:39:46:41:d0:20:fe:4c:d9:
5b:cd:d1:38:3e:0e:fd:a6:5d:fd:d1:ae:ba:b1:14:
bc:bf:7a:25:a7:86:47:14:30:e1:47:89:85:ee:5a:
07:6e:86:f8:b6:6c:0a:fb:4e:18:d3:a7:7d:6e:c7:
3a:08:66:9a:fc:08:d9:28:81:1b:c6:ac:f0:8e:8f:
54:20:01:00:ba:1b:cb:56:b2:d3:5b:94:3b:96:2b:
7e:53:9e:48:12:c4:88:79:c5:2a:d9:ab:60:c6:73:
ad:fb:88:01:1f:f3:d3:dc:a5:40:bb:94:44:b3:3d:
5a:7a:d4:21:78:42:aa:f3:c0:b7:7a:c3:40:93:c0:
08:d8:2a:39:ba:a4:73:58:a0:75:18:77:7e:d4:b7:
ce:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:04:E0:B1:B0:AB:C4:84:E7:F7:27:C2:DE:A0:61:AD:5D:A3:E5:1F
X509v3 Authority Key Identifier:
keyid:9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:0e:44:67:f6:2d:9e:99:95:01:74:8e:1f:df:8f:a8:84:cd:
f4:65:27:ee:7b:6d:b2:3a:37:0a:b4:b0:80:aa:77:58:61:34:
a4:23:09:60:fd:ca:11:95:20:17:15:bc:fc:6c:f5:8d:9e:cc:
90:46:6f:b3:80:12:18:ef:22:0b:2c:e3:b1:23:8d:9e:be:47:
af:cf:e0:2c:20:96:93:a1:1f:d0:2a:d9:92:1f:ea:c6:39:86:
0a:6f:22:41:c7:87:cf:49:a9:2b:2f:20:ff:a0:37:7d:9e:e1:
ec:94:c8:56:f6:8a:f0:4a:cd:b8:ab:63:cb:a0:8b:ef:39:e3:
8b:1b:cd:84:4a:f9:5a:48:44:5a:7c:9a:53:eb:de:2f:bd:4b:
c8:c6:be:29:f5:2f:be:cc:fb:27:68:3a:27:f4:0c:ca:e1:4b:
53:b3:60:64:4f:97:33:9d:52:2b:24:4f:a0:a2:ee:ec:ed:83:
ff:73:c9:ca:6f:22:08:a3:df:ea:9f:fd:b2:38:58:da:68:5c:
91:4e:16:28:f0:c5:c8:29:fc:58:82:dd:7f:4e:a6:ac:7a:bd:
04:51:8e:e8:aa:2c:22:f6:85:cd:9b:65:50:22:6c:50:38:cd:
ba:c1:03:77:9a:7e:c9:dc:a2:52:6a:d8:b7:53:3d:13:72:87:
18:70:27:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:45:45 2025 by rpki-client