Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File: B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier: k1+0Zh1TiWIn4dsAWEhjpUHCS+zICsGjdBrSEE1Am10=
Subject key identifier: 09:39:57:89:97:17:3D:6D:AB:7D:95:C8:C1:80:79:D4:07:8A:4E:A4
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer: /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial: 0194BBCE483FC229B797136852616FB2CA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: c/6THAYRoNbkc2/olKCdtfBMMhHOX8rV7ftPSt3bHdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:48:3f:c2:29:b7:97:13:68:52:61:6f:b2:ca:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=0939578997173d6dab7d95c8c18079d4078a4ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:a2:24:f9:c7:3b:8b:44:4d:b7:94:a3:0c:
2b:40:d7:8d:58:cc:5f:fa:24:64:c1:63:62:9d:de:
9e:e1:bc:1f:19:b4:2e:26:53:60:d9:22:70:4f:db:
e9:15:e3:88:1c:b0:f4:d4:fc:2f:92:ed:3c:85:b5:
e3:a3:6c:32:aa:21:78:4d:50:7c:f2:cc:5f:a1:ab:
9d:41:d9:5a:a9:15:9b:1c:16:d4:85:d3:3d:1a:30:
0b:10:de:3e:a5:65:19:40:2d:bf:4b:71:55:ed:9e:
35:83:98:06:ec:a5:ac:8c:8e:12:05:55:13:be:b6:
11:3e:78:13:76:9f:3b:47:88:81:66:8c:d4:d8:09:
cc:50:02:e6:0b:6d:47:3c:f5:4b:5f:6e:57:5f:4c:
03:dc:bb:e5:1e:b5:d7:2c:6f:11:e6:d0:7b:2c:da:
52:2e:b6:d1:8e:84:d4:6e:54:ff:e4:73:7c:07:4d:
80:4a:b2:14:3a:69:2c:2b:c2:30:1f:39:23:06:45:
8f:d3:77:49:46:1e:ac:85:8d:eb:b2:4b:b6:90:75:
19:d8:2c:73:50:1d:12:c1:f0:af:d7:d2:f9:d6:5d:
c6:9a:35:c4:8d:c9:6a:22:7a:28:b4:23:1b:6c:72:
f6:0c:72:b7:a0:db:8b:41:c5:69:b0:ad:e5:a0:09:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:39:57:89:97:17:3D:6D:AB:7D:95:C8:C1:80:79:D4:07:8A:4E:A4
X509v3 Authority Key Identifier:
keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4b:3a:fb:2c:71:3c:5d:e4:5c:a9:51:bb:99:be:4f:f4:9b:
c5:62:31:9f:fd:23:4b:40:3d:68:81:ab:6f:bf:85:b9:dd:57:
6a:6a:b0:a9:cf:68:d0:71:a9:b9:0f:2b:29:20:d4:eb:c5:6a:
10:f6:b2:c1:e8:bb:25:2f:78:3a:a5:83:30:d4:1e:78:ca:6d:
ef:11:c0:4b:dd:48:ed:7a:44:d1:2c:00:9f:fe:b5:62:cd:c0:
94:55:f0:1e:92:e9:f6:19:09:6a:17:43:f9:99:af:48:64:fa:
f4:8f:3f:8e:18:c0:5e:22:b7:9f:cb:d6:5a:ac:c0:8c:1e:d2:
2e:d4:26:b6:cd:84:69:68:f6:d1:75:ee:2e:a3:49:d0:15:25:
37:34:e4:0e:da:86:1c:40:2e:52:9c:16:f4:ff:41:ae:d6:65:
53:c5:ea:ca:11:45:c3:88:e0:ea:3f:de:2b:c5:f2:0d:22:60:
2b:fd:95:d4:81:6a:93:9c:f0:88:cd:42:dc:4c:b2:f5:c1:3a:
7d:21:e6:65:f1:bc:c1:a9:6b:6d:28:cf:5e:74:4f:87:99:56:
5b:40:1f:c3:ed:b8:ae:a7:01:25:a1:79:dc:5a:b1:18:a7:21:
43:26:a9:16:8f:27:72:72:1d:90:33:d8:2f:06:88:e4:8e:a2:
ad:fb:70:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:08 2025 by rpki-client