Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dbb525-8ba5-40c3-8c12-7ded4d61e8d2/1/bP-QsXePU3Q_kng8rxdIouzWaKA.mft
File: bP-QsXePU3Q_kng8rxdIouzWaKA.mft (raw, json)
Hash identifier: xiLAcu6QLG+LV7LVyUlsaPzdcucwsHXNLq2pHW3rnd0=
Subject key identifier: 52:35:7E:E1:DD:47:85:55:35:4E:F9:3C:6B:AA:45:03:4A:D5:A2:BD
Authority key identifier: 6C:FF:90:B1:77:8F:53:74:3F:92:78:3C:AF:17:48:A2:EC:D6:68:A0
Certificate issuer: /CN=6cff90b1778f53743f92783caf1748a2ecd668a0
Certificate serial: 0194BD4E7536B65D968B78FDF5008709D50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP-QsXePU3Q_kng8rxdIouzWaKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dbb525-8ba5-40c3-8c12-7ded4d61e8d2/1/bP-QsXePU3Q_kng8rxdIouzWaKA.mft
Manifest number: 013F
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: bP-QsXePU3Q_kng8rxdIouzWaKA.crl (hash: 6T+tw6ZqA2QOIOc31MvK+gevtP4E64nM35ktCDdaLT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:75:36:b6:5d:96:8b:78:fd:f5:00:87:09:d5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff90b1778f53743f92783caf1748a2ecd668a0
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=52357ee1dd478555354ef93c6baa45034ad5a2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:0b:61:0a:c8:17:cd:9b:4a:1a:57:d7:a1:
06:ac:eb:c2:7b:1c:22:49:29:ad:6b:ef:51:16:f9:
46:b3:43:a2:29:87:27:44:cc:35:08:93:53:be:57:
95:41:44:96:94:04:9d:af:ef:61:b1:32:e2:9c:a5:
09:4d:25:74:5e:3b:c7:27:0c:dc:9e:37:72:a4:fb:
b6:df:d6:16:c1:bd:3d:b1:37:7d:7b:66:56:72:52:
f2:e9:68:54:a2:8c:ca:0b:18:dd:cc:ad:24:0a:be:
dd:97:e1:8a:4e:35:5a:78:14:41:28:ff:c0:e8:bb:
85:e0:9e:bc:e7:3b:8b:75:85:f9:b8:0d:11:74:83:
35:7f:f0:cf:34:62:da:1b:85:da:e2:d2:24:5e:48:
e4:99:03:03:fc:2a:f5:d6:9f:34:ba:b1:49:2e:f7:
56:dd:94:aa:2f:a3:48:bd:4e:6e:f4:01:10:d6:ca:
79:96:df:2d:1a:24:1e:7c:4e:e8:08:c7:a5:89:7e:
45:0e:b0:98:ee:a0:b2:22:26:10:f3:ca:fd:a2:7d:
66:aa:82:d5:d8:23:f6:4c:16:3d:a2:94:30:9d:12:
c6:03:32:2a:ab:ac:27:53:12:44:bc:04:ed:d5:97:
a7:53:69:2f:40:2f:3b:f8:49:92:1a:2a:4f:26:e8:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:35:7E:E1:DD:47:85:55:35:4E:F9:3C:6B:AA:45:03:4A:D5:A2:BD
X509v3 Authority Key Identifier:
keyid:6C:FF:90:B1:77:8F:53:74:3F:92:78:3C:AF:17:48:A2:EC:D6:68:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP-QsXePU3Q_kng8rxdIouzWaKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dbb525-8ba5-40c3-8c12-7ded4d61e8d2/1/bP-QsXePU3Q_kng8rxdIouzWaKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dbb525-8ba5-40c3-8c12-7ded4d61e8d2/1/bP-QsXePU3Q_kng8rxdIouzWaKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:dd:80:d7:ea:17:60:0a:33:fd:db:88:b3:3e:20:e4:88:6f:
dc:41:1f:3a:f2:e4:0e:6c:56:cf:97:61:25:32:3e:9e:35:f4:
8d:2a:35:18:19:2d:e0:a4:4a:99:68:c4:3d:f8:18:79:02:39:
c9:b4:45:20:8c:df:93:05:64:9d:1c:1c:48:41:2f:3f:c2:e7:
c6:1a:8b:1f:be:8c:c3:62:32:8a:ce:5d:08:0c:7d:61:c2:9b:
6d:32:7e:83:d5:dd:49:88:19:a0:3a:ac:60:a3:d2:32:13:11:
e7:01:dc:54:b8:50:b5:4f:48:ae:5e:70:26:a7:ee:d2:3a:68:
96:cd:3d:fb:b9:d3:9d:0d:0e:72:74:77:bd:3f:74:6a:a4:1c:
07:e5:fa:aa:78:8d:a8:99:75:56:76:52:35:e2:3f:dd:ea:83:
f4:50:5b:6b:2f:f9:4c:01:70:55:a1:dc:fc:e7:27:78:56:2e:
7d:9a:16:78:12:af:24:82:b6:68:87:57:7e:f7:e3:64:36:a0:
d1:93:d5:ad:5d:c1:48:28:61:f6:2c:f5:bd:7e:88:25:f2:8f:
7a:af:dc:76:eb:f2:23:c9:9a:19:24:6b:d6:af:13:24:93:33:
e0:d5:6f:9d:fa:ab:72:37:60:94:c1:5a:e7:85:59:1a:90:29:
f7:a6:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:52 2025 by rpki-client