Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
File: bLu4HYIwad2CTY2Ngsjb-zBduY8.mft (raw, json)
Hash identifier: n5amNYIkMxBFeb3MrYJ+/JBMcvX80Yd/wolmXbDV3ug=
Subject key identifier: 93:21:EA:05:8F:8A:36:05:1C:D5:8E:52:64:4B:E1:4B:B9:6A:11:56
Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Certificate serial: 0194BCE0BD51ECCA79264F3A772B35ACB43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
Manifest number: 1361
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: Kzmni7xeA7Gni0kYnHO5daJh5Mk.roa (hash: G+JlA/GfSH/1W28f9m1jif2MBvIydlQBDUO2Og4m/hU=)
2: bLu4HYIwad2CTY2Ngsjb-zBduY8.crl (hash: uGVIqZbTwFzEdqDRu/9rU5JVUB8rk/+8uXhCtsgWQao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bd:51:ec:ca:79:26:4f:3a:77:2b:35:ac:b4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=9321ea058f8a36051cd58e52644be14bb96a1156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:f6:4c:d2:cb:6e:80:25:07:01:f3:f0:1e:
2c:b9:07:0d:92:30:49:4a:7c:78:eb:56:f9:ba:26:
bc:4f:86:37:bb:04:07:6b:bd:de:a4:c6:bd:57:3e:
61:ce:3c:b2:2a:6e:57:c0:4d:47:fb:63:8e:c6:ac:
99:c8:70:8b:fe:b4:37:7f:4d:ca:b8:9e:fb:bf:9b:
91:74:dc:13:a0:e5:9d:90:3a:57:34:d8:39:de:a1:
49:b9:ed:97:35:bb:d5:2f:7b:42:d2:28:7e:d9:48:
71:84:af:f1:f9:29:5e:1a:1c:30:1b:26:ea:60:d1:
83:ac:c3:2c:0b:65:d0:b4:90:d7:71:e4:10:2d:07:
50:25:89:a1:a7:92:55:44:b2:73:08:02:3f:05:f9:
16:4e:1f:f4:e2:00:74:00:86:30:42:15:4e:a4:f4:
a0:58:96:65:3c:6f:9f:80:86:c3:8a:63:f0:b6:6d:
89:ee:61:ac:1e:b5:61:07:56:fb:b7:da:d3:8f:a6:
98:38:e0:39:43:5c:0d:a4:5e:eb:82:57:89:60:93:
3a:28:53:ea:a7:e5:f1:c7:67:23:9f:c7:5c:e7:bd:
4b:cf:2c:eb:59:84:31:26:ce:07:2c:4d:b7:a9:43:
29:d8:29:33:02:66:39:f8:0f:bb:ff:ec:9c:da:3a:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:21:EA:05:8F:8A:36:05:1C:D5:8E:52:64:4B:E1:4B:B9:6A:11:56
X509v3 Authority Key Identifier:
keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ab:68:64:f4:7b:42:88:80:36:d1:84:e6:82:b3:0f:e0:66:
da:ca:01:03:dd:28:14:05:83:f8:2c:00:0b:ec:35:de:cc:11:
56:66:d0:11:45:9f:e6:31:78:31:f6:e1:e4:23:8d:57:83:c9:
e6:39:86:1e:a0:fa:af:1a:4c:ce:4e:cb:55:92:e6:6d:9e:1f:
91:ea:a0:be:84:15:8c:c3:e6:c7:5d:d3:da:da:8d:de:e7:6d:
c6:3f:7f:df:22:92:e1:7e:7c:76:08:0f:58:f8:28:de:d8:93:
c2:fd:fe:40:9f:79:3e:e2:49:3e:2d:d1:c3:07:22:08:a0:30:
89:a6:05:8f:f2:c3:fb:fe:9e:60:ae:7a:09:78:7e:be:ec:34:
ea:4c:9c:b9:1a:9f:03:9b:76:95:77:0e:5b:f2:c2:68:30:fc:
53:86:82:64:f9:3f:aa:8c:17:9d:bb:82:9a:7a:e3:74:02:8d:
b0:f4:a0:20:28:64:09:ea:d2:01:46:56:16:92:4b:c3:49:84:
7d:02:4f:3d:36:18:31:fe:46:fa:63:3d:33:8c:ba:81:fd:1c:
a9:5f:13:bd:a1:ec:53:01:aa:d5:9e:db:ea:32:79:2d:18:86:
57:ba:35:56:f9:9d:6b:ba:b6:f0:ad:a1:4a:50:f7:96:86:09:
17:92:0e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:08 2025 by rpki-client