Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
File: mXFUBuche_wTgSpHBMYq4JnnyP8.mft (raw, json)
Hash identifier: gfMQEZxwRqH5mqkOe5pEKXYYYJ4U9o7TsNBIgqTVwM4=
Subject key identifier: 70:C5:68:7C:D9:AA:A9:B1:AE:E1:13:0A:9A:0B:C0:22:C9:4D:5C:47
Authority key identifier: 99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF
Certificate issuer: /CN=99715406e7217bfc13812a4704c62ae099e7c8ff
Certificate serial: 0194BD17F19B3D45877D260493A8AD64F73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
Manifest number: 0146
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: mXFUBuche_wTgSpHBMYq4JnnyP8.crl (hash: QoCQ93gS51LypZN9yQB4Q7bt+DHDlVlErEz14lvKdwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f1:9b:3d:45:87:7d:26:04:93:a8:ad:64:f7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99715406e7217bfc13812a4704c62ae099e7c8ff
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=70c5687cd9aaa9b1aee1130a9a0bc022c94d5c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:ab:97:1e:f5:22:c1:bd:48:21:19:e8:01:
6d:10:d4:37:bf:6b:8c:0e:2f:d3:32:a9:33:6c:69:
f4:75:7d:a2:63:cb:26:11:5a:d3:c9:39:1f:9d:b1:
d7:b7:23:dd:d5:6f:23:fd:9b:48:54:c3:a6:0d:35:
43:8a:66:41:ef:8d:57:57:5e:4a:18:c1:4a:f4:ce:
87:17:28:4b:7f:be:27:2b:8b:14:30:7e:cf:fa:4b:
3d:33:24:63:dc:77:e1:d3:2c:cb:62:5c:37:f4:19:
4c:23:4b:ee:28:4d:50:b5:e6:91:f1:e9:e3:3f:39:
20:33:b7:f4:36:d9:9d:69:10:33:5c:f5:3c:fa:cd:
41:d7:6f:4d:10:19:78:8a:09:4c:e7:b8:4c:02:00:
53:73:69:e1:42:11:ce:1d:3b:27:06:ab:f5:49:45:
4c:e9:da:c4:f1:0e:0c:e8:2c:d6:a7:30:a4:d5:99:
2b:35:2a:a9:27:f0:63:0b:7e:55:f6:88:91:9e:80:
f0:3f:ca:22:71:f1:8c:9c:68:ce:8a:43:bf:85:47:
83:a1:57:bb:3d:ae:c2:55:fa:60:3c:ac:53:1b:61:
21:ac:dc:74:65:23:4a:a7:14:95:76:55:0c:28:80:
9c:fb:0e:a1:9b:af:32:65:01:6b:bc:5c:cb:fb:4d:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C5:68:7C:D9:AA:A9:B1:AE:E1:13:0A:9A:0B:C0:22:C9:4D:5C:47
X509v3 Authority Key Identifier:
keyid:99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:71:6a:90:84:5f:2b:fe:6f:e1:ba:f2:f7:7b:29:17:21:84:
68:2f:d6:f0:5e:12:47:77:e0:8a:e9:df:06:2a:90:de:6a:00:
2e:8c:24:df:d8:4e:30:30:cd:f6:46:13:cc:05:dc:99:e4:8c:
58:91:c3:6b:a4:d8:b4:1e:ce:1e:e7:01:73:46:de:e2:e4:87:
f8:82:62:4a:8e:56:f5:14:86:91:ff:29:7d:bb:90:74:5b:ae:
54:c8:05:59:5a:52:15:21:dc:74:1c:1c:b7:8f:f7:14:19:b2:
cb:eb:14:f7:ae:1d:36:78:4e:2b:bb:3b:34:58:fb:37:29:1d:
0d:df:1b:06:44:c9:ab:fe:e6:1b:8f:56:b5:d3:25:97:c1:9a:
4d:a1:27:c5:ab:f6:05:0d:b3:24:8e:c3:56:8c:e7:c9:23:87:
bf:91:7a:38:63:9c:ea:a8:11:50:4c:a2:fa:32:be:a6:6d:d4:
28:ce:f8:fd:2d:c7:0b:e3:5b:ca:69:97:24:9c:18:15:6c:34:
05:ba:d2:25:3e:80:19:b2:37:9e:a4:c7:96:66:e1:c5:df:1c:
fc:b1:b4:1c:96:b5:cc:61:e1:42:82:87:ca:ac:c2:e9:ff:21:
5d:13:25:1a:ea:33:ec:b7:42:55:e5:b1:9e:60:46:e0:36:74:
78:b1:f4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:05 2025 by rpki-client