Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
File: bnnOupU7B9qiKvPIqrKxzU4iSNA.mft (raw, json)
Hash identifier: 5Ys2HbFyuZHnnfYyAzBSmvBM8Ve72LoKQHOlq2Q71kI=
Subject key identifier: D2:9A:EB:D6:C9:AE:A8:23:BE:D8:B1:89:DE:B6:1A:CC:3B:7E:6C:41
Authority key identifier: 6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
Certificate issuer: /CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Certificate serial: 0194BBCEB8B8D22DD3E0BCE04908C268E399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
Manifest number: 04AC
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: bnnOupU7B9qiKvPIqrKxzU4iSNA.crl (hash: 3CJv2uplij80XRWtPugyjTBP33F6V0SMHeQbUin67Kw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b8:b8:d2:2d:d3:e0:bc:e0:49:08:c2:68:e3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=d29aebd6c9aea823bed8b189deb61acc3b7e6c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5a:13:bc:96:25:d3:23:e3:8b:fb:a8:56:93:
5e:eb:6f:a9:f5:ad:35:6a:d1:47:ca:71:11:e5:bf:
1f:0e:87:4d:14:b2:c0:35:df:b6:a9:af:47:44:08:
2e:e6:f4:89:8f:a2:85:02:24:3b:f6:e7:78:93:0b:
7f:6c:bc:87:d9:6e:e6:32:aa:3f:68:4f:5f:ec:d2:
f3:8f:52:78:3e:72:53:6f:b3:3b:e7:b5:2d:bf:04:
14:69:c8:bd:ba:d9:6a:ae:77:ea:d5:87:0e:43:91:
f9:2d:bb:94:c8:1c:b8:a6:aa:49:1c:f0:17:8c:0f:
69:aa:08:f4:5f:4c:50:2d:61:91:2d:65:d2:80:59:
b6:50:f7:56:36:28:84:b7:ea:dc:94:91:5e:04:ba:
28:74:c0:d3:22:f3:b2:04:ea:1d:26:9c:d2:90:f1:
4e:82:d5:50:45:d0:ec:6d:64:7e:fb:1e:0c:bb:ee:
90:bc:11:21:4c:d7:f5:4c:96:0c:a4:34:b8:5d:45:
7d:2b:00:31:ff:8f:10:47:5f:ab:d2:06:99:35:6b:
d4:22:f3:5b:6f:64:4d:62:29:bc:fb:c5:64:6d:46:
c5:1b:e5:7d:9a:bd:f3:e3:55:5e:69:aa:2f:f4:79:
e2:8f:60:89:d0:ab:28:c8:9d:35:be:0e:b3:3f:41:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9A:EB:D6:C9:AE:A8:23:BE:D8:B1:89:DE:B6:1A:CC:3B:7E:6C:41
X509v3 Authority Key Identifier:
keyid:6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3c:f1:aa:78:23:27:df:02:51:65:41:b2:15:92:6f:9e:ed:
0c:8d:d5:bd:66:06:4c:da:32:d0:5e:6e:29:dc:a1:2b:a5:d3:
6f:cd:a2:a2:a4:7f:bf:c5:aa:25:50:8a:94:40:28:2d:13:68:
87:10:53:7f:87:ad:87:db:e4:1d:ed:b3:e9:a7:0c:6f:8c:35:
c9:4d:48:15:c4:e9:d0:3a:09:0b:31:fd:c3:1e:af:ce:05:67:
ff:22:02:50:d3:cb:a8:95:da:08:c8:5e:34:d8:4d:53:20:30:
74:b1:a2:1d:05:8b:ec:6d:c8:fb:fa:8b:46:54:19:e1:c8:ef:
f6:9c:97:6a:21:9b:66:16:4e:25:46:71:76:ee:7a:fd:da:16:
dd:56:de:7e:2c:29:1d:93:fc:1d:bd:ed:06:cb:86:3c:80:95:
5e:e3:36:68:21:35:f9:60:36:f9:82:b7:70:81:b2:0e:32:aa:
36:9e:a6:aa:f8:51:06:62:3a:6b:f9:59:cf:63:fb:71:08:f3:
62:d1:de:38:54:64:bb:30:4f:3b:ce:98:5a:13:f6:39:8f:9d:
4a:89:96:c2:f5:0d:00:1d:40:e0:b1:06:fe:b1:3a:f5:40:9c:
c1:17:61:6c:8d:a7:f0:fc:2a:c0:a7:07:7f:4e:94:dd:3b:71:
9b:23:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:24:49 2025 by rpki-client