Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft
File: v9aef9UBKJF3mCF6xh-OgrH6FOs.mft (raw, json)
Hash identifier: SoHpJZr3CdrjyBz+MX//mgDSp3icq6Vzuwm0gRotf68=
Subject key identifier: 40:ED:3A:64:E0:82:63:7E:D7:60:9D:BB:E5:5E:97:8E:53:05:A6:C0
Authority key identifier: BF:D6:9E:7F:D5:01:28:91:77:98:21:7A:C6:1F:8E:82:B1:FA:14:EB
Certificate issuer: /CN=bfd69e7fd50128917798217ac61f8e82b1fa14eb
Certificate serial: 0194BCE0B7C158BE2EDC0A47E9EBAEDFF0CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9aef9UBKJF3mCF6xh-OgrH6FOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft
Manifest number: 03AC
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: v9aef9UBKJF3mCF6xh-OgrH6FOs.crl (hash: qxYRtIDySXC+5n6x5Kav4m8o34gme4kSK+SDxUxRyNk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b7:c1:58:be:2e:dc:0a:47:e9:eb:ae:df:f0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd69e7fd50128917798217ac61f8e82b1fa14eb
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=40ed3a64e082637ed7609dbbe55e978e5305a6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:19:1c:f3:62:9a:ea:98:21:84:0b:d5:de:
63:b6:24:69:d7:51:aa:fe:31:73:e2:9b:15:a0:a5:
76:35:42:f6:21:c2:7f:7f:63:b1:51:7b:da:98:ee:
7b:26:8e:b7:a7:0a:6e:f7:2f:6e:e5:26:5f:ab:14:
b9:02:f6:73:ab:cf:28:23:46:b9:00:0f:2d:89:c1:
dc:b9:56:ad:e9:de:a9:c6:e4:af:30:b4:c8:26:92:
e5:33:38:10:b5:ea:c4:41:12:d8:06:e8:fc:9e:bf:
20:aa:76:aa:bb:e4:09:b7:f6:7b:af:d1:d2:ac:7e:
f6:ba:2f:16:5e:a6:a1:37:70:8b:73:06:4d:c1:a0:
ba:3b:8d:51:7a:65:8d:22:ea:a0:30:26:bb:23:4a:
e9:88:42:21:de:3f:ee:9f:ac:70:6e:3f:f6:69:a9:
ed:5f:18:ef:12:30:1b:dd:1a:3a:f0:01:18:05:88:
47:7d:28:bf:97:3c:f1:a5:52:d1:50:9c:06:e0:8d:
1d:f9:f6:73:2f:f2:1e:63:1c:76:f7:78:09:87:f4:
0b:90:5c:7d:72:bf:ba:5d:b2:ac:3e:73:2f:ce:90:
45:33:24:f0:d2:7e:ef:28:00:a9:a9:f4:d0:f9:31:
d5:64:ca:5c:05:bb:23:ef:5a:09:6a:c9:0f:ac:9c:
08:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:ED:3A:64:E0:82:63:7E:D7:60:9D:BB:E5:5E:97:8E:53:05:A6:C0
X509v3 Authority Key Identifier:
keyid:BF:D6:9E:7F:D5:01:28:91:77:98:21:7A:C6:1F:8E:82:B1:FA:14:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9aef9UBKJF3mCF6xh-OgrH6FOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:15:1a:6a:f3:3a:db:1d:cf:45:b7:cb:64:8d:de:33:de:52:
46:09:3b:f3:65:c0:06:de:26:e6:0d:21:e4:b0:92:f9:a9:93:
a4:ab:b1:ae:65:39:9f:1f:e6:0b:99:4a:4a:29:72:31:d1:77:
de:ce:1c:ae:a4:7d:63:79:e1:83:f2:d2:00:e5:d4:68:13:b2:
8a:e5:cb:c4:1c:b9:77:bd:c2:49:0c:89:fd:22:30:e5:54:21:
36:d5:17:cc:a9:b4:0b:f4:46:a8:1e:13:e9:c0:f4:ba:84:7f:
ec:4a:7e:88:fb:69:02:e6:1c:80:0b:af:30:0f:f6:6a:49:2c:
95:6b:9e:77:92:3e:52:02:e6:1f:25:6a:d7:db:81:51:b4:d8:
fb:f1:7e:1a:a6:45:c3:a2:ff:2d:8c:cf:9a:e8:8e:96:35:04:
ed:72:e4:be:cc:8e:5e:cc:e4:4c:ad:8c:d2:19:6b:82:f1:bc:
b6:9e:33:87:0a:2f:0c:87:4c:9c:6a:c2:e5:a0:a7:d6:04:99:
c8:88:50:dc:dc:91:36:ea:39:9d:d0:7c:61:1e:f4:a3:41:da:
7a:82:75:61:ec:f5:da:e1:ff:ab:3b:81:97:1a:62:a4:bb:8a:
ef:b7:cc:3d:89:2b:0a:ad:35:a1:f9:b9:dd:27:2f:8d:4b:06:
ed:18:b2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:52 2025 by rpki-client