Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
File: bMfzcUDRMXn5pckglknIDDfGpxM.mft (raw, json)
Hash identifier: h/RT/PFaNXqX1IwefWtVuzeWW8emJLhQ/qloKCV0svg=
Subject key identifier: F3:81:F8:94:05:D5:2B:3E:CB:97:46:4E:AB:C5:26:23:25:F0:35:61
Authority key identifier: 6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13
Certificate issuer: /CN=6cc7f37140d13179f9a5c9209649c80c37c6a713
Certificate serial: 0194BC3BCF09DBDE02AE14ABCE64621D89A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
Manifest number: 1042
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: bMfzcUDRMXn5pckglknIDDfGpxM.crl (hash: 4KXnTKUdP0yW6AqehTw060fhgiC0Y0xq7sUSLmdgY3s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cf:09:db:de:02:ae:14:ab:ce:64:62:1d:89:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7f37140d13179f9a5c9209649c80c37c6a713
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=f381f89405d52b3ecb97464eabc5262325f03561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:45:cf:17:9f:94:bd:bc:21:36:cd:14:3b:
fc:12:9d:7f:c1:d0:41:fd:9a:29:a8:56:5e:56:52:
91:07:68:6c:39:d9:5d:f2:cd:5f:4d:82:f8:b8:af:
c1:ba:e0:28:ac:83:3e:b7:63:07:8e:0e:d0:d0:cf:
c4:ed:8f:60:8e:c4:2d:95:26:bd:f5:e8:6c:dd:00:
80:46:b7:f4:50:56:51:82:45:db:ed:25:0e:28:7e:
58:b0:7d:d3:1e:40:1f:4e:72:40:e9:1f:a6:c2:c6:
14:b0:8d:27:c2:45:e5:61:94:72:38:b5:73:14:a5:
a7:50:13:08:2f:8c:36:f7:41:66:10:61:60:04:e1:
7a:cd:92:15:a9:85:85:b9:d4:d7:55:55:9f:c7:6a:
27:2f:0a:ff:01:5b:40:85:f5:77:de:ed:8f:f4:3a:
9c:0a:43:58:9c:a6:42:00:69:31:d0:fa:fd:cc:31:
f8:35:5b:eb:7c:5e:72:18:22:f4:32:dd:ec:8e:4c:
79:cc:e5:a5:e7:ce:a6:26:52:e9:47:6a:e9:ad:06:
0b:73:22:20:7d:64:a7:9a:dd:01:76:2d:53:a7:a4:
68:98:03:51:6f:68:66:a8:42:3c:b3:38:07:a1:51:
28:73:dc:ba:45:36:a4:19:2d:05:64:b4:19:ed:63:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:81:F8:94:05:D5:2B:3E:CB:97:46:4E:AB:C5:26:23:25:F0:35:61
X509v3 Authority Key Identifier:
keyid:6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8a:16:84:76:aa:72:f9:63:de:d0:29:a8:db:42:f7:9d:05:
0a:af:22:b0:98:03:b9:ba:1d:67:67:9f:6e:5e:c9:6b:2c:9c:
4d:8c:ca:20:86:3a:25:9c:3a:47:95:8b:71:73:43:e0:8d:77:
6a:76:c6:a0:7d:53:9b:ec:a1:5e:ce:da:3c:d3:a6:c2:6c:9f:
1f:09:db:bd:14:73:ec:a7:cd:a0:13:2a:4e:ff:7f:8b:c9:6b:
16:dc:f3:e6:3a:5e:38:6c:f0:1b:c7:4b:48:be:59:78:07:8e:
09:08:3f:75:6f:06:e8:72:5d:ba:35:bf:20:f0:f9:3e:29:dd:
46:ee:d1:14:8c:aa:df:af:6f:fb:bf:c2:a1:5f:db:c2:87:94:
58:73:ae:4a:99:70:2a:2f:fd:1a:bf:a4:4a:00:ab:9c:a7:0c:
c1:fb:e2:36:88:0b:d4:fe:e2:6e:b1:df:84:57:00:89:4d:72:
d4:7d:e7:3e:f2:3a:f3:58:15:0f:58:2f:70:e0:02:24:86:ee:
93:84:72:a2:b9:2f:88:09:43:f6:5e:53:43:7d:44:e5:d9:fd:
8a:55:c4:35:ff:13:f3:50:87:92:04:bb:57:b2:89:ba:b2:e6:
e9:e2:1a:74:0e:df:cc:71:60:c5:06:e2:00:af:5d:8c:6a:62:
26:5c:53:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:22 2025 by rpki-client