Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.mft
File: u0OX5un46iWRVggDysuzI5Ytn64.mft (raw, json)
Hash identifier: xSKiXsn/G1+8yezG1x4oIb9EEQNgaIzcB23QGS5UN3o=
Subject key identifier: D4:63:5C:56:00:38:D8:B7:29:23:8B:48:85:32:F0:B3:16:BF:FE:54
Authority key identifier: BB:43:97:E6:E9:F8:EA:25:91:56:08:03:CA:CB:B3:23:96:2D:9F:AE
Certificate issuer: /CN=bb4397e6e9f8ea2591560803cacbb323962d9fae
Certificate serial: 0194BBCDD40E0AC9C9FDF38DEB4393DAE945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0OX5un46iWRVggDysuzI5Ytn64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.mft
Manifest number: 0E6A
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: u0OX5un46iWRVggDysuzI5Ytn64.crl (hash: 63ljlFhwpeoNV02WNOGc8jX3xtmM2rGmWzJ14/sG5uQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d4:0e:0a:c9:c9:fd:f3:8d:eb:43:93:da:e9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4397e6e9f8ea2591560803cacbb323962d9fae
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=d4635c560038d8b729238b488532f0b316bffe54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:da:f1:c2:b4:27:84:52:e1:f7:29:ec:cf:
aa:67:99:8b:9b:cf:db:a3:82:ba:96:69:69:45:72:
09:d1:ed:a5:96:e6:87:ce:a8:6a:55:5f:ac:0c:ef:
65:31:06:b0:b0:76:03:0d:ca:0a:ea:1a:45:c1:0d:
fa:8d:31:56:2b:aa:86:47:53:b4:86:21:9d:76:30:
b0:b5:06:4a:e6:7d:85:fe:c6:49:4e:1f:09:b0:cf:
d7:9b:9e:2e:33:f8:8a:5d:1a:78:ac:be:8b:36:f8:
57:ff:39:66:35:08:f1:99:23:73:ee:7b:07:48:7f:
2a:74:35:e0:28:9a:28:de:48:6e:24:83:89:ea:fc:
27:c9:b3:30:c5:16:b7:aa:0d:e7:db:35:44:c2:c5:
2d:9b:ba:ea:76:ec:54:ff:98:43:74:5b:b9:e9:69:
f3:8a:d0:a0:37:fe:90:f4:66:18:9b:98:3a:66:67:
53:b3:fd:7f:ad:0b:a3:09:41:42:0f:9f:1e:58:09:
35:0e:fa:87:d7:a2:ef:2a:7d:dc:87:30:3a:32:11:
fa:ab:cc:54:de:e7:7e:79:57:df:47:8c:65:c1:c4:
95:99:86:b3:0f:c7:f8:58:eb:3e:04:f0:3c:fd:88:
9b:b6:b1:c7:1f:b7:b6:6e:22:79:e9:c5:28:72:2a:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:63:5C:56:00:38:D8:B7:29:23:8B:48:85:32:F0:B3:16:BF:FE:54
X509v3 Authority Key Identifier:
keyid:BB:43:97:E6:E9:F8:EA:25:91:56:08:03:CA:CB:B3:23:96:2D:9F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0OX5un46iWRVggDysuzI5Ytn64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bc5e2f-a4ab-4bdc-9a07-6fb10eeaf627/1/u0OX5un46iWRVggDysuzI5Ytn64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1e:60:53:94:24:7b:ff:3c:b6:03:29:1b:95:7b:bc:0d:93:
87:d4:8b:bd:b9:53:2d:6d:29:6a:2d:42:81:79:27:b6:19:5d:
d8:8c:86:f3:3c:c4:7e:ee:2c:11:cd:ed:5f:97:46:4f:b0:ec:
26:92:ee:74:49:3d:5a:52:ed:cf:a3:89:9a:5a:0a:36:0c:4c:
9d:9a:ae:01:21:b9:eb:fa:84:5e:af:24:5a:12:5e:ec:d8:e7:
47:4d:35:7d:df:a6:d7:58:0a:ad:d7:21:de:20:d1:74:b2:7f:
05:cf:f3:6c:1f:07:14:08:53:98:52:a9:a1:e1:e5:63:7d:88:
1a:17:e3:c6:87:c2:a8:0e:06:d4:00:dd:08:23:fc:8e:41:2d:
16:cd:a0:d1:6e:e1:45:90:9f:32:d8:25:62:e7:ab:c0:18:1a:
06:bf:73:c9:12:e9:73:ea:f0:52:db:eb:a9:7b:c7:02:d7:cf:
d3:f7:0b:27:95:03:a8:4a:8f:bb:da:51:df:a7:05:67:9b:f2:
c6:f2:2b:8c:d5:87:0d:54:15:a6:97:10:0f:3c:6b:73:46:f9:
40:c5:9e:9b:0a:63:d5:f8:41:f4:a4:ba:0b:14:25:51:d1:a7:
a8:0e:2d:61:fb:7c:94:bd:d9:5a:7a:b0:23:de:55:3a:7a:f8:
e5:1d:a5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:05 2025 by rpki-client