Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier: /eH9n93f4yfUvSGFO+80xZ+mittrXR+dQl17oxkJf18=
Subject key identifier: 16:C9:92:36:BD:FE:93:33:71:BF:1F:FF:0E:DB:13:53:F4:99:6B:0A
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial: 0194BBCE74DC348B26698345231A077FD716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number: 04F9
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: u2vTCCEHnHMrYmQHwNrvO2w0jEN0ExQal9OKTZiBD5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:74:dc:34:8b:26:69:83:45:23:1a:07:7f:d7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=16c99236bdfe933371bf1fff0edb1353f4996b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:c2:c1:ed:7e:f4:ed:9d:bb:52:ba:aa:8e:
0f:80:d8:82:2f:30:cb:33:6e:46:5b:d1:05:a0:fd:
e0:3a:a6:41:96:02:1c:47:75:5e:7f:dc:54:dd:db:
41:6b:c8:3d:e7:fc:15:c0:de:b5:e4:90:b9:0b:e8:
5f:49:f2:af:40:d2:6b:8d:a4:55:83:f5:ef:ce:76:
c5:30:46:74:79:15:aa:50:72:e1:2d:80:80:18:52:
ff:6c:95:95:0b:c5:2c:50:37:e9:a5:51:47:10:bb:
44:5d:d5:27:03:1d:98:68:56:41:bc:60:90:36:ba:
98:04:d2:12:cf:30:da:5e:71:fe:1c:25:86:e0:c3:
71:d6:a2:f9:12:3a:55:f9:08:c1:c6:f7:ad:43:4c:
d9:03:ad:98:03:da:a8:19:4c:28:65:1d:ef:ec:aa:
8d:a7:5d:98:01:d9:b2:29:a1:13:b8:00:3c:9b:2d:
81:20:e1:ce:06:00:98:7a:c4:f1:7d:2e:d6:c4:a9:
81:a4:6e:2a:c9:5e:f0:48:b8:c2:1e:f1:ab:36:ce:
c1:85:23:81:9d:2b:6d:46:be:52:a0:7a:d0:32:3b:
bb:d9:28:3e:56:73:99:84:bf:e7:00:03:dc:b4:9b:
5e:24:29:6d:f4:7d:98:19:b8:24:45:2e:7e:32:76:
d0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C9:92:36:BD:FE:93:33:71:BF:1F:FF:0E:DB:13:53:F4:99:6B:0A
X509v3 Authority Key Identifier:
keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d5:3b:4d:85:7a:2e:25:de:a3:a7:99:4d:8c:7a:59:71:6c:
6c:9e:50:53:6a:08:57:de:b3:73:60:ed:0a:30:a5:9e:4b:92:
5c:25:02:24:97:5f:13:57:98:91:ce:31:66:bc:68:65:fe:bd:
e8:e0:5c:94:a4:6e:a2:ae:62:d3:fc:f5:9c:b9:9e:fc:8d:56:
41:3a:75:40:4e:e6:f0:63:00:86:1c:d8:c6:8b:20:15:b0:cf:
fa:72:c9:93:41:b1:68:39:73:c1:cd:b8:ef:a5:a9:59:61:1e:
ff:ee:94:6c:87:8f:67:bb:32:66:b7:3d:dd:aa:37:ae:e1:97:
b8:7d:06:86:b8:66:a1:c8:aa:ec:0b:62:fa:2a:b0:7e:b6:17:
1f:67:b2:cb:27:bf:2e:1a:11:47:50:f9:86:c1:be:fc:39:2a:
b5:09:e9:6f:fb:ef:b8:11:51:5c:89:f6:45:f1:a1:1b:0e:8b:
b9:57:ab:5f:df:35:4d:ee:94:d2:01:90:f5:f6:3f:0d:c4:0a:
19:a3:e7:d9:ef:c9:30:cd:bc:9a:62:e5:88:f5:0f:80:8c:55:
f5:5a:aa:43:62:bf:e6:b5:65:59:3a:e7:58:d1:d6:03:f3:4a:
ba:49:82:28:da:ca:09:38:06:00:ea:e9:91:0f:ff:1b:65:0a:
e7:e5:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:13 2025 by rpki-client