Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json)
Hash identifier: +I45XsiIubjDRsBIQhMl7WOplc9gsY3RK1EmGfGBNok=
Subject key identifier: CE:56:EA:3B:3D:F1:05:24:59:48:88:11:29:A0:A9:BC:4C:90:97:30
Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
Certificate issuer: /CN=6d005198b74572a156ab63f23085897bd3ccd41b
Certificate serial: 0194BD1796B027BCC3B4EE6EE3E24C61DD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
Manifest number: 4F
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: R0/DwwOFT7DIqVmeO8rIdruUwJbR/PWwjLT7iu0QTBA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:96:b0:27:bc:c3:b4:ee:6e:e3:e2:4c:61:dd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=ce56ea3b3df105245948881129a0a9bc4c909730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b0:72:d1:31:7c:d8:cf:9f:ff:53:0d:3a:ee:
22:d5:37:fc:76:e1:eb:ed:f0:11:74:2f:30:e4:84:
45:0a:70:22:3c:93:f8:3c:4f:c9:fd:de:fb:21:72:
88:3e:38:21:39:db:17:a9:39:cd:ea:44:ff:53:8f:
3a:7d:99:97:46:b7:f8:1a:cd:7f:a2:84:de:bb:2a:
2d:66:6f:80:9b:c0:93:4b:e7:91:09:82:21:aa:01:
04:68:3d:10:d0:f5:76:60:09:27:ee:e7:87:21:37:
ef:10:97:56:9b:7e:d3:4b:78:77:eb:81:4a:9f:85:
6f:e5:2f:b7:fd:dd:8d:08:ec:2f:19:5a:a5:04:a6:
82:bc:c3:dd:40:47:4c:b5:04:10:2f:f8:c5:cc:e2:
f0:7e:fa:11:38:fe:ca:5a:7a:35:1d:12:30:92:2a:
a4:6e:b0:a8:0f:28:f7:77:4e:3a:ea:57:0d:d7:13:
60:96:e1:72:20:c1:bf:2f:47:bb:17:25:c9:0e:8a:
16:ce:d0:4d:9a:14:ad:c7:a0:46:e4:c1:63:b0:88:
e9:d3:af:16:30:2c:a8:0a:0e:40:94:80:2f:89:97:
5d:d3:d2:73:c7:f7:db:a5:c2:4c:0c:63:31:0d:0b:
95:21:ef:f4:63:f8:47:1b:19:99:ad:64:49:73:ce:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:56:EA:3B:3D:F1:05:24:59:48:88:11:29:A0:A9:BC:4C:90:97:30
X509v3 Authority Key Identifier:
keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5a:26:7a:21:00:3e:42:97:d7:e5:52:3d:71:92:b6:7e:9a:
1e:e5:8d:1a:a4:c8:b1:6c:d8:72:41:3e:bc:e1:05:c4:5f:f9:
b2:aa:a9:5d:7c:9f:6d:15:c2:ea:10:01:a0:8c:bd:24:14:34:
b9:06:15:a6:65:a8:5a:3a:83:2d:92:39:23:e0:a4:6c:4d:91:
d6:70:4e:50:ce:5f:02:1f:23:e3:97:c3:f2:25:fb:4e:a4:44:
a0:40:98:6c:ba:22:98:bc:03:eb:ee:c5:7f:f6:a9:66:79:d8:
7c:d3:bd:f1:e9:3a:05:d0:33:3d:b8:61:3e:4f:1d:bb:7b:6a:
c7:3c:d6:04:5b:62:5f:aa:41:5a:e2:37:df:94:70:0b:f0:11:
60:14:07:a6:31:d9:0a:20:c3:0d:f8:8f:bc:b2:9d:ee:b5:ca:
4f:37:07:ac:d8:66:57:fa:f2:d4:f4:fc:70:6a:73:68:d1:62:
b8:a9:4a:07:a7:a5:95:d1:46:f4:93:2a:a1:74:c8:bb:f2:97:
c3:d6:33:e0:17:59:e7:41:72:af:78:a7:7a:af:eb:0d:42:51:
26:cf:f1:0d:61:52:63:dd:4b:3f:f9:8e:5c:e1:01:98:5f:49:
e8:3b:17:37:69:b8:fb:55:05:23:76:51:52:e2:36:42:80:a2:
6b:fe:14:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:39 2025 by rpki-client