Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
File: v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json)
Hash identifier: A7yoOj1S5HugmzTND0pDB4XuryQxxVAsZo18FwchFa8=
Subject key identifier: 56:44:97:50:09:FD:0E:5F:4A:4B:AE:32:59:4A:14:11:D7:E3:AA:E6
Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
Certificate issuer: /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Certificate serial: 0194BBCDCDBE841317E8E1B86E2402AC2A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: LfTTCmxw3fZ9t19uUK2JhQ+N1C28jGsGXBZl2xnnTcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cd:be:84:13:17:e8:e1:b8:6e:24:02:ac:2a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=5644975009fd0e5f4a4bae32594a1411d7e3aae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:93:fb:36:55:1b:02:9d:43:a7:dd:0c:e3:27:
fd:5d:aa:a0:be:b5:26:61:b4:c2:47:88:ab:5e:1d:
10:15:21:c1:03:46:40:2a:58:81:0f:dd:9e:b7:a9:
23:e6:5e:91:e4:0c:01:84:ea:15:c8:09:3e:9e:a4:
ac:78:c6:63:cf:53:e5:38:49:9b:35:bd:aa:36:f1:
a6:54:ec:b7:39:d0:88:80:4c:b1:a9:26:ee:6f:83:
a9:77:c8:c5:d2:c2:71:41:2d:47:c9:1c:bf:df:48:
ef:5a:b6:0e:7c:f9:9d:b8:6d:cb:4a:e1:f0:bd:22:
be:5f:64:fc:0c:1b:c9:99:85:ed:7a:31:0e:ec:5b:
06:38:4d:9d:0c:f4:39:8a:fb:52:da:82:b5:2d:8d:
b8:5a:b5:31:5e:d8:32:17:42:44:6a:5a:dd:c3:6f:
db:8b:00:07:ba:cd:c9:2a:8a:4f:c4:3d:35:f0:69:
1e:59:61:49:e7:bf:1b:0b:98:f8:99:63:38:10:90:
2b:c9:c0:d9:3b:f8:99:57:f6:ce:35:dd:c6:49:3d:
a8:c5:ff:cb:33:2f:a0:09:50:bb:ed:87:ce:7f:46:
2e:4a:b7:a3:1c:36:25:73:8b:9f:fd:5f:be:c8:f8:
91:55:b5:54:94:14:be:b5:14:02:fe:a5:25:35:87:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:44:97:50:09:FD:0E:5F:4A:4B:AE:32:59:4A:14:11:D7:E3:AA:E6
X509v3 Authority Key Identifier:
keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:af:34:45:80:f4:15:38:d7:b6:61:0f:da:8c:91:87:92:a1:
fd:20:42:53:3e:c3:aa:90:22:1f:75:d2:3f:3c:57:fb:19:69:
9e:35:18:85:dd:62:24:87:56:c1:d6:13:51:38:b9:fd:a6:40:
56:a6:33:9d:de:20:c1:9d:57:dd:66:62:a2:fd:2f:fb:8a:f9:
47:a0:cc:24:6e:9c:5b:94:67:a1:4d:ff:3e:c4:80:d3:9a:00:
b8:ba:f9:87:e5:3e:02:85:e3:92:8c:19:31:a7:93:ed:2b:35:
dd:10:d1:f3:c5:4d:e7:76:99:de:cf:e1:01:f4:f5:ee:3d:85:
c9:30:b2:a8:75:cd:7b:3a:d3:c5:c8:aa:82:db:04:4f:cc:df:
12:5f:b3:36:a1:bf:d8:3c:ce:83:ad:a1:3c:69:39:38:77:68:
21:30:f8:3d:35:bd:25:7f:b0:43:a9:8e:ed:a9:ca:6f:10:a6:
f0:b7:f4:d2:6c:7e:67:e5:c4:27:b1:84:20:0b:d7:d7:23:6d:
bb:a2:be:e4:61:c7:0f:93:35:b1:15:7d:0b:4c:cd:25:f1:d3:
9d:84:c2:a8:1d:5c:4a:e6:1c:17:4b:07:89:c0:83:3c:ba:cc:
f1:b6:3e:14:e8:91:df:a5:8b:ee:d5:c3:8c:f8:58:f9:1c:55:
34:f2:96:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:48 2025 by rpki-client