Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
File: bZYBl_5YkhTCJZ9q6olsThAH6YY.mft (raw, json)
Hash identifier: HNHllKaKwvxZXiTeNsXBCooX3bttpgvq6dNOEiihaT0=
Subject key identifier: E7:FC:15:BA:32:98:2D:92:21:A9:4A:CE:FC:ED:F5:C1:53:FD:1F:27
Authority key identifier: 6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86
Certificate issuer: /CN=6d960197fe589214c2259f6aea896c4e1007e986
Certificate serial: 0194BBCDF6A78037BCFD13DCD7D0BA016B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
Manifest number: 06C7
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: bZYBl_5YkhTCJZ9q6olsThAH6YY.crl (hash: LwjrvHQUBbyCc2kPCodG133zLrytD8zIuHhzWCvTNBk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f6:a7:80:37:bc:fd:13:dc:d7:d0:ba:01:6b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d960197fe589214c2259f6aea896c4e1007e986
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=e7fc15ba32982d9221a94acefcedf5c153fd1f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:bb:e5:9a:2b:4d:b3:13:75:47:ad:54:fe:
cb:fa:2d:33:19:72:09:bd:94:67:01:0a:36:1f:4c:
64:88:dc:bc:6a:bf:87:f8:61:ef:b7:50:bc:6f:45:
af:4d:06:ce:ad:f7:0a:e1:a3:8f:92:fb:90:67:93:
10:b0:86:7c:3e:8d:2b:5f:70:dc:eb:96:a6:ea:69:
25:58:e6:9d:ba:d1:98:3e:3e:d6:1e:cd:97:d5:67:
74:e3:36:96:ce:8e:2b:29:c7:45:a4:8e:4e:aa:66:
04:8c:fe:ba:ec:1b:0b:fd:f6:52:71:18:7e:8e:77:
93:9e:9d:1d:40:4c:26:79:a4:76:44:33:1d:77:01:
b9:8c:c1:80:bd:f8:22:f0:8b:2b:b7:fa:98:8a:6d:
5e:66:cf:b4:87:e0:ed:82:67:d0:68:09:71:10:e5:
3b:93:24:b6:7e:e1:9b:49:4b:4b:0f:56:ec:98:9c:
c7:cf:53:56:4f:c1:23:85:68:b0:bf:67:3c:79:eb:
eb:62:bf:35:b9:87:95:15:5a:81:ff:45:75:3a:70:
3c:34:50:e2:43:ad:9a:86:e7:e8:55:82:63:e7:7b:
66:b3:64:84:fe:49:93:fe:1a:0e:aa:17:2a:83:18:
f5:38:1c:31:97:80:1a:b3:62:12:08:81:fd:b9:5a:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FC:15:BA:32:98:2D:92:21:A9:4A:CE:FC:ED:F5:C1:53:FD:1F:27
X509v3 Authority Key Identifier:
keyid:6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6a:bd:91:c8:9b:57:91:fb:25:1f:18:e7:1e:b8:04:36:f9:
65:22:5a:dc:86:bd:23:e5:b0:9e:23:e1:2b:ee:52:b7:99:16:
b1:6a:d2:9d:98:09:b3:42:4b:17:b4:01:eb:64:6d:e7:97:22:
37:2f:5c:4d:8f:32:d8:d6:0c:6c:90:ee:83:3a:66:69:30:75:
c1:5e:c4:1f:f3:33:87:2a:c0:42:dd:d6:eb:14:0c:65:7d:d5:
b0:53:b7:5b:a8:e2:f9:e5:8a:a4:22:e9:46:73:61:f7:b0:b3:
58:df:82:05:5a:4d:19:ac:25:60:ae:7b:19:f8:b9:e9:e4:ee:
fb:f8:7c:42:3b:86:f3:5e:8b:fa:2e:cf:64:64:a0:b8:15:10:
a0:54:f8:d4:fd:28:43:63:57:7c:d7:cc:47:60:30:5a:04:bc:
c4:03:24:9c:ad:c9:a5:07:26:6c:e4:3c:92:1b:cc:f1:ac:8d:
23:f5:2c:20:c9:1b:5d:29:ca:ea:ae:89:48:97:02:0e:5e:51:
c4:2c:9f:e3:a1:c0:ca:d3:37:2f:2b:a4:57:4f:b2:9b:ad:7c:
2f:90:01:f3:49:0b:16:99:bc:97:7f:d8:8e:ae:e1:c0:6a:0f:
4c:a1:80:14:4b:6e:77:76:03:b7:99:ee:56:b4:45:e8:ce:b7:
00:af:69:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:45 2025 by rpki-client