Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
File: a_HqpcMxvs8ydwGi69zxobtfBww.mft (raw, json)
Hash identifier: Q7cr/JFD5jpOm5FoSu5MlBUZf6Svv/bz7HKFxRKCqjs=
Subject key identifier: BC:62:D1:3C:E6:CC:7B:A3:F1:DE:04:04:5E:4E:B2:FE:3E:46:E7:2F
Authority key identifier: 6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C
Certificate issuer: /CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
Certificate serial: 0194BD17F1D0246316BD8E9D501003DE9AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
Manifest number: 0AC1
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: a_HqpcMxvs8ydwGi69zxobtfBww.crl (hash: ZwGCQBiSzIT8a59HDZdpUEIbwB/psx1le9r+q2WYjy0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f1:d0:24:63:16:bd:8e:9d:50:10:03:de:9a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=bc62d13ce6cc7ba3f1de04045e4eb2fe3e46e72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:37:af:98:7d:28:59:0f:ff:44:a0:eb:43:
e8:70:b5:ff:a7:71:aa:e1:eb:3c:96:0e:87:69:27:
a4:9a:ae:73:47:38:8c:f4:fc:9e:3b:db:b2:43:ba:
62:56:3b:35:60:20:4f:15:8c:c8:e5:31:7c:7c:29:
00:66:c2:07:13:56:0e:73:6d:5f:17:70:63:79:3c:
04:26:9e:f7:c3:94:b7:a2:ec:8f:1c:ef:f4:64:4e:
a9:15:94:9a:56:7c:b5:93:2a:fc:7d:00:80:b4:49:
30:d7:e3:0c:85:d5:32:61:7f:6b:6c:9d:a6:95:22:
4d:ea:f7:99:0a:cd:e1:c3:bd:3d:ac:62:18:bf:42:
c9:c9:92:fb:29:e5:6a:fa:91:b9:69:9d:e6:d7:e0:
d1:e7:5b:47:97:50:e4:4e:bf:f9:c3:d0:b2:fe:71:
8e:ab:76:9f:2a:aa:f4:e0:d9:76:d0:97:3f:0a:fb:
0b:04:8c:d8:f2:62:2e:cc:83:78:4a:61:f3:f8:61:
63:1f:14:ac:4e:02:ed:5b:b8:52:48:5a:0f:8a:3a:
62:46:08:f8:ae:e3:44:a1:77:b5:91:9b:c0:4b:e5:
79:88:41:d0:d9:9d:dc:a4:2f:9a:d5:66:30:f3:69:
59:82:31:d5:b0:60:80:e4:68:2f:5d:bd:50:12:7b:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:62:D1:3C:E6:CC:7B:A3:F1:DE:04:04:5E:4E:B2:FE:3E:46:E7:2F
X509v3 Authority Key Identifier:
keyid:6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:72:3b:25:34:ea:8a:43:32:5d:c7:6f:65:91:6e:fd:89:5e:
12:fe:d0:59:56:50:5b:8b:b1:ac:39:1f:4e:23:b1:e9:9b:9d:
da:ca:f1:fb:4c:92:cf:55:a8:aa:0a:2f:31:be:2b:2e:67:33:
71:64:dd:d2:ab:66:c6:1d:29:dc:6c:b9:05:42:75:2a:03:42:
9d:67:34:27:b4:6c:96:40:55:50:d9:64:01:11:65:ba:5d:75:
b2:7c:0b:a1:66:ee:ff:b6:c0:c7:df:cc:67:7c:ce:eb:09:69:
cd:1d:32:87:4d:59:83:ff:3b:60:89:0a:43:23:7c:b5:52:ec:
8d:08:d6:d5:13:83:eb:fb:97:34:11:17:a3:c4:8c:eb:f6:6f:
d6:e3:31:8c:12:83:1e:5c:f3:46:64:65:86:04:f4:26:f8:a0:
6d:c4:09:a8:1a:d5:7e:e0:82:f6:ee:d6:67:67:3f:96:ca:f8:
82:5c:1c:e2:d2:cb:83:1d:ec:be:82:c3:c4:bb:28:9a:9e:34:
fd:db:6a:3a:f1:a3:9b:0d:1d:cd:9a:64:64:5c:65:90:ae:9c:
16:3a:f3:4a:c1:11:84:34:e8:db:18:c7:6c:cc:26:4f:b3:63:
aa:dc:17:8f:69:55:ff:43:9a:35:54:0f:dc:13:d2:92:14:9b:
bd:a3:19:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:33 2025 by rpki-client