Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
File: elBBBN9nzv6N7h0YqWhQqaZMLJU.mft (raw, json)
Hash identifier: pXG6Fr0w6wIIMQ89v9BlgjzaWLc7J7w8tI4O6JY5WfE=
Subject key identifier: 18:17:21:AB:C3:41:13:DD:11:3E:E1:98:35:79:C8:59:D9:98:60:F4
Authority key identifier: 7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
Certificate issuer: /CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Certificate serial: 0194BCE09956DA9CC23678D651F9BFF5CAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
Manifest number: 0429
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: elBBBN9nzv6N7h0YqWhQqaZMLJU.crl (hash: UkkEM4B5cRbtzjvergkp5A1LwLIAh6kk1X+38MNfXeI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:99:56:da:9c:c2:36:78:d6:51:f9:bf:f5:ca:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=181721abc34113dd113ee1983579c859d99860f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:66:da:18:ef:43:9d:a8:34:26:79:21:09:
c4:bd:db:54:20:4d:1e:ea:41:0d:7b:e7:5b:e4:90:
ab:c5:d8:21:7a:15:50:fe:dd:0f:7e:6e:df:bc:91:
a2:3f:01:3e:64:7e:90:73:db:b9:df:23:ed:ac:a7:
5b:84:4c:bf:50:c4:bc:8f:1e:d9:21:86:1a:0a:54:
35:22:7e:ae:a4:76:63:a8:58:5c:ce:c0:3a:6f:5f:
98:1e:0f:cf:39:1a:8a:48:39:f6:38:93:e8:30:94:
d3:07:1c:96:16:8d:f6:f0:ec:25:73:67:bf:d8:aa:
8c:22:90:a5:2a:74:f7:b0:1b:fd:cb:1e:b9:d9:b7:
2c:27:f0:53:fd:a9:a1:69:28:dc:65:04:5d:85:74:
22:06:55:ec:74:8d:2e:96:c1:11:a5:25:99:fd:64:
ab:0a:14:e3:88:cc:e1:fd:57:94:71:54:e5:9b:ac:
79:57:24:6a:b5:61:84:7c:2c:bf:66:19:3d:f6:f7:
be:bc:3e:fd:20:85:2d:d3:96:59:5a:fe:57:a5:f3:
11:34:65:35:f9:d5:96:e5:69:93:a8:7d:c4:01:16:
8f:8d:7c:88:f7:0c:41:29:f5:df:75:af:54:91:a0:
74:c4:73:80:92:26:67:75:40:eb:d6:39:7b:d1:90:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:17:21:AB:C3:41:13:DD:11:3E:E1:98:35:79:C8:59:D9:98:60:F4
X509v3 Authority Key Identifier:
keyid:7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:93:87:ed:65:4b:27:e4:b8:47:23:09:51:e0:c1:54:9a:30:
45:bf:6c:1c:d9:25:6b:0c:b0:fc:76:03:1b:c9:6e:03:c5:e6:
8b:c8:46:d6:9f:d6:34:2e:3d:20:e3:d6:e8:e1:a7:05:d5:63:
8f:59:5f:1d:94:3f:05:58:2d:80:2e:ec:78:69:54:65:bf:17:
ed:08:12:e2:36:30:ce:05:c0:8e:54:ac:a9:dd:91:de:0c:63:
a9:8a:94:c2:51:b7:fd:5b:4d:a5:45:a9:82:ef:5a:94:ae:a5:
36:c0:96:d4:5b:a1:67:7f:3c:b6:15:64:30:c0:8e:bc:ce:d7:
a7:ac:fb:10:da:3a:9c:88:5a:82:05:a7:39:dd:f9:00:df:47:
1f:67:e3:29:07:9f:2d:a9:56:bc:b7:9f:1e:f9:09:67:a5:fd:
14:34:3e:24:e2:0d:1e:e8:b2:4d:07:28:75:4c:d3:76:04:fa:
d8:d2:db:a0:65:ba:23:26:03:5a:89:f0:03:ab:79:29:52:19:
d8:ca:31:d2:1f:c6:bc:28:d6:a4:76:98:2d:5b:e0:a6:b4:5d:
ec:8c:e3:de:67:83:b8:1d:94:7e:cf:47:eb:e3:1d:75:2c:69:
d4:b7:15:03:dc:b9:e5:65:86:14:8f:af:6a:9c:87:ac:ce:8b:
98:a0:25:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:06 2025 by rpki-client