Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
File: bLm_6TNtoFV5BgineljMq8SWhpQ.mft (raw, json)
Hash identifier: 560YJWobZSAbQt+F6ZqXhp6+sAKKYgiqzGGswcFuUoY=
Subject key identifier: 37:F3:61:03:AA:C5:66:C8:1C:C2:EE:26:A3:30:DE:77:3C:27:23:C1
Authority key identifier: 6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94
Certificate issuer: /CN=6cb9bfe9336da055790608a77a58ccabc4968694
Certificate serial: 0194BC3C8E7E7BE1C8F5BCA6A59ABEB7E4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
Manifest number: 0ACF
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: bLm_6TNtoFV5BgineljMq8SWhpQ.crl (hash: 5DJSn3COJyRhmdRdVRnuQ1RV9np0V6tk9pAZR/Hjbvc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8e:7e:7b:e1:c8:f5:bc:a6:a5:9a:be:b7:e4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb9bfe9336da055790608a77a58ccabc4968694
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=37f36103aac566c81cc2ee26a330de773c2723c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:f5:66:c2:18:f0:d7:2f:d9:fb:2a:7f:df:
87:6f:2c:56:c8:8f:20:c4:1c:3a:b6:49:6b:7e:bf:
d9:ba:d8:ce:c4:11:e6:b2:cd:fb:83:dd:34:a6:13:
56:35:3b:4e:51:44:98:a3:bc:01:45:cf:dd:40:f0:
05:f6:49:09:5c:83:88:12:56:05:c2:82:5b:e3:83:
f2:a1:4f:d2:4b:ff:ef:e0:8a:a2:75:73:18:e6:04:
82:fa:8b:bc:a6:b4:44:09:0f:78:a6:cb:31:af:cf:
a7:cf:67:45:ac:43:19:49:56:28:a4:9c:ca:33:92:
8b:63:a1:0d:99:60:bf:27:60:75:62:94:bb:82:b7:
5d:b6:0e:c2:c8:e3:83:ec:41:64:ed:39:ed:c8:48:
f5:8c:65:b1:ea:9f:ec:1a:af:a0:e0:da:14:d2:eb:
77:d7:5f:9f:e6:f1:25:96:1d:e7:13:32:0b:a6:5e:
7d:08:18:76:dd:d2:1b:3b:60:3f:75:9b:3d:67:55:
d8:3b:ab:61:52:ff:b4:48:68:96:c6:1b:79:b6:e3:
dd:02:75:d9:3d:35:f1:5e:87:c8:db:23:4b:27:51:
2f:17:5c:24:26:89:11:90:26:8b:ca:d4:68:4a:3f:
3a:1e:79:20:4a:e2:c3:58:5b:62:39:cb:4f:f9:b7:
ec:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F3:61:03:AA:C5:66:C8:1C:C2:EE:26:A3:30:DE:77:3C:27:23:C1
X509v3 Authority Key Identifier:
keyid:6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ae:ae:a7:9f:3c:f3:c1:c3:16:14:2b:92:5b:a0:2e:5b:b8:
80:24:9d:16:2c:02:c1:e7:37:5c:ac:81:0e:91:39:c3:99:60:
a1:2c:13:6f:c4:25:78:33:14:9f:61:2d:60:7a:bd:8a:0a:a6:
75:f9:19:8d:ba:a8:7a:4a:b4:1d:c9:ab:40:f5:7f:2b:bd:31:
58:cc:6d:62:d9:3b:55:7d:8f:26:a6:b0:f8:75:00:0e:d1:dd:
2a:d3:b8:d4:be:6b:c7:0f:19:61:32:28:95:56:94:ed:56:6d:
2f:e2:34:7c:8b:b5:dc:8f:c8:51:4a:b3:c9:42:e9:52:75:9a:
71:26:08:2e:d8:d1:94:75:56:4a:f9:d5:ac:e1:4b:ef:e5:70:
29:ec:25:2b:f2:5b:45:42:ac:68:6e:fe:06:a7:0d:7f:50:9b:
05:ff:67:2e:34:fd:e7:93:17:af:be:60:38:40:74:1e:c3:4a:
de:3c:ea:70:2d:d8:09:1e:6f:12:8d:7b:b3:1f:14:d1:99:16:
3e:fc:00:df:4c:c6:2b:b3:f0:85:d6:ac:02:03:94:88:9d:55:
9d:46:79:09:d9:4a:83:64:eb:b4:37:0e:fc:23:2b:9e:97:94:
a6:da:e5:1c:21:93:ca:73:58:9f:2e:a1:e3:5f:3b:05:f5:bf:
a5:89:0f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:09 2025 by rpki-client