Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
File: b27JJY79ACkhePqBwjzXfAKhoRA.mft (raw, json)
Hash identifier: n5SOsVELjaMyx8eNd6QKcIQQYk68mwf0r99I2lY5WHA=
Subject key identifier: 61:76:71:3B:36:8B:1E:B4:AE:E0:92:93:BC:05:F8:9F:70:33:7B:1A
Authority key identifier: 6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10
Certificate issuer: /CN=6f6ec9258efd00292178fa81c23cd77c02a1a110
Certificate serial: 0194BC3C6290AD71B74244BEF12EE19F39E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
Manifest number: 0AA9
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: b27JJY79ACkhePqBwjzXfAKhoRA.crl (hash: zptkEE2s41kh14NY6NgjypfBegfuCVTkZAlLRs54plM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:62:90:ad:71:b7:42:44:be:f1:2e:e1:9f:39:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6ec9258efd00292178fa81c23cd77c02a1a110
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=6176713b368b1eb4aee09293bc05f89f70337b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:c6:a2:2a:69:88:54:67:2c:29:a6:87:b8:
b4:16:28:6e:6b:c6:0e:72:fa:d0:0e:c7:ef:9c:b0:
e7:b2:61:57:38:0f:70:ec:b6:5a:af:e0:a6:eb:57:
2c:bf:36:93:85:f0:55:ae:90:55:db:11:6c:ed:cb:
24:19:bc:2f:2e:f7:44:29:ca:78:5d:b3:6a:7c:c1:
f9:1f:bb:bd:dc:b6:3d:27:f3:21:95:56:ad:ba:3c:
dc:f9:b9:30:8d:0b:d0:e6:ba:e0:a9:be:3b:80:c3:
12:70:cd:79:9e:48:cd:7f:46:45:90:59:94:10:60:
2b:56:94:ac:12:63:c6:b6:3c:97:9e:76:68:c4:04:
7d:21:47:12:c4:62:1a:ce:30:76:72:1c:cd:a1:f9:
ca:17:80:a9:79:46:d8:de:86:0d:db:7a:55:9e:73:
83:35:74:5d:89:6c:64:f1:82:c2:83:e6:55:6a:f9:
23:8b:c7:86:25:f9:3e:cc:13:da:2c:11:ca:77:3f:
9a:30:d5:74:d2:2a:f9:eb:a8:b7:6e:d6:9a:7b:92:
0d:be:d6:6d:9d:d7:57:e4:6d:f8:48:49:4c:a0:a2:
6c:3e:50:9b:d6:d5:08:1d:fb:d4:56:7e:2c:fb:df:
d3:2e:15:bd:1e:c1:71:6c:7e:d9:f8:fc:7e:a2:a9:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:76:71:3B:36:8B:1E:B4:AE:E0:92:93:BC:05:F8:9F:70:33:7B:1A
X509v3 Authority Key Identifier:
keyid:6F:6E:C9:25:8E:FD:00:29:21:78:FA:81:C2:3C:D7:7C:02:A1:A1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b27JJY79ACkhePqBwjzXfAKhoRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/160d81-c728-462f-aa26-a15935064add/1/b27JJY79ACkhePqBwjzXfAKhoRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0b:62:23:5e:c8:cf:01:a2:67:2d:ca:91:47:be:fe:6d:c8:
25:df:90:ca:19:02:8a:2e:a6:e8:13:fb:42:86:ac:7b:b8:56:
39:83:ac:77:eb:c1:29:b1:11:1a:98:96:94:99:7a:fc:99:dc:
d9:fa:1b:fb:c0:08:a4:2e:a6:90:79:e8:96:67:7f:2d:e6:95:
ba:98:d4:d0:38:c3:c4:83:dd:fb:a0:04:96:8d:02:f1:5e:9e:
02:0f:d5:05:65:fa:6d:6d:8e:c7:9f:0c:15:c5:ef:ce:e2:eb:
ee:32:14:bf:d0:9d:5c:7d:1b:0e:f1:7c:95:e3:61:67:1f:d3:
f2:de:0d:e1:33:f0:b9:02:29:03:51:d4:74:ec:83:25:aa:4f:
08:ee:5d:53:1a:4a:34:52:ea:cf:05:65:3e:d4:92:91:d7:8d:
46:92:82:cb:a0:32:1a:c8:1a:70:26:d7:4d:a3:7f:1a:d5:09:
62:0d:26:50:19:58:f8:3e:e0:12:8e:e3:1c:97:d2:4e:c8:f0:
94:e0:3c:74:d1:07:d0:54:5b:87:c3:1c:dc:36:ec:64:71:3c:
0b:30:88:48:ef:46:fe:b3:64:13:b7:ed:9a:65:62:59:bf:ba:
32:6b:2d:b9:83:1e:95:50:82:5c:02:06:aa:2e:f6:51:48:9c:
f0:2d:7b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:42 2025 by rpki-client