Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
File: b4t5gQzrxboqUvegjVGW0z6M3Oc.mft (raw, json)
Hash identifier: qmeA/jEYcsWFEj0mPEVCHJlvQNkh4sSImFzd5JifK3A=
Subject key identifier: F9:26:AA:00:80:63:2F:7B:EB:B8:C5:40:6D:7D:4F:39:C6:84:67:93
Authority key identifier: 6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
Certificate issuer: /CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Certificate serial: 0194BCA9BA370FF792FD375F39B1C6ABCFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: b4t5gQzrxboqUvegjVGW0z6M3Oc.crl (hash: 5VBimhECoHIxzYwrUhnQ2lJ+AnWIfdo/Smvm8VM4wt0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ba:37:0f:f7:92:fd:37:5f:39:b1:c6:ab:cf:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=f926aa0080632f7bebb8c5406d7d4f39c6846793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:c5:74:f9:9c:c6:26:c0:c1:5b:f4:b0:6f:
76:b3:9b:23:90:42:d9:e8:76:f9:e3:03:00:77:72:
e4:fe:f4:e2:19:8c:ba:a9:ff:c0:cc:2b:6a:6c:74:
49:ee:d4:bd:70:2f:81:c7:3e:1f:3a:16:16:da:34:
4a:ce:1c:98:68:32:6b:d7:70:be:dd:5a:8b:e8:31:
44:a1:4d:57:10:2a:41:d7:a4:7a:d1:c8:4b:e7:fd:
e9:93:ef:b0:c2:dd:10:11:14:cd:86:38:a7:da:67:
18:b4:36:61:e3:aa:15:a7:cc:9d:b3:a0:be:08:7b:
1b:22:24:31:29:10:ce:09:a9:6b:ae:dd:0a:2e:93:
b4:38:a9:ac:bc:67:94:b1:2f:4f:76:bf:72:3d:ff:
44:5c:50:7b:86:17:94:0b:89:55:fc:ec:7e:f9:02:
40:e2:36:a8:25:34:1f:42:fc:86:8b:fd:c2:5b:cf:
d0:05:49:c1:18:60:fb:87:54:d1:38:f0:a5:e9:a9:
ab:f4:a7:f4:74:58:6c:99:89:a8:36:fe:d0:8f:70:
86:c3:23:35:55:66:fe:53:b3:43:72:ef:27:58:54:
1e:48:4b:11:3c:f7:e9:df:85:08:19:46:14:39:ba:
5e:80:c4:d5:e6:40:e7:8d:b9:75:1e:ca:9a:fe:2d:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:26:AA:00:80:63:2F:7B:EB:B8:C5:40:6D:7D:4F:39:C6:84:67:93
X509v3 Authority Key Identifier:
keyid:6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e0:df:cc:fa:31:06:f7:1c:81:dd:b3:25:9a:3a:ba:93:d1:
3c:21:49:e1:42:f1:0a:4d:d8:2b:16:1c:7e:ef:89:8b:d4:db:
74:ad:00:7b:6c:d3:44:cc:20:81:61:8b:4c:ee:c2:9a:bd:8f:
d6:f6:59:4d:47:93:84:10:8f:b3:71:9c:2d:5a:73:8b:bc:20:
fb:ad:8b:32:94:6e:40:60:ed:69:1c:63:82:8d:8a:6d:fb:63:
2a:53:4e:71:5e:2e:47:19:94:d6:26:1a:9f:15:e1:e0:2d:48:
5d:62:74:90:69:75:4d:f8:dc:d2:65:e2:ad:8f:0f:19:4b:ea:
0d:7f:79:40:02:23:8e:e1:f9:13:41:53:1a:48:84:39:8a:3b:
14:73:d4:8e:90:63:9e:1f:9d:69:ef:3c:f1:be:1c:a1:b5:2d:
af:49:ff:02:a7:64:34:db:19:67:d8:0e:7b:cc:62:ed:21:96:
d8:7e:d6:ff:b6:8b:63:5e:ab:87:4b:4c:34:36:5b:a2:12:e8:
5e:fa:3c:c1:5b:3d:18:17:ee:b4:2c:4d:6c:27:74:d7:b8:bd:
32:0d:7d:f7:8b:dd:6c:16:c1:77:74:b3:60:7c:12:73:aa:28:
e1:b3:b9:c2:4a:63:c6:42:9d:d2:08:26:bf:cc:30:1a:8e:45:
49:fc:14:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:46 2025 by rpki-client