Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
File: bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft (raw, json)
Hash identifier: HmwQxmFkoDuP1Y9nrBN/Sa3vON192unFyssXvexaxSU=
Subject key identifier: 7B:89:13:04:D5:F7:70:14:9D:54:B5:93:A1:0D:73:BE:47:3D:5E:9D
Authority key identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
Certificate issuer: /CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Certificate serial: 0194BC3C1BA8549774BECC3E9100B7BEB87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
Manifest number: 10BC
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl (hash: lZbwdmx+wxHa6vkBx6SrP4FHuLSBINtMr1igHXe+lBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1b:a8:54:97:74:be:cc:3e:91:00:b7:be:b8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=7b891304d5f770149d54b593a10d73be473d5e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:b0:64:ea:f2:48:6a:b7:ff:a2:c3:35:bd:
dd:43:f9:86:b8:86:eb:65:3c:d7:9a:4d:22:33:a5:
2e:63:93:8c:af:24:3d:ef:dc:e3:eb:8e:02:85:40:
85:ce:ee:5a:63:58:ba:95:e6:22:04:ae:8e:53:34:
02:ee:f5:16:5f:3d:7e:e9:68:43:c5:ef:b2:ef:67:
ca:7b:55:67:b2:8a:02:9e:54:32:4f:ca:fc:f7:5a:
5b:27:0a:e4:f9:73:de:d4:5c:73:c4:56:18:71:d9:
59:0d:10:65:27:cd:1c:87:8d:d2:9a:40:ab:62:76:
f2:b5:a4:df:67:fc:5b:f6:99:f7:1e:b7:93:99:9f:
d8:96:12:64:ce:41:fb:91:a7:ff:5d:d7:59:c3:b8:
6d:30:76:44:cc:1a:c2:fc:27:dc:98:10:1f:60:46:
0f:20:b6:8a:a4:8a:e6:cd:c8:ec:47:44:5a:4e:ff:
74:76:1d:6c:b4:c5:e1:62:96:d5:8b:a1:ce:64:1a:
5e:25:1e:7e:10:01:b6:10:75:e6:a8:eb:6f:6f:64:
0c:bc:9d:11:56:15:68:c1:0c:1a:42:da:ce:62:99:
bc:18:01:ba:d1:4d:98:83:c8:18:ba:f8:75:95:c4:
2d:17:59:91:10:e4:70:98:b8:dd:57:8b:7b:e9:ee:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:89:13:04:D5:F7:70:14:9D:54:B5:93:A1:0D:73:BE:47:3D:5E:9D
X509v3 Authority Key Identifier:
keyid:6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e0:e9:f4:70:f9:13:89:59:0c:9b:3e:1b:60:a1:69:3c:fa:
a3:15:6b:da:bb:ac:38:a3:c9:c8:28:7b:a0:82:3c:da:ce:23:
2f:ae:ad:bb:5e:4c:fa:0c:1d:2e:08:58:c1:e3:67:ff:d3:57:
0a:f1:1d:26:f4:98:ff:fd:6c:04:57:51:9c:8f:d1:df:fc:3f:
e7:da:50:95:b7:2a:fa:ea:7a:b8:6c:86:d9:cf:cf:7a:a3:1e:
c0:0d:a3:58:e7:93:14:f5:f2:da:12:77:cc:65:f5:65:72:e7:
4e:0f:39:80:a7:77:f9:19:49:3b:75:f0:9e:c0:19:b9:ac:e7:
4c:cc:e6:f5:3a:b4:3b:5e:d6:37:b5:8d:a8:75:ff:7c:5b:39:
23:5f:ef:9b:91:0e:26:76:d2:2a:e4:ba:f8:ef:f1:fe:76:19:
5a:96:b8:92:fc:ed:39:64:a5:71:8d:e1:76:ec:d7:d4:72:93:
89:be:fa:9d:63:16:6d:08:a1:6e:1f:35:f7:79:d3:44:3c:0c:
84:21:46:d5:70:a3:7e:9b:3c:78:cc:8d:b2:dd:55:0b:5e:15:
6e:0e:68:33:54:2e:45:6d:da:46:ae:18:d7:38:58:37:bd:6b:
0c:db:20:c0:c6:38:33:9c:25:5e:e2:3b:bf:36:26:1c:94:86:
65:29:89:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:52 2025 by rpki-client