Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
File: bxfKsp3wkGVUwRzpqynGDR56Z1w.mft (raw, json)
Hash identifier: +sJhhSU34Jrb7jbUBPYe5X0y7nBM/6Ae+mCiezG31J4=
Subject key identifier: A8:37:AF:64:1D:27:4A:E6:E4:BF:5C:85:81:1A:A3:1D:07:C6:E0:41
Authority key identifier: 6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
Certificate issuer: /CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Certificate serial: 0194BC72F88A7F641108EA234FA659597A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
Manifest number: 0301
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: bxfKsp3wkGVUwRzpqynGDR56Z1w.crl (hash: SSak9a+sHeHyUOcWkRPOpEG+W33HMny5g7NSzdkwDWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f8:8a:7f:64:11:08:ea:23:4f:a6:59:59:7a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=a837af641d274ae6e4bf5c85811aa31d07c6e041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:8e:58:df:1b:45:b6:d8:bf:95:30:fa:cb:
8c:55:4e:64:93:8a:a1:97:bf:f1:1e:3b:f6:7a:67:
07:bf:b1:91:e5:54:05:ba:23:f0:c5:0b:a7:fd:28:
eb:99:f9:09:36:84:07:61:89:9b:f1:77:3e:6b:11:
8f:1d:3a:75:11:fe:a1:64:8c:1a:db:87:bd:1d:a7:
81:d1:45:ac:71:fa:f8:6d:ca:a7:fc:83:b8:31:54:
4d:c0:5b:31:3a:a4:cf:34:d6:26:5f:ec:cb:1c:a1:
6c:99:2d:8e:d2:a3:bc:08:dc:25:81:ed:9d:f0:07:
2f:ce:cd:30:fb:ef:3d:0b:ad:5e:6d:92:2c:9c:d2:
b9:32:f4:84:ad:6d:2b:40:3e:55:a9:51:7b:50:d2:
44:33:9c:f2:00:b0:ac:a4:64:a3:00:51:62:95:44:
03:d7:fe:3f:62:df:33:cc:93:0c:10:13:a6:a8:c5:
bf:87:6b:95:fc:5e:e1:0d:ba:d3:f7:fb:55:13:ad:
48:3e:59:9c:60:94:c8:01:58:02:db:48:e4:bc:7b:
35:f7:c2:4f:7d:8c:14:a2:b3:e7:65:db:70:70:1d:
4d:1e:cc:0b:06:3c:8e:e0:e6:f5:0c:72:16:cd:a3:
55:16:92:36:16:40:28:e1:ee:90:ad:b5:57:5c:27:
9c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:37:AF:64:1D:27:4A:E6:E4:BF:5C:85:81:1A:A3:1D:07:C6:E0:41
X509v3 Authority Key Identifier:
keyid:6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4f:2f:9e:ef:b2:b3:ee:57:54:f8:85:b4:d1:28:28:ad:16:
e8:85:42:fc:a0:0a:11:d2:f2:4a:6d:e7:a9:c6:7c:de:7c:f6:
c0:2a:23:1f:c7:60:91:8b:32:b9:dc:82:65:12:b9:d6:99:e3:
e3:cd:e8:c9:0a:b1:eb:60:b7:db:a5:a6:fd:e4:55:44:cb:37:
dd:cb:17:88:74:0b:6d:32:d5:0a:f1:49:c7:0e:36:28:50:99:
ad:c9:53:01:22:e6:c9:97:e4:a2:65:6e:90:20:50:25:2d:3b:
9b:1a:97:eb:23:12:9f:37:a4:4c:16:c1:d0:36:08:89:39:00:
b3:4f:f2:ae:5f:24:29:7f:92:04:f9:51:f6:27:3a:c2:3d:7a:
ed:5e:1c:08:e8:07:9b:ca:ee:f5:b8:47:88:36:45:5f:ae:e4:
b6:d7:5b:0c:53:e4:6a:c5:b8:b0:5d:48:e8:c7:bc:9a:8b:2b:
be:82:17:19:a7:0c:28:a7:bf:eb:81:25:d3:69:8f:00:94:94:
7a:32:b1:17:7f:39:15:03:6e:6d:17:8b:38:c3:6b:31:b5:8e:
27:47:61:1a:c9:5e:0c:5d:e7:d9:c9:f5:ba:39:48:39:54:ce:
77:ea:94:0d:9b:fd:f5:d9:11:8b:75:6f:54:3e:e1:6e:1d:f8:
ab:cf:ba:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:10:48 2025 by rpki-client