Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json)
Hash identifier: e44DfVynnf4HP2oSGbCfADcSCoRDNZpGbG+mjzbfPV0=
Subject key identifier: 46:08:C7:B5:72:E6:A6:5C:01:8C:71:34:A7:69:A2:16:74:A3:69:A4
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial: 0194BCA96E93E99780FE26C7207C6692D55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
Manifest number: 0EAB
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: 3J6AK9id4d+TIZQzag/qNyAt3ptCOor+CISAjoCXwv4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6e:93:e9:97:80:fe:26:c7:20:7c:66:92:d5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=4608c7b572e6a65c018c7134a769a21674a369a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:4e:d8:a9:86:f8:0a:43:69:b7:12:79:b1:
76:cf:c5:2a:d2:27:78:8b:82:3f:4f:f0:b7:f4:ad:
ba:97:27:f5:b7:f6:f4:a4:97:10:1b:94:6d:84:9d:
05:8a:5d:50:c0:e2:1a:3c:7e:bf:c9:62:8b:48:e8:
fa:35:c0:ff:bb:d7:01:b5:ae:64:92:b0:a7:71:1b:
e4:3d:0a:34:88:1e:e3:e1:77:07:00:cf:a6:83:e8:
6f:ef:ac:80:5f:73:f9:15:fe:d3:36:f3:c0:22:8a:
3b:81:c7:9c:ba:08:7f:73:35:a4:a7:2a:57:ba:62:
09:69:fd:56:d9:e2:60:67:3a:43:e1:5b:28:68:a1:
de:a7:c5:34:51:2c:1a:68:66:25:18:cb:bc:dd:40:
c7:d8:cc:39:9a:dd:df:16:05:a0:d0:47:c7:42:ff:
28:29:31:cf:98:6a:a1:29:c3:c0:91:2a:56:a0:c7:
e5:c6:b2:f9:02:ef:35:26:dd:c2:ac:a7:f1:d1:93:
8d:eb:4f:8b:63:b4:f0:85:b9:d5:24:0b:c8:d8:66:
9d:a2:f8:d3:fe:d9:e3:93:8c:29:94:63:2a:32:cd:
c9:8b:f8:a0:45:fc:54:71:13:04:31:62:16:2d:21:
35:97:19:b5:80:81:8b:08:66:94:e7:75:f9:b4:bb:
2f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:08:C7:B5:72:E6:A6:5C:01:8C:71:34:A7:69:A2:16:74:A3:69:A4
X509v3 Authority Key Identifier:
keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ec:0c:1e:fb:9b:60:79:64:54:e5:4f:c7:ec:b2:fe:7a:95:
50:d3:48:2f:a6:73:f4:4e:f1:04:86:d1:73:e1:b9:82:ba:28:
f7:65:5a:85:58:94:a7:e2:f8:3b:ad:62:f7:2f:7f:55:b9:67:
ff:49:b5:88:de:e0:13:93:eb:b3:03:d3:42:de:7a:fc:cf:53:
9a:da:f0:ee:34:ac:8b:d5:22:e7:7d:7b:d4:62:f9:d9:8b:7d:
d1:58:fb:da:4d:ff:82:41:c0:e9:a7:34:f7:7e:fd:22:f4:63:
02:e5:c7:7c:1d:85:82:30:58:9d:3d:c0:f7:eb:7e:f2:ab:c0:
d3:f2:c2:3c:fc:af:8b:8e:d4:ae:5e:18:e2:da:3f:5b:7b:20:
db:72:f7:6a:df:6c:20:09:f3:7a:4f:db:05:02:a5:f0:a4:0e:
08:27:93:90:0d:8b:0f:eb:b3:9b:a6:87:d2:03:4d:a8:f1:6c:
71:5a:fe:e6:4d:42:e5:0e:3c:c8:43:d4:ad:ce:24:0e:50:57:
4d:6d:f6:08:a2:9e:f5:60:fe:64:40:bd:2e:81:85:90:60:b0:
e5:55:7e:3e:85:cd:e5:37:51:de:8a:a4:6f:6e:b7:dc:50:f6:
2f:30:83:09:d8:fd:18:96:46:af:b2:ee:10:c7:03:e9:94:d5:
b0:12:be:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:32 2025 by rpki-client