Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b73411-cf4e-4999-9f42-cde404805b10/1/ba7zApYp3gKduYq3tOm9IhwomRw.mft
File: ba7zApYp3gKduYq3tOm9IhwomRw.mft (raw, json)
Hash identifier: fFlBari39UO8DL/JakZoNzfdR56nGy8rWW8LX7jXkzE=
Subject key identifier: 02:D8:B7:F4:6D:BD:5D:02:06:A3:3E:97:E5:F7:4D:7C:E2:0E:67:88
Authority key identifier: 6D:AE:F3:02:96:29:DE:02:9D:B9:8A:B7:B4:E9:BD:22:1C:28:99:1C
Certificate issuer: /CN=6daef3029629de029db98ab7b4e9bd221c28991c
Certificate serial: 0194BBCF00B7110982197E5976FC52A5CC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ba7zApYp3gKduYq3tOm9IhwomRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b73411-cf4e-4999-9f42-cde404805b10/1/ba7zApYp3gKduYq3tOm9IhwomRw.mft
Manifest number: 0A13
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: ba7zApYp3gKduYq3tOm9IhwomRw.crl (hash: //MfbcA0oFw4RZuPd34+SDxS5mDTxetLKp2NacMr2ZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:00:b7:11:09:82:19:7e:59:76:fc:52:a5:cc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daef3029629de029db98ab7b4e9bd221c28991c
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=02d8b7f46dbd5d0206a33e97e5f74d7ce20e6788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:bf:f0:59:6d:72:92:71:a2:cb:07:5a:71:
25:ac:ab:5a:a5:ae:60:85:e2:c0:37:66:54:fb:ef:
5a:0c:84:45:ff:79:39:96:d3:cc:96:69:9e:55:13:
59:e2:e4:14:3e:03:1b:03:0e:0d:34:6c:1a:f4:07:
45:54:d9:50:1a:91:35:55:f6:4d:19:26:b7:91:fb:
91:91:51:ec:45:c9:7c:52:99:fb:78:ba:4d:a1:c7:
32:12:7d:82:55:50:db:a7:67:7b:b3:1f:45:70:5a:
82:f4:af:34:3c:ef:5e:2a:73:05:67:f1:b4:a9:d2:
14:6a:df:89:8b:d3:a6:4a:c4:e0:01:e7:62:e1:28:
ac:52:3e:19:0e:6e:e0:06:63:70:4c:91:1e:1e:d6:
21:56:8e:b5:88:e7:9a:15:ec:53:df:de:ff:20:01:
f5:fc:e2:1b:1e:91:a1:d7:8f:b3:ed:6b:fe:e0:6b:
19:70:09:b8:9b:9d:14:88:ff:92:fa:16:cd:49:85:
28:79:bb:1f:01:10:fa:b2:da:72:f5:5e:9c:7f:c3:
03:cd:97:ef:ac:c3:33:f8:28:6b:28:ef:c7:2e:e4:
94:e1:87:76:2e:d9:5f:de:a1:e2:98:d4:60:b0:29:
09:44:41:09:d2:1b:72:05:87:f1:fa:b4:e8:f1:33:
c4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D8:B7:F4:6D:BD:5D:02:06:A3:3E:97:E5:F7:4D:7C:E2:0E:67:88
X509v3 Authority Key Identifier:
keyid:6D:AE:F3:02:96:29:DE:02:9D:B9:8A:B7:B4:E9:BD:22:1C:28:99:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba7zApYp3gKduYq3tOm9IhwomRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b73411-cf4e-4999-9f42-cde404805b10/1/ba7zApYp3gKduYq3tOm9IhwomRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b73411-cf4e-4999-9f42-cde404805b10/1/ba7zApYp3gKduYq3tOm9IhwomRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9b:58:82:72:c1:2a:46:d6:87:9a:e4:13:12:79:76:59:8f:
1e:ff:4f:6c:ce:dd:7f:6c:93:b5:a5:22:83:68:8f:ed:7a:7f:
51:01:50:d0:03:a6:c2:9b:cd:19:22:9c:71:f9:42:fc:c0:de:
17:44:a1:90:a5:0b:ac:8b:d6:72:a3:e5:de:c1:2d:99:99:eb:
14:fc:df:c8:ba:10:fd:5e:a1:8f:d0:b8:a3:cc:e6:c8:3f:62:
f8:7f:5d:44:33:46:7b:7a:78:0e:e4:11:0c:8a:2d:e8:4a:68:
21:a0:44:1f:d1:3c:ba:bf:70:7b:cf:b7:7d:7c:73:ce:e0:59:
36:a4:e3:a3:8e:41:9a:23:56:44:f7:0c:4c:0d:6c:f9:e3:9c:
99:e7:9a:de:5e:34:20:c0:4e:4a:cb:6a:f9:26:c9:ba:8e:76:
38:0c:d1:a6:ea:66:da:e2:42:e6:71:5d:ac:28:d4:df:09:1b:
1c:28:08:5a:90:31:6b:99:5e:de:73:73:d6:e2:78:22:84:e0:
54:5b:f1:ee:1e:d3:04:b6:fa:e5:c2:dd:88:49:62:05:4a:a2:
45:54:26:b9:c0:fa:ca:2a:73:14:50:d3:64:13:43:9d:16:be:
84:fd:8f:9f:db:4a:28:e9:23:19:59:c0:ab:b2:69:5c:50:b4:
5c:5a:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:10 2025 by rpki-client