Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
File: geY5cEKnqWRfwS91nQJhldfL_Vg.mft (raw, json)
Hash identifier: jNcwUjY32YLVSydFkNXIWbIckePEgc3udb0eoFtiIVo=
Subject key identifier: CA:6F:2A:59:43:BA:C5:96:85:DA:39:D1:09:2A:72:11:5D:47:5B:E1
Authority key identifier: 81:E6:39:70:42:A7:A9:64:5F:C1:2F:75:9D:02:61:95:D7:CB:FD:58
Certificate issuer: /CN=81e6397042a7a9645fc12f759d026195d7cbfd58
Certificate serial: 0194BC3BDC5E2D6A9D6721B2B9E2507AEA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
Manifest number: 0B35
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: geY5cEKnqWRfwS91nQJhldfL_Vg.crl (hash: PMPDqDFO0lLlXu5niZtGcYE8+OBmBHz/Qn+H4eKXnUw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dc:5e:2d:6a:9d:67:21:b2:b9:e2:50:7a:ea:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e6397042a7a9645fc12f759d026195d7cbfd58
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=ca6f2a5943bac59685da39d1092a72115d475be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:28:63:c5:b7:5b:a2:fd:4f:ab:26:91:7e:8b:
8f:2b:0d:87:9c:b0:ee:fe:eb:51:2f:ff:0b:70:eb:
a9:86:16:aa:bc:13:f0:9f:be:02:a2:68:4d:1e:11:
d4:3e:d3:ac:d8:12:27:7f:14:8d:10:ea:3b:cd:f7:
22:29:f9:b7:67:c5:7c:da:4a:f9:53:2f:4d:e0:e4:
eb:b1:6e:8c:6e:c7:df:67:46:6a:b4:8a:91:56:59:
df:45:89:03:92:ab:0b:28:0e:3f:02:b6:a1:b7:a7:
f5:d3:c0:5b:10:21:88:3e:d7:f4:e7:19:91:c0:d7:
10:ca:8f:a0:96:9e:a9:7c:26:2d:34:f4:7e:89:3b:
d9:01:88:aa:95:1f:ce:15:b2:fc:e2:5c:7c:5b:b9:
35:40:e6:9b:81:ce:c7:f5:0d:22:19:f5:3b:a9:bb:
b1:ca:3f:f4:83:de:74:46:57:3b:be:a9:a6:b7:42:
98:58:0f:e2:a3:fd:db:5a:63:e3:72:9a:fc:43:89:
59:e1:42:59:de:d8:6d:0f:8e:92:68:fb:74:3e:0f:
9f:03:38:8f:42:38:6e:5b:54:aa:16:60:27:4d:58:
f9:96:00:f6:91:b1:30:ab:ac:ce:a7:ae:e7:42:69:
64:cb:28:f1:e2:c8:d0:0a:2d:30:5e:b2:f6:cc:4f:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6F:2A:59:43:BA:C5:96:85:DA:39:D1:09:2A:72:11:5D:47:5B:E1
X509v3 Authority Key Identifier:
keyid:81:E6:39:70:42:A7:A9:64:5F:C1:2F:75:9D:02:61:95:D7:CB:FD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d8:51:b3:ba:b2:ee:9a:db:c3:4d:3a:5e:83:f1:21:b2:ce:
38:1b:40:d4:de:71:86:63:67:93:17:31:bf:97:39:2e:45:1b:
2a:31:8b:b1:59:3c:b9:4d:69:1f:ab:ad:cb:09:ff:1e:21:d5:
65:08:81:d3:e8:6e:b1:68:1b:5d:87:ce:0f:ea:bd:a9:fe:4c:
dd:cf:49:05:fe:c0:d7:db:75:aa:70:2c:1d:6a:97:76:5c:71:
68:06:1f:d8:39:e3:04:96:28:43:fb:db:ef:8d:fd:48:d3:3f:
7f:65:40:f2:64:ed:02:e8:51:28:24:cb:62:6d:0f:cf:e3:3c:
b9:e1:a4:88:90:37:4f:35:a0:20:c8:17:0c:5c:9a:c6:ca:1a:
d5:ed:d9:ae:d3:26:92:26:01:a7:26:aa:bf:9d:19:1c:7a:5d:
79:85:8e:be:3a:ad:3c:16:91:b9:ae:81:5b:65:b1:82:c3:85:
c7:e7:62:d9:07:9f:18:97:8d:ad:65:8d:cb:d1:20:76:04:59:
6c:63:be:34:0c:b6:13:2a:72:12:22:cf:ea:1d:04:92:a5:cf:
36:a6:08:8c:dc:58:b4:6c:9f:a0:ff:3d:0b:98:06:40:4c:32:
b0:06:61:89:35:02:0f:88:32:36:52:82:1d:3a:92:5e:ae:4e:
7d:84:76:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:06 2025 by rpki-client