Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
File: BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft (raw, json)
Hash identifier: BS5xlyXYT+yM1/TEfGxHAKg7urlBMATyk0X5A3ZHlBY=
Subject key identifier: FC:ED:47:35:46:2C:80:62:A0:D7:0C:6C:A3:E6:49:F7:F9:D0:86:24
Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
Certificate issuer: /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Certificate serial: 0194BBCDBEF31D36AD3605BB712F107081F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl (hash: 7PiUB+jPQtE40qrk5vtFBM6Z1xOoUfaxgYF6irxlavE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:be:f3:1d:36:ad:36:05:bb:71:2f:10:70:81:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=fced4735462c8062a0d70c6ca3e649f7f9d08624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:a4:8c:e4:5d:0f:96:48:ff:65:3a:24:3f:
dd:f7:5c:24:e7:49:e4:b1:38:b5:a3:69:50:c2:78:
f5:3b:d6:60:72:81:b5:f8:66:ae:e0:be:93:4a:cd:
b5:eb:f7:52:c7:91:01:b4:b4:f3:59:dc:b9:57:17:
35:c1:6a:32:e9:84:43:1d:58:19:82:85:5a:8c:59:
7a:86:df:0a:f4:7a:d1:76:35:0f:49:0f:b2:01:59:
18:a0:8c:09:d7:be:d9:b6:1d:97:6e:6a:87:7e:85:
b6:65:fa:28:a8:b2:bc:b6:f5:91:12:e9:ca:5c:97:
b7:23:f5:f6:73:57:fd:1b:e6:4e:8d:a7:87:30:e9:
4f:b9:3f:07:ea:d3:d4:4b:0c:85:e5:43:2b:8a:52:
3c:84:c9:6a:41:4e:cb:fb:b7:2a:6f:a6:cf:3d:1b:
b3:de:45:85:52:e9:63:9f:3a:3b:e8:8c:66:e8:27:
8f:b4:76:1e:8a:eb:be:60:84:6d:25:2e:98:0c:08:
d9:27:d6:fc:4d:8f:d7:38:ad:80:ab:ae:0a:6c:28:
9e:92:e0:a8:7f:0c:b0:19:c4:b2:84:9c:79:2a:88:
66:1f:84:ee:fd:fd:19:5c:e5:3d:51:b2:64:ad:d9:
26:d5:5d:28:84:ce:e7:de:e7:29:ad:54:c8:07:a5:
4c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:ED:47:35:46:2C:80:62:A0:D7:0C:6C:A3:E6:49:F7:F9:D0:86:24
X509v3 Authority Key Identifier:
keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:07:f3:73:c1:c6:b6:c2:40:ac:ae:87:43:f1:c7:11:96:0a:
74:99:5b:5c:98:7e:64:d5:14:9e:bc:32:82:64:77:cf:c8:ab:
00:f1:9e:52:e2:2d:e4:39:8c:42:d6:9c:0b:9a:94:94:d6:7d:
ad:e8:ef:b9:63:92:98:a2:76:6a:26:e8:16:24:0a:a0:e2:ed:
96:2e:6e:e8:eb:0a:ad:b3:20:fb:c1:02:18:5d:05:58:1c:59:
a2:dd:51:3a:bf:12:71:5a:27:e5:3d:2d:18:b8:df:8d:e2:3b:
39:8b:b1:7d:f1:19:60:d4:c2:f2:f3:eb:98:62:5c:d2:0c:c5:
21:6f:e6:9a:2c:e0:04:67:58:63:dc:ca:57:27:96:e5:de:96:
b8:df:0b:f7:8a:52:4a:55:07:ac:5a:e0:a8:ac:c3:d8:a6:2f:
84:30:73:71:d7:c9:fa:17:89:ae:6c:09:62:05:be:80:12:8f:
05:88:64:2b:ea:f7:95:cf:5e:61:dd:b5:90:ad:20:78:d5:b1:
fa:b3:76:1f:fe:94:88:01:66:f1:0a:d8:f6:b8:a8:a5:5d:bf:
a2:9d:93:e1:0d:a1:12:ee:24:71:da:5f:cd:c2:6c:3e:03:e7:
09:cd:fc:7f:8a:31:e0:24:e0:dd:20:de:e6:51:8b:1e:db:b7:
b0:05:31:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:19 2025 by rpki-client