Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
File: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft (raw, json)
Hash identifier: Ehmd6ElLlDUp/sqW63pcEtOJDwKkkr6oK9kpJoadAOY=
Subject key identifier: DF:17:22:B1:F4:4B:4C:4B:96:B2:58:74:ED:64:0C:08:F7:A9:75:63
Authority key identifier: 05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
Certificate issuer: /CN=0587c8490b372045669f45f183193eed46f991f5
Certificate serial: 0194BBCE262C518B2DF6B88C2B6E8A520E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
Manifest number: 0789
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl (hash: tqgdKwG/otzIPlkZGeYZqda0VehG0VQWy5kgmA4LpI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:26:2c:51:8b:2d:f6:b8:8c:2b:6e:8a:52:0e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0587c8490b372045669f45f183193eed46f991f5
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=df1722b1f44b4c4b96b25874ed640c08f7a97563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:fd:53:ec:32:80:b6:eb:e9:d2:d0:a6:ca:
2b:8c:44:9b:e9:95:57:f4:56:be:94:db:ba:a9:4d:
2b:6b:21:85:dc:a7:92:be:50:a0:91:c6:f4:c0:1e:
2a:e8:e6:98:94:29:11:e8:b3:c3:f3:be:33:c0:90:
2d:50:7f:e8:af:80:db:e5:5f:3e:7a:d6:50:a6:d3:
a9:6c:f6:d4:6a:c0:db:99:84:0d:c2:09:27:a9:46:
b7:9f:4c:7b:6b:89:57:23:a9:19:34:fb:ea:f3:55:
cf:ec:40:f8:91:72:ab:f4:34:ff:0d:9d:cb:7f:fe:
14:7c:97:7f:d4:c5:a5:94:84:e2:45:2d:1e:ac:9f:
f8:74:38:05:c5:d8:9a:3a:51:93:b7:d2:64:13:7c:
da:5e:99:f3:53:60:8d:b6:a3:c2:4b:67:9c:80:35:
d1:99:63:56:4b:4e:22:09:d8:a5:05:9e:0e:8c:20:
ab:61:5f:d5:3a:9e:15:8b:f0:d8:9c:7e:a8:ab:56:
7e:3b:69:78:ce:a3:5b:ad:72:bd:7c:20:c1:63:05:
8a:b6:f9:d7:0c:26:8c:41:7d:64:71:ac:95:3d:83:
a0:8c:27:4e:e0:d2:9b:12:cf:33:9a:a4:78:cd:36:
f7:cd:81:82:7e:c5:3d:c5:8a:97:67:18:05:a4:3f:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:17:22:B1:F4:4B:4C:4B:96:B2:58:74:ED:64:0C:08:F7:A9:75:63
X509v3 Authority Key Identifier:
keyid:05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:63:f2:ad:89:71:4f:58:26:9d:b8:8b:1b:4e:14:76:c1:17:
08:bc:60:59:8b:50:20:1d:fa:dd:8c:b9:a7:b4:a8:69:7c:3e:
ca:22:47:e2:67:3b:76:48:55:56:5d:ee:1b:7d:da:b8:69:5c:
0d:6e:fa:a6:d4:41:87:f5:8a:d0:b3:ed:87:5a:f8:f0:9d:97:
7c:2c:3e:1b:66:65:18:e5:1b:26:bb:ef:60:28:9b:bc:f1:54:
d1:b5:b0:ce:27:67:31:a7:c9:96:82:07:cb:ff:43:82:71:ff:
a7:ac:42:8a:5c:e0:d9:35:90:00:48:ad:11:eb:7d:34:aa:e7:
33:8d:66:bc:f3:5c:8c:fa:9f:32:9c:e6:1f:bd:03:d9:52:89:
b3:7f:cc:0b:97:10:1d:62:3a:6e:77:fb:38:ba:81:35:0b:fa:
f3:c7:09:eb:32:4a:c4:49:1e:13:ba:b1:45:e0:f5:89:d7:4c:
c2:a6:ff:89:62:79:f0:fe:d6:ca:6b:da:d7:39:a8:9e:02:91:
3d:6b:a0:40:6b:cc:70:70:21:4d:66:6f:d3:9a:ea:80:ee:ff:
e4:1f:09:25:ef:37:3c:e8:6c:b5:ee:fe:6e:74:32:ce:31:73:
7d:dd:34:f9:b6:ae:45:de:7d:ec:ec:ce:d9:f2:3f:f9:63:3e:
2c:bf:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:37:44 2025 by rpki-client