Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
File: 352lG6cnhKBORBIPne1HhWd5TBs.mft (raw, json)
Hash identifier: uIhAv2/pROiDI+B/703Uvw9pfUtes/2PozrtZo9p6Q8=
Subject key identifier: 55:14:80:C9:60:5A:71:19:2C:A4:0A:C4:A1:2F:6D:30:3B:AC:A1:4E
Authority key identifier: DF:9D:A5:1B:A7:27:84:A0:4E:44:12:0F:9D:ED:47:85:67:79:4C:1B
Certificate issuer: /CN=df9da51ba72784a04e44120f9ded478567794c1b
Certificate serial: 0194BD17596F65B3CD35C0FE045AB39B04D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
Manifest number: 0813
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: 352lG6cnhKBORBIPne1HhWd5TBs.crl (hash: sK9WPTQfIbgtKpKsW9vz7QHxAJ+TpD7ZJ2zWQCYufLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:59:6f:65:b3:cd:35:c0:fe:04:5a:b3:9b:04:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9da51ba72784a04e44120f9ded478567794c1b
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=551480c9605a71192ca40ac4a12f6d303baca14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:85:5f:42:6c:05:dc:27:6b:b1:ed:01:1d:
fb:f7:24:b9:d1:e3:e3:4f:d7:4f:9f:7b:95:d1:f7:
72:dc:79:14:ec:39:29:c6:de:94:8e:6a:d4:82:9e:
b5:98:40:03:83:d0:13:73:9c:d7:59:ae:09:da:1f:
b2:b2:47:8e:52:40:05:fe:d5:12:b2:33:c5:f7:74:
8a:50:a7:69:a2:84:2e:b4:2b:d9:b7:88:a6:a0:62:
c8:0b:5f:fe:73:93:f0:f8:92:76:3a:d9:e6:3b:7f:
03:c7:03:a3:5b:5c:97:60:43:3d:18:df:17:6e:40:
c9:64:73:66:54:62:3d:3b:57:da:2c:a2:1c:ab:b5:
40:1b:56:1e:6a:79:06:3c:3d:46:de:de:15:23:80:
89:21:21:57:01:ed:2a:14:b3:bf:b9:2f:55:11:fc:
24:14:be:e1:9d:4c:72:12:14:99:46:13:5f:fe:35:
5b:39:36:54:94:8e:62:ac:0c:a1:39:bd:43:c2:d3:
38:60:0c:56:df:d3:1a:71:ab:0a:88:27:c4:d4:74:
7c:0c:f8:c1:2a:86:4c:ce:89:15:65:13:c1:ef:cb:
f6:97:9f:69:90:12:80:2b:28:2a:f1:69:b2:e0:3c:
a7:65:40:63:2f:d1:c2:37:98:b1:a8:3b:95:9a:03:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:14:80:C9:60:5A:71:19:2C:A4:0A:C4:A1:2F:6D:30:3B:AC:A1:4E
X509v3 Authority Key Identifier:
keyid:DF:9D:A5:1B:A7:27:84:A0:4E:44:12:0F:9D:ED:47:85:67:79:4C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:83:3a:66:c0:79:a1:7b:d9:4b:c6:9c:ae:da:83:ee:cf:b7:
4e:1f:f0:dc:7e:97:36:ed:35:a4:ab:20:de:b4:96:ae:ba:3b:
01:4e:03:d2:a6:de:8e:09:e9:d6:d9:71:7d:c8:4f:60:4e:4a:
ee:60:33:05:12:fb:58:30:dd:dd:63:47:7d:b3:87:91:34:45:
7d:b7:53:1d:fa:f5:65:da:30:86:cd:16:fc:70:ff:6a:83:80:
12:bf:50:cf:80:32:2e:f3:c3:5a:f3:52:a6:43:7b:bc:f2:bf:
2c:0b:1b:63:3e:a8:26:79:3d:3b:4b:bb:90:e2:9e:dc:bf:d6:
aa:55:ef:ab:a2:ca:83:69:c5:70:64:e7:6b:19:71:e3:15:7a:
9e:3e:42:5a:88:43:d1:02:eb:83:72:38:6d:f2:26:1a:7a:7c:
c2:71:be:52:34:45:8d:5e:0a:73:94:df:1c:7c:b9:e8:63:90:
28:b1:e8:83:98:86:ad:4f:8d:14:49:21:bb:c8:40:2d:30:c3:
f2:61:7a:95:7c:35:bc:cf:63:9d:e0:1d:52:da:70:25:b5:ba:
04:ff:ba:d0:3a:4c:47:94:d8:a6:eb:a1:9d:d1:4c:3f:11:fe:
be:48:6f:95:71:f2:72:f7:30:57:b9:dd:4b:b3:ca:72:46:cf:
8c:2c:8b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:29 2025 by rpki-client