Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
File: bDg245a8UGRDYGuf1zN6kg5x3tE.mft (raw, json)
Hash identifier: 0qOwdWr+NkswGeh5kdtrRcXG/nwh1fB0OtjJfQ2iq0I=
Subject key identifier: DB:B1:B4:C3:0B:32:76:27:20:4B:61:FA:EA:34:36:F8:58:FC:8E:64
Authority key identifier: 6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
Certificate issuer: /CN=6c3836e396bc506443606b9fd7337a920e71ded1
Certificate serial: 0194BC72D6217045F2AF6BD0266A5045B33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
Manifest number: 12AC
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: bDg245a8UGRDYGuf1zN6kg5x3tE.crl (hash: X1XIcH+Cr9VR5VLpL1MKWo4Uyc6VY6mjhYdNvGDAr78=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d6:21:70:45:f2:af:6b:d0:26:6a:50:45:b3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3836e396bc506443606b9fd7337a920e71ded1
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=dbb1b4c30b327627204b61faea3436f858fc8e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6a:e9:74:22:86:8f:7a:a7:d7:2a:ca:ae:94:
bc:1d:44:1c:fb:7e:c2:57:24:65:47:bd:e7:46:e8:
59:b7:02:34:27:30:1c:04:43:f4:51:83:3e:28:7c:
48:4e:9b:60:4e:9f:6b:df:20:c0:f1:0d:55:8d:8e:
d9:0c:b4:c5:a4:8d:bb:b7:15:fa:6d:37:83:3b:10:
2a:7f:c8:ef:06:b9:7f:d1:8d:bd:d7:1f:50:29:ca:
d4:83:b7:fd:12:a7:77:2e:37:cf:60:d0:d8:be:43:
d6:fe:5b:ca:8d:10:9c:f2:5f:85:04:d6:2e:f1:03:
d1:8a:43:df:a2:68:f6:b4:24:62:74:57:55:aa:dd:
98:04:67:9a:4f:9b:5b:55:e6:bd:7b:5a:30:0a:00:
ad:59:d0:f8:de:25:84:29:63:a2:39:da:6a:53:e1:
99:2d:81:e6:89:47:d3:bb:42:d7:3d:9c:0e:3a:ce:
19:1e:42:ee:71:38:5b:32:6a:b1:c2:71:2d:6c:a7:
6d:53:f2:12:07:97:a1:71:ad:52:4f:74:34:ba:b2:
bf:5b:de:da:f9:e9:df:17:e0:db:9c:ef:16:98:6b:
c3:c8:16:b6:d5:93:c9:6c:0f:3b:c9:5d:62:f4:ca:
3d:9e:07:15:4b:56:48:03:5c:b4:14:a6:e1:0f:6b:
31:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B1:B4:C3:0B:32:76:27:20:4B:61:FA:EA:34:36:F8:58:FC:8E:64
X509v3 Authority Key Identifier:
keyid:6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c8:c5:d1:25:24:ac:d5:4f:18:b1:cc:5c:bd:1f:25:55:d3:
8f:f1:9b:96:f8:0b:50:18:9f:b7:4c:7e:f4:e6:50:e1:cf:a1:
6b:5f:11:b2:8d:d6:ad:da:95:fc:46:63:86:b6:d6:d6:61:5c:
c5:09:13:da:7e:3f:e6:88:2e:ab:4d:98:67:ae:de:44:79:5d:
15:1d:9e:cc:32:77:2b:9e:58:f8:f0:53:ac:95:7f:2b:74:14:
79:78:c4:b2:83:a3:25:9d:f0:bb:19:82:0f:07:e6:31:e8:29:
ed:9d:e3:d2:2d:95:c8:af:a5:1e:8b:9b:79:3b:0d:fe:94:d3:
f5:cc:45:12:c0:df:a9:e3:d9:32:df:3d:0a:7a:da:31:1f:15:
51:bf:54:25:22:7d:d3:98:5b:20:e8:2a:12:08:49:53:23:2b:
7a:df:0f:59:7f:7c:90:a7:be:ab:b6:36:c5:c9:81:f8:9d:6e:
d7:0c:b5:21:76:69:29:33:0c:0d:33:79:85:d1:65:93:f9:07:
61:f1:bc:1c:ae:f0:bf:c5:69:22:53:04:c8:de:85:66:c9:56:
91:92:31:46:fb:96:98:28:4a:5a:7a:94:f7:73:75:e2:03:50:
34:ea:7c:df:12:c2:b0:bf:bf:7e:8e:8b:62:d4:70:ae:91:ce:
9e:02:1f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:13 2025 by rpki-client