Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft
File: bfcVxYs6uhTfvf_-FTvea3p_L9g.mft (raw, json)
Hash identifier: GQujVSBcE32phNOHCjyCuGQJl3sHPg7yPECf2CwAjP8=
Subject key identifier: 17:20:AE:C6:3D:C5:B7:98:0D:DD:65:38:31:D8:4D:97:10:FB:70:6F
Authority key identifier: 6D:F7:15:C5:8B:3A:BA:14:DF:BD:FF:FE:15:3B:DE:6B:7A:7F:2F:D8
Certificate issuer: /CN=6df715c58b3aba14dfbdfffe153bde6b7a7f2fd8
Certificate serial: 0194BD179D0EC4340FA8EEA5FDB9AE02457B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfcVxYs6uhTfvf_-FTvea3p_L9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft
Manifest number: 09D9
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: bfcVxYs6uhTfvf_-FTvea3p_L9g.crl (hash: I419di/rP5ENGYMYTfh7QZWesW8S1YWUeVP7uSM8huA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9d:0e:c4:34:0f:a8:ee:a5:fd:b9:ae:02:45:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df715c58b3aba14dfbdfffe153bde6b7a7f2fd8
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=1720aec63dc5b7980ddd653831d84d9710fb706f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:45:f3:a7:fe:da:99:01:8d:20:ab:f5:3a:
d3:f3:0b:6a:dd:b8:a1:ee:87:04:2f:89:2e:36:f7:
f9:02:3c:0b:70:e5:b0:36:11:3c:b7:9b:e9:51:1a:
ad:29:ea:0e:c7:9b:d1:8e:87:b3:38:a4:9b:4e:97:
ab:26:24:c5:8e:28:aa:d4:74:e7:ae:7b:1f:f7:98:
eb:45:2a:ac:bb:ca:36:25:01:a7:91:05:c9:7f:7a:
26:7e:3e:4f:c9:51:61:1e:99:6e:1d:14:f1:fa:71:
10:5a:29:e6:d7:7d:5d:b4:ab:bb:34:60:1d:3b:c5:
85:e2:41:66:ca:eb:57:1c:ff:a0:db:7b:44:86:93:
b6:64:d1:86:79:d6:20:d7:3a:43:35:3a:7c:8d:8c:
c6:aa:9b:49:25:12:40:d5:40:a7:a0:6c:46:00:0a:
73:e0:5d:66:38:8e:98:4e:63:24:b9:02:cd:81:49:
d8:0c:60:5c:41:0b:e9:8c:94:4d:a9:1d:17:cb:0f:
ca:db:c5:2e:04:3f:c9:9f:6f:e2:d1:7b:a8:2b:05:
9f:58:f3:f2:85:7d:4e:c3:17:c0:4f:58:87:ae:15:
ed:3e:8b:93:6c:9e:d4:ae:92:cf:e9:9d:2c:bc:32:
53:10:7f:61:c3:78:45:cc:e6:62:de:44:1e:8a:e3:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:20:AE:C6:3D:C5:B7:98:0D:DD:65:38:31:D8:4D:97:10:FB:70:6F
X509v3 Authority Key Identifier:
keyid:6D:F7:15:C5:8B:3A:BA:14:DF:BD:FF:FE:15:3B:DE:6B:7A:7F:2F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfcVxYs6uhTfvf_-FTvea3p_L9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6f:10:6f:dd:a0:c1:e1:8c:37:c1:39:23:4c:2b:7b:f7:0e:
ca:b3:89:1f:53:10:d8:a5:fb:5e:69:de:99:2f:1d:d4:92:8c:
ab:0a:7e:4f:12:2a:cf:43:ef:60:0d:06:1c:2e:b2:1e:5c:8d:
de:82:2a:1b:06:67:63:54:30:a8:7e:7a:35:54:d8:b9:b8:00:
fd:31:07:fe:ad:a4:89:3a:8c:27:f7:27:42:be:91:aa:f6:8a:
c5:1a:16:7c:0d:54:15:74:e6:7b:ce:35:a5:36:16:1c:10:df:
b2:07:2f:cf:a9:39:63:b7:ef:cc:13:4a:fe:7e:44:16:d8:61:
88:4d:96:8d:dd:65:f5:79:04:d4:cf:0f:6f:3b:c1:50:e5:62:
39:86:c4:0d:16:b2:97:9c:4e:62:e9:d1:f4:3e:46:c9:0c:9b:
7c:fd:3c:43:7a:bc:9c:2e:06:f8:4e:e7:55:2b:bc:fc:26:5f:
cd:c5:36:da:5b:1e:ad:0b:29:9b:91:fa:af:ea:ef:b2:a0:21:
57:e5:44:6c:93:1d:c1:f8:3c:c6:8b:13:64:33:89:32:c3:33:
c4:2a:bb:f5:13:f9:58:1c:48:8b:bc:67:03:e7:22:61:d4:51:
fc:69:12:91:f6:6a:88:8a:5a:1a:8d:b4:57:e7:db:ca:25:c6:
68:60:db:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:30 2025 by rpki-client