Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
File: RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft (raw, json)
Hash identifier: q8zOwuiO9aMX202cExdfN2FeidWqiYWMJhjungJIl7k=
Subject key identifier: 9A:3F:E3:7B:B9:BC:28:24:E5:DA:0A:A4:E9:76:E8:4C:66:86:0A:9A
Authority key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
Certificate issuer: /CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Certificate serial: 0194BD4EC1BD0E871F51A0F69B0B59CCC407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
Manifest number: 019A
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl (hash: HV1txPBEcKRRonXBpFhf/Eb5HDYI7HmQOazxSeSRgQY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c1:bd:0e:87:1f:51:a0:f6:9b:0b:59:cc:c4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=9a3fe37bb9bc2824e5da0aa4e976e84c66860a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:c4:fb:d7:2f:68:c4:8e:03:fc:43:21:93:
f4:06:c3:ad:28:99:f1:6d:d0:fa:0e:d6:fb:52:a7:
6c:81:a8:56:94:2b:b7:cb:7e:63:f0:2b:5c:83:b6:
51:75:5c:e2:eb:f1:d9:ea:72:d6:68:cb:0f:60:1e:
01:50:6d:d7:82:02:2c:f8:82:bc:94:a9:0c:f3:8e:
1b:6c:19:7b:ca:f4:34:2e:e0:da:48:29:40:0f:67:
26:89:d9:c8:ae:16:04:65:45:dd:25:5e:e4:a2:a4:
2c:e8:69:53:5e:69:81:d5:c7:7e:4e:a1:a7:8b:42:
2e:2e:90:5d:ae:76:3b:a9:bf:fe:9d:b8:b5:c4:94:
02:33:17:31:ff:bf:d4:ee:45:94:4c:20:3a:62:27:
ed:8d:db:42:d2:f1:5f:62:68:69:0e:10:3e:3d:44:
25:ff:db:89:ad:e0:ee:1c:19:8a:ad:70:a1:1c:77:
86:0e:93:96:61:cd:c1:fa:f7:f7:7e:10:4b:ad:6e:
c7:58:67:ea:d0:5d:f6:72:48:6b:7a:42:e5:a9:56:
da:71:58:bf:3c:05:3d:f1:52:57:01:96:37:1b:36:
10:8b:f7:37:fe:8d:58:c2:49:8e:02:24:03:4b:91:
b1:32:0d:ff:b0:a9:9d:e9:eb:e0:d1:7d:45:b4:ce:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3F:E3:7B:B9:BC:28:24:E5:DA:0A:A4:E9:76:E8:4C:66:86:0A:9A
X509v3 Authority Key Identifier:
keyid:44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:16:13:d5:1f:de:f8:84:73:10:df:f3:18:26:1f:f8:d1:66:
b9:86:a9:a6:dc:f4:95:3b:8a:4e:82:da:45:ea:f3:f1:aa:85:
a4:f4:7b:8f:fd:25:a3:43:60:f2:f0:70:98:a1:d9:92:d5:55:
fa:0c:53:73:b1:51:e1:39:81:df:ae:a5:65:6f:db:25:61:7b:
08:68:87:69:f2:a6:cd:79:8a:cf:ef:e9:2e:df:f3:ba:af:a1:
8d:19:64:0f:73:b7:f8:77:f2:cc:1b:1d:66:5a:00:58:58:33:
c3:9a:db:a2:06:2b:ab:7d:c8:6c:50:42:28:1c:e1:5b:e0:0d:
10:cd:13:2d:3c:24:5a:03:13:3e:64:b5:e4:dc:3e:90:f6:2e:
30:d8:4c:39:02:0c:76:74:08:1b:96:94:e0:fb:0d:c2:e0:c7:
ae:d3:90:65:67:b3:f3:00:7e:9c:ab:8b:f4:14:3d:95:d1:91:
13:85:31:ae:80:02:70:21:eb:8c:09:91:03:bd:a7:10:84:11:
93:54:7c:ea:cf:a3:8b:cd:a5:a2:cc:5e:f3:d0:00:e9:6f:60:
79:7b:5a:c0:39:41:52:e5:c6:c3:b9:06:e9:3a:a0:8e:f4:70:
c5:5e:2b:ba:96:ce:43:df:f6:05:d6:9d:28:92:b1:40:2b:bc:
95:40:67:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:55 2025 by rpki-client