Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft
File: 04BE23ZiygAUgai9swt6vRi86ao.mft (raw, json)
Hash identifier: ht9G6FkcCNORv8MI5BFWjpn9LcOBLuj2HCDBlhPwB6M=
Subject key identifier: BF:D3:37:D1:D7:60:EF:50:4D:74:48:E2:75:5A:FC:F9:9E:01:D3:76
Authority key identifier: D3:80:44:DB:76:62:CA:00:14:81:A8:BD:B3:0B:7A:BD:18:BC:E9:AA
Certificate issuer: /CN=d38044db7662ca001481a8bdb30b7abd18bce9aa
Certificate serial: 0194BCA96B38A504EF9093027F4798915603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04BE23ZiygAUgai9swt6vRi86ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft
Manifest number: 0EED
Signing time: Fri 31 Jan 2025 14:00:06 +0000
Manifest this update: Fri 31 Jan 2025 14:00:06 +0000
Manifest next update: Sat 01 Feb 2025 14:00:06 +0000
Files and hashes: 1: 04BE23ZiygAUgai9swt6vRi86ao.crl (hash: pXskq1odmFl2ASAzuwltkJuJsUFEK2JfuYeznSfFqYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6b:38:a5:04:ef:90:93:02:7f:47:98:91:56:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38044db7662ca001481a8bdb30b7abd18bce9aa
Validity
Not Before: Jan 31 14:00:06 2025 GMT
Not After : Feb 1 14:00:06 2025 GMT
Subject: CN=bfd337d1d760ef504d7448e2755afcf99e01d376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:39:da:52:0b:d8:ec:cd:6e:d6:af:8e:2d:
33:87:6a:98:bf:d4:d1:1d:74:f8:1f:c8:0d:e1:55:
7d:18:63:36:37:8e:44:a5:e7:ce:0c:da:14:12:b7:
41:7d:14:79:63:4c:8c:28:1a:66:6a:1e:08:6c:13:
a3:90:c0:a1:06:bb:88:d6:ed:fd:ed:42:fd:3d:4f:
3c:1c:ee:b7:3b:3f:c4:e4:d0:47:69:f8:06:c1:f7:
3d:7a:a1:b0:64:b4:64:dd:bf:03:ac:1b:56:71:40:
d7:d3:37:5c:ac:ba:38:1e:27:27:e3:7a:2c:dc:b2:
c5:94:26:a7:f9:0a:ba:9c:0f:9f:ee:ba:66:21:92:
6d:e4:b1:19:32:b9:18:e8:44:28:e0:0d:11:60:95:
e3:c4:d3:e1:bf:e4:10:a1:e6:6b:1c:f9:a6:fb:bc:
f1:25:8e:fb:68:21:e6:43:d1:93:5e:bd:d5:5b:43:
c8:a9:47:5f:e2:46:3e:ba:b6:46:78:17:7c:d1:e8:
33:59:c1:2c:b8:12:c4:b5:1e:5f:a3:88:07:95:de:
5b:63:62:f2:21:65:cf:ec:6b:1c:0a:06:31:25:6b:
f3:14:61:6b:28:a2:e8:85:57:ae:45:04:e3:a8:20:
5a:c8:9e:8a:9b:28:a1:73:30:c6:b6:3c:1e:e9:a2:
eb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D3:37:D1:D7:60:EF:50:4D:74:48:E2:75:5A:FC:F9:9E:01:D3:76
X509v3 Authority Key Identifier:
keyid:D3:80:44:DB:76:62:CA:00:14:81:A8:BD:B3:0B:7A:BD:18:BC:E9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04BE23ZiygAUgai9swt6vRi86ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/14e977-346f-44ad-b0df-0a10b881c3ac/1/04BE23ZiygAUgai9swt6vRi86ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ad:17:44:3b:c8:1c:da:16:b7:0c:49:b5:cb:28:5c:a4:b2:
f5:64:c6:84:cf:3f:16:bc:4b:53:40:93:53:fe:92:59:93:a4:
2d:48:b0:a9:98:ba:a1:df:9c:f4:e9:d6:aa:0f:53:e8:52:e6:
91:0e:ce:4f:27:08:3d:53:90:6a:d3:ab:61:51:0c:f6:14:b0:
79:74:e6:a9:e4:df:f9:7c:cb:a5:67:1e:4d:d8:d4:3b:20:67:
7e:7c:2d:b7:01:98:12:6d:93:ed:7f:40:07:6d:09:be:e5:2e:
f0:ea:b5:27:6e:c4:b9:5a:23:f4:42:54:38:f3:f0:bc:a3:97:
93:7d:d7:02:c2:87:83:49:a3:f7:46:16:75:1b:d4:dd:70:2b:
35:a2:27:5e:24:9c:01:9a:96:a9:fe:3d:dc:99:3f:36:ea:8c:
df:aa:9b:78:b8:e2:5a:3c:7f:b5:14:73:02:56:1f:5c:a1:ea:
a9:26:75:89:69:42:36:3a:9c:35:f6:73:6f:c1:14:87:9f:ab:
89:c1:09:ee:9d:96:e4:55:d2:b0:53:fd:15:2d:ef:ec:eb:66:
d8:f1:62:a1:eb:29:b0:79:09:37:fa:3a:e9:87:51:d8:48:69:
00:fa:a3:6a:5d:2b:48:70:c6:87:17:03:a7:cd:06:65:22:4d:
3e:f6:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:08:29 2025 by rpki-client