Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
File: u_D5EC2y6-GvHQdRaEQ4anlj71w.mft (raw, json)
Hash identifier: WE4ctekYEpmCQRreLSA13F5vecV0QNhMkjQeOzM5juA=
Subject key identifier: 9A:CE:EB:A0:5E:C6:EC:0A:EF:89:5E:3C:7D:24:43:AF:62:47:D1:8F
Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
Certificate issuer: /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Certificate serial: 0194BD17DFA5630BC2A56DE36BE85AC271C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
Manifest number: 032B
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: u_D5EC2y6-GvHQdRaEQ4anlj71w.crl (hash: 8hz6NgW/jP3/XN+JN9BtobpD/AqNHzEw4YKgG+em+8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:df:a5:63:0b:c2:a5:6d:e3:6b:e8:5a:c2:71:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=9aceeba05ec6ec0aef895e3c7d2443af6247d18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:c9:bb:4f:37:8f:ff:7a:2f:3b:87:b2:0b:
57:42:a8:85:fe:74:95:16:c5:a7:52:bd:7c:c8:25:
a4:16:32:5c:19:9e:01:b6:a5:f1:72:31:82:7f:53:
8a:74:48:d0:30:73:2c:d3:ff:1b:6f:51:14:d9:bd:
38:ce:03:2e:8c:22:3c:77:d5:79:0f:6b:00:e1:37:
ef:51:0b:ee:ad:b9:c0:c2:26:0b:e9:70:9e:c9:a1:
ef:44:c7:a0:9e:6a:9a:9e:b2:6f:56:7c:a3:e8:35:
7a:42:1e:45:5b:b4:5c:2b:95:91:c8:1c:64:83:33:
db:07:2a:1c:dc:6a:d0:8b:c1:27:c6:cc:46:de:13:
2d:05:3b:9b:ad:37:37:8c:a0:af:62:bf:18:3a:dc:
49:15:28:e9:b1:e3:f9:95:72:fe:0f:2f:5a:f3:2b:
27:8c:0f:8c:49:81:bc:c0:74:52:f2:c4:cf:83:6c:
77:99:0a:32:15:8d:29:fd:be:e4:3d:00:2b:fd:69:
3b:6a:57:cc:aa:da:f0:0b:a3:95:08:3b:eb:a5:75:
f6:89:84:96:7b:03:aa:c5:a0:23:44:1a:e5:c5:18:
ae:2b:f0:17:91:a6:2c:fb:1a:e3:9d:c5:b2:57:69:
4f:a4:ee:33:3b:71:dc:07:f6:a6:de:b8:bc:ac:10:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CE:EB:A0:5E:C6:EC:0A:EF:89:5E:3C:7D:24:43:AF:62:47:D1:8F
X509v3 Authority Key Identifier:
keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5b:58:1f:0a:d6:56:d0:d8:a7:d6:ef:d7:86:d2:0f:53:20:
42:7b:a0:68:5e:be:39:b5:be:6f:91:57:a7:1e:76:e4:58:b1:
e3:1c:1a:d0:b1:2a:93:bb:dd:18:4d:1f:e9:4b:8a:7d:9a:3b:
ce:bd:3f:34:63:c9:c4:68:8a:07:75:3f:f2:ae:c1:74:f0:c2:
8d:53:ef:42:c2:51:dd:29:05:28:85:22:a4:5b:ff:b2:64:85:
bf:9b:78:d9:f1:10:99:57:b2:8b:96:7c:b6:59:32:c9:b4:c1:
78:b4:ec:13:ad:3f:1e:26:48:bb:f7:f2:51:d3:a4:b5:7a:0d:
62:77:03:f1:aa:c9:b3:23:65:35:37:76:9d:05:da:14:1f:1a:
62:5a:cb:ec:7f:f5:e5:7e:f6:d8:2f:63:24:34:aa:f5:7a:be:
73:92:e9:ad:95:87:83:13:b5:98:cd:72:1e:6c:d7:6f:23:93:
5c:c3:89:b2:44:d3:07:43:82:66:c0:2d:e3:09:a0:1a:69:18:
fc:4b:5c:a5:59:dd:02:64:84:44:95:cc:e9:52:fe:9b:8c:2e:
9e:78:29:19:36:17:e2:65:85:45:33:a8:64:6e:05:94:d5:1c:
a7:46:6d:2b:13:ea:af:c1:73:7b:91:80:8b:e5:93:08:f4:46:
d8:03:80:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:31 2025 by rpki-client