Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
File: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json)
Hash identifier: AXLgOnlhkK4ps+rWtvfvJr0xjMF94ZTG81wrE17GRUs=
Subject key identifier: BE:73:8A:0D:53:C4:6D:AC:E8:6B:84:ED:87:51:F2:47:AD:A1:96:51
Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
Certificate issuer: /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Certificate serial: 0194BD175B55F5D6BDC87D65A8D6DF75298B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
Manifest number: 1076
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: ZhlkM5wnH7wocVP5QUvt46KI1e3LmHUEYmGgBmXs6mY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5b:55:f5:d6:bd:c8:7d:65:a8:d6:df:75:29:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=be738a0d53c46dace86b84ed8751f247ada19651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:04:7c:b4:c9:54:6b:de:5a:30:a6:de:b3:
ca:f3:39:67:09:ca:aa:d6:62:ab:da:78:06:d7:0e:
d3:9b:57:1d:fb:a2:5a:6f:36:d9:59:be:55:88:cb:
f3:a6:e8:35:f7:4f:0e:31:49:0b:c4:c4:a7:1d:d8:
02:5a:e6:a6:a3:9f:29:83:f1:bb:c0:af:58:0b:b8:
06:27:b7:8b:3b:3f:07:13:5c:5a:45:34:83:30:ce:
82:87:e0:8d:67:1c:58:ed:00:41:32:68:ed:72:0c:
24:22:ff:15:51:cb:9d:26:24:08:26:ee:be:24:f2:
09:f7:f0:f7:f2:e2:46:a4:e4:ef:df:91:b6:25:6b:
6f:17:fb:63:5c:c4:bf:a4:16:bf:43:1b:bd:5d:d5:
1e:90:5b:c7:bf:08:b9:07:eb:db:8d:e5:80:ea:63:
9e:f7:d8:7c:dd:40:8d:49:7e:94:b5:3a:fa:95:ae:
23:31:0f:81:b6:9b:59:50:c4:18:6a:59:e9:f3:da:
11:c3:76:db:c7:39:54:b3:ee:36:bc:7e:77:22:1e:
f1:d1:f3:97:b0:b6:6e:11:3d:d9:79:4d:44:a4:67:
da:ac:4e:31:9c:1d:b8:b4:ec:de:65:4d:93:5a:05:
07:36:03:66:4d:05:99:49:63:5e:56:59:c0:c2:f2:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:73:8A:0D:53:C4:6D:AC:E8:6B:84:ED:87:51:F2:47:AD:A1:96:51
X509v3 Authority Key Identifier:
keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:52:da:77:73:04:dd:08:35:61:0a:96:6b:ef:49:fa:2e:e0:
c2:b8:77:6b:13:3c:48:8d:7f:61:28:52:6a:d4:db:b8:85:7d:
cd:2a:22:f8:47:b4:2e:1b:b0:97:b6:bf:e0:b4:b9:85:0e:24:
49:08:db:b7:50:ba:1b:f1:e9:1a:07:f3:bb:08:09:e3:e2:0d:
62:cf:ec:bb:49:ab:b0:e0:83:50:3a:6d:b8:80:e6:45:f9:01:
47:95:65:3d:73:40:ee:88:85:a2:8f:56:40:c1:bc:ce:06:a0:
d7:0b:ab:cf:d3:fd:42:24:cd:4e:49:00:df:f1:80:fc:bf:85:
ee:c9:e1:b1:6b:17:bc:ef:66:fb:2a:6a:db:23:75:11:d2:df:
ca:95:15:8c:df:f4:c5:45:f1:d5:23:26:93:08:d5:3d:0d:a6:
a5:05:9c:f5:d3:2e:47:7f:b2:5c:7d:7a:61:6c:c6:f8:ef:ea:
95:0f:53:02:7f:04:0e:59:34:85:d3:46:d8:dc:47:e8:f7:08:
c6:a5:63:c4:bf:df:fc:30:a6:00:fb:cf:f5:bb:c5:4f:d3:49:
60:87:a4:7f:8d:2b:e9:e9:89:4b:00:20:1e:0c:00:8a:8d:c6:
17:43:5f:05:0e:65:83:2e:fd:48:73:53:8c:23:a2:c5:14:ab:
6f:0c:f8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:17 2025 by rpki-client