Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
File: BkAThp4LzSd4EEBTjflc-mfhFy4.mft (raw, json)
Hash identifier: obS2x+kdxY29clw6C8WlLOEEd/Uyy146fsWu9dlyEkE=
Subject key identifier: 9E:8D:A8:2B:39:3E:88:BB:A9:E2:96:6E:83:91:CC:07:6B:92:2D:B5
Authority key identifier: 06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
Certificate issuer: /CN=064013869e0bcd27781040538df95cfa67e1172e
Certificate serial: 0194BCA9F03DE24282EA33E0725D5610973E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
Manifest number: 01B2
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: BkAThp4LzSd4EEBTjflc-mfhFy4.crl (hash: ZKqMMLJNqe4SAsZxTu9SCSpphQFKWVdV4BvdJ+XzqWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f0:3d:e2:42:82:ea:33:e0:72:5d:56:10:97:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064013869e0bcd27781040538df95cfa67e1172e
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=9e8da82b393e88bba9e2966e8391cc076b922db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:b1:cc:dc:5b:6d:02:6a:71:53:40:09:3d:
a9:e7:c3:91:0a:8e:7b:23:1b:0e:f3:aa:30:6d:85:
ff:50:15:b8:43:d6:bd:5b:55:b2:03:4e:48:11:24:
73:2a:56:74:47:f9:dc:13:0b:c3:1d:af:dd:c6:b4:
fe:0c:b0:2b:8a:a7:fa:02:69:c0:a3:37:74:dd:93:
45:33:ac:e0:94:77:1c:32:3e:21:82:91:c0:1d:35:
8b:fb:42:b4:38:90:3c:c4:57:92:b7:c7:a2:16:53:
21:28:17:f9:ab:8a:b4:07:02:78:ca:4e:a5:02:e9:
75:a7:f3:24:c8:a9:fa:d8:80:f3:af:07:f3:a3:f0:
a7:be:ba:25:bc:ad:c3:29:2a:13:84:12:c3:f7:0c:
4e:ac:47:50:89:eb:20:aa:e7:ae:13:3e:6c:15:f5:
4a:38:7e:69:1e:ec:29:5a:4e:64:65:81:3d:6a:9a:
04:bf:49:cf:c3:69:36:a2:e6:37:d6:b8:e3:c1:89:
58:6a:26:a9:a1:48:5a:9a:cc:cd:02:9c:4f:8f:7a:
6b:3c:9e:d4:27:83:cc:c4:27:72:53:64:1a:c0:fd:
44:1c:84:91:79:2e:3e:da:d4:92:b6:b1:82:9f:ff:
3a:e0:2f:aa:a9:57:af:b4:aa:fe:a0:9c:d0:57:12:
87:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8D:A8:2B:39:3E:88:BB:A9:E2:96:6E:83:91:CC:07:6B:92:2D:B5
X509v3 Authority Key Identifier:
keyid:06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:97:af:aa:6a:21:e4:c3:e0:eb:2b:1e:1e:e6:9f:15:5c:ce:
14:0e:d3:a3:14:d5:9a:b1:28:56:37:09:c6:03:1c:b4:49:0e:
76:22:8c:16:d1:28:55:d7:60:83:eb:5b:e9:c2:e8:c5:04:0a:
5d:b0:0a:28:90:76:20:fe:a6:3c:fc:e0:89:69:fa:f6:e7:e9:
00:f7:30:15:9c:33:f7:33:6e:b2:3e:e9:ec:fb:d2:09:55:08:
c3:1b:c7:97:a1:f5:f3:39:44:d2:46:c2:2d:b5:b8:f4:1f:4d:
af:41:a6:2f:44:ed:1c:9e:24:52:e3:aa:54:c6:e4:80:b8:71:
b8:53:49:fb:5f:27:30:ac:0b:62:5d:4f:0c:89:49:55:46:fd:
7c:c8:34:df:09:67:57:89:ba:6a:57:bb:b7:53:31:55:68:fd:
c9:be:71:68:4f:1d:44:be:61:06:37:7d:ab:6e:c5:4a:0e:a5:
a5:8f:01:40:9e:c8:08:b1:22:6b:d0:99:1b:8d:44:9f:c9:dd:
92:07:11:fb:3d:7f:83:31:f8:8c:74:33:42:3f:11:cf:72:5c:
08:67:1a:df:f7:69:24:03:d6:91:0d:d4:e5:6d:2b:bf:bc:df:
41:31:76:2a:f0:7e:4b:cd:b8:61:50:28:ec:e5:1f:a8:68:7d:
ab:d3:83:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:15 2025 by rpki-client