Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier: MYnuaafWKptOzoatY2YazyMlQWg2HrINxMkHp/6L7EE=
Subject key identifier: 27:2E:75:CB:1B:FA:C4:ED:EE:C1:D9:22:7D:36:69:95:33:12:27:66
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial: 0194BCA9DFBFB560DF88602E0C024FB5571F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number: 0613
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: LfWpawV1ZL5ZwA7oMgcJRj4NWOcS9KjkG5GOFmq//BQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:df:bf:b5:60:df:88:60:2e:0c:02:4f:b5:57:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=272e75cb1bfac4edeec1d9227d36699533122766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:51:fa:3c:69:a8:ed:83:d5:f2:eb:5f:a7:
b5:a7:c8:fc:b6:42:54:92:3c:4f:15:8b:e1:b2:e1:
1a:ac:e9:8c:95:20:6e:91:30:6e:5d:cb:8a:da:6e:
2f:38:83:c1:10:10:46:6d:fc:0e:b8:cf:ac:38:46:
22:18:27:6e:14:b3:e1:79:e2:e7:ae:ae:8a:c7:d6:
65:3e:f2:05:b6:4d:a0:f6:b5:e5:c6:45:29:f7:6d:
99:f7:85:97:d7:83:89:c8:cb:59:34:33:8c:92:61:
6a:7e:b0:4d:08:7e:92:00:e8:fb:bd:a4:22:19:67:
f1:a4:7e:66:e0:5b:d6:f6:0f:a3:c8:8b:15:fa:28:
0b:8c:ed:71:62:96:6b:53:f8:cb:c0:d8:06:f9:1f:
ec:95:37:6a:fe:eb:f1:7b:a1:e8:87:1d:e1:14:cf:
58:5b:8d:76:f4:83:d3:58:b9:5d:bc:e2:f7:f1:78:
a7:ed:82:70:f8:3c:fc:9f:bc:20:e3:a9:0a:90:ef:
8f:5b:70:fc:be:7a:c2:2b:cc:4a:4b:f0:12:45:33:
d6:17:c4:de:ca:9d:41:8b:75:e3:26:00:af:e4:c1:
50:4e:2e:f4:94:8c:c9:da:b6:fa:cd:c0:b7:d7:39:
a7:4c:1d:1c:b2:bc:3e:d2:17:65:a8:05:d7:2a:b4:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:75:CB:1B:FA:C4:ED:EE:C1:D9:22:7D:36:69:95:33:12:27:66
X509v3 Authority Key Identifier:
keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4f:2c:4e:32:73:4f:e9:c1:c1:eb:42:4e:79:31:8d:26:64:
09:9e:68:af:9e:58:bc:3b:b5:27:8a:db:37:23:6e:1c:39:46:
fa:b8:de:f6:2a:5d:d7:6b:d2:7b:46:da:83:8c:6b:13:c4:47:
15:92:9c:42:2f:08:d7:0c:59:54:03:c1:b5:4a:d4:6c:ad:c7:
6b:76:e8:34:61:e7:6d:e3:b9:cc:d5:4a:e6:c2:07:62:9a:21:
b2:a3:bc:ee:93:f7:dd:7e:d1:51:90:c2:c2:93:31:77:aa:db:
3e:a4:2e:f6:e8:d8:22:0c:f6:59:cb:81:04:48:b7:d6:35:a1:
c9:3a:08:4c:14:e7:bd:85:9f:5a:f0:fa:95:4b:5b:ae:54:90:
2c:07:b8:a1:4f:48:3a:94:0f:f3:ec:fd:55:39:5c:79:94:8f:
cc:69:c7:02:5b:6e:6d:38:5a:58:e1:c2:a3:8a:6c:6c:1c:e1:
a6:a2:b1:51:fc:28:66:8b:8b:2e:b7:f9:68:d3:6b:78:62:62:
d3:68:5c:73:20:15:12:d6:c1:57:71:f6:c6:0f:2f:73:51:12:
f9:12:46:7c:05:99:73:11:cd:05:f0:af:ae:23:27:48:06:8e:
73:7d:35:63:f4:26:a6:25:ef:8a:37:cb:14:37:53:4e:72:72:
2e:4a:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:16 2025 by rpki-client