Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json)
Hash identifier: vuJQ7p1fiio1Tk4Abo2FX7W6A67VvVU0Xt745lvl7nw=
Subject key identifier: 50:22:F8:AB:B1:B6:7E:25:EE:74:FB:E3:1E:FF:04:C3:19:4E:8D:CC
Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006
Certificate serial: 0194BC7286D95144CA96FE751057A1F3BBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
Manifest number: 0311
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: tIPbsjFFBVW934nwqQ5sV6EKSNHlyDDCQjmN5hQFFec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:86:d9:51:44:ca:96:fe:75:10:57:a1:f3:bb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=5022f8abb1b67e25ee74fbe31eff04c3194e8dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e7:bc:ba:fc:24:95:26:62:e5:c6:31:5e:71:
ce:c3:ef:b2:a6:17:b9:d3:7f:9d:42:dc:65:27:e2:
00:74:fa:7f:57:97:64:0d:56:00:f3:c8:1d:70:2b:
ad:3f:76:65:c2:0e:48:04:87:15:93:5d:fc:25:f6:
02:8b:ee:02:89:0a:c9:e4:5e:56:1b:4f:29:57:09:
c7:97:e0:86:b5:b7:72:e0:fe:5b:03:40:3c:37:79:
05:a0:f6:26:98:92:47:41:14:87:e6:db:04:0d:b4:
b3:b4:86:32:2a:ed:c4:17:d4:40:65:34:ce:b0:8f:
71:fc:b8:b7:ce:8b:56:c0:20:e2:18:b9:e6:d0:f2:
af:00:55:89:f1:79:0e:fb:fd:4c:b8:53:51:a6:14:
54:e0:9f:4d:7c:23:f3:76:b6:60:ca:62:20:97:6c:
b8:b0:ba:23:c8:fb:1c:6a:63:cb:53:e3:a9:52:59:
3e:cb:1a:d4:f9:8a:12:4a:11:98:15:da:7c:17:9d:
15:7c:ca:cd:68:f3:f5:c2:07:3c:a6:5d:39:06:83:
05:fb:5a:39:14:ab:9b:58:ff:0c:5f:65:95:53:69:
cb:44:38:6d:84:d4:84:db:4e:ae:e1:50:c4:6d:97:
11:dc:c8:5f:46:55:b3:85:b5:85:3d:c9:5e:48:7f:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:22:F8:AB:B1:B6:7E:25:EE:74:FB:E3:1E:FF:04:C3:19:4E:8D:CC
X509v3 Authority Key Identifier:
keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2e:f3:a8:91:9d:00:83:52:93:0c:2b:d9:3e:0e:d0:10:e2:
57:81:f5:92:a0:37:f7:5e:db:75:98:18:e2:75:ce:41:32:bd:
e8:32:27:47:5b:5d:c6:60:86:1a:65:ab:43:da:5d:b5:1d:11:
c5:f5:2b:e6:fc:01:69:0a:84:d2:88:93:bc:54:f6:96:e8:e2:
e6:fb:76:1d:4b:03:04:f2:46:3c:26:af:60:b8:47:7e:98:5d:
80:e0:c3:48:2d:8b:ce:e9:5b:38:b3:58:50:ca:13:56:8b:81:
15:4c:f8:1f:10:b4:02:57:3a:b2:c0:8a:59:fb:64:d7:45:ae:
b5:86:ae:a8:7a:4b:0a:25:39:b0:3f:3d:ab:8b:b0:dd:b4:c2:
5c:32:8f:9a:aa:7f:7b:e3:cf:86:68:df:85:c2:fc:d3:78:04:
b9:70:2c:8c:de:77:fa:bf:50:f1:3e:89:a9:47:e2:16:f7:e9:
86:50:3a:84:5d:de:13:1f:97:5f:a0:15:4d:f6:54:3e:8b:7e:
8f:3a:2e:1f:ca:18:e4:71:cf:c3:6c:ed:a5:9e:20:25:ab:f1:
56:12:40:f5:29:94:da:16:58:9d:04:db:d6:1a:44:07:d9:72:
f2:ca:9c:d9:51:46:4c:69:df:6d:ef:9e:99:46:6b:f0:e7:31:
31:60:24:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:40 2025 by rpki-client