Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
File: b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft (raw, json)
Hash identifier: s4Zzgpjm8yLBNk1TV8yIvIEXAvEY89VQEk7ai6yz+VI=
Subject key identifier: 5A:71:19:F3:3E:7B:0A:BB:A2:6A:4D:5B:E3:16:9C:C4:75:7B:EC:D2
Authority key identifier: 6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
Certificate issuer: /CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Certificate serial: 0194BCAA23E2CD205A1A1CECF16B9C0482FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
Manifest number: D1
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl (hash: aI+QRwt+n7K6bFQF65VNIE28Rkctqxe0x+xLosJ+mR8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:23:e2:cd:20:5a:1a:1c:ec:f1:6b:9c:04:82:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=5a7119f33e7b0abba26a4d5be3169cc4757becd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:87:41:e6:7b:78:9f:41:a3:81:b3:98:22:
ce:c5:04:f4:cb:1c:d4:59:82:0c:dc:5a:c0:7f:ca:
dc:57:d6:be:d7:6b:84:ed:0a:8a:08:c9:1e:d2:f0:
23:e2:64:4b:84:0a:ac:62:9f:5a:7f:05:e3:5a:b4:
5f:fd:e1:8c:5c:2e:d3:ce:2b:df:ec:2b:91:e5:ca:
46:16:2a:6b:d1:c2:07:0a:73:79:c3:13:01:0e:0b:
d6:fb:91:ca:33:ad:21:b8:78:d3:92:52:e1:5b:e0:
66:ab:77:ec:6b:02:31:27:32:d1:9b:02:0b:e5:33:
b0:1a:aa:52:1f:00:96:24:07:0b:5b:ff:7b:e1:55:
b6:26:a5:0d:2c:b1:e1:ab:0e:8b:1b:7a:7d:b9:7e:
f3:a0:50:43:19:d4:76:80:f0:d5:6e:f7:7b:d9:63:
22:a6:43:ed:6b:f7:d2:b8:e2:ee:2b:ec:0d:48:4c:
79:89:6b:4b:87:89:e9:d7:77:e3:ab:f8:e4:ca:bb:
e4:a6:73:d1:b1:c3:b1:9c:2c:be:32:f1:04:d2:02:
d1:1b:60:4a:ba:ae:76:bf:13:33:c7:46:d0:45:74:
b0:df:4a:e5:d8:d7:2c:b1:e4:ed:ac:64:8c:d1:8f:
13:28:ef:2f:0d:ab:53:39:08:88:05:ca:d5:02:42:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:71:19:F3:3E:7B:0A:BB:A2:6A:4D:5B:E3:16:9C:C4:75:7B:EC:D2
X509v3 Authority Key Identifier:
keyid:6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:9f:31:08:6a:79:bb:10:04:87:25:d4:d4:c8:e7:d3:68:b0:
cd:b5:de:fa:b1:79:65:0e:1a:e3:6f:05:86:f0:48:b0:b9:0f:
2f:f0:13:99:7f:bf:49:1b:25:a0:21:bb:e7:e9:7e:28:69:36:
24:08:09:7b:eb:52:5d:5c:1a:68:33:bd:12:7a:70:66:d2:b7:
23:30:1f:cb:f2:47:df:c0:81:21:88:58:bc:81:ce:4f:92:4c:
13:0d:99:95:3a:c6:62:31:10:d2:db:06:67:d3:98:d5:b1:1f:
ee:55:36:49:25:38:a8:67:e4:74:15:12:34:67:57:06:37:d7:
9a:ff:8c:c0:5c:37:81:1b:1d:6c:6d:dd:6d:c3:d3:39:45:26:
c3:10:d0:be:fc:7e:b0:67:97:5b:09:01:7e:41:c5:c4:45:67:
2b:11:38:5f:92:ca:13:02:8c:d7:3f:c6:25:ab:0d:80:46:e2:
d8:ef:6e:9f:45:dd:d2:5a:52:d3:bd:ff:48:0a:21:7d:76:1b:
8f:28:f9:70:c9:4d:ae:4f:b4:2f:a4:88:7c:64:f7:d4:5f:20:
b2:16:f7:e8:e9:0d:b9:ab:f1:41:93:4a:9a:f9:42:b6:ca:e9:
cd:3a:7e:9d:28:9d:86:1f:b2:8e:b7:f2:92:99:f5:4c:ba:24:
49:a1:16:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:46 2025 by rpki-client