Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File: ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier: zjah/CE3komGT6z1c+po7xxWOJaTSFt+BMYRrZ3NNCY=
Subject key identifier: 33:60:8B:45:B9:9C:52:C7:75:AA:63:BB:65:46:69:43:7E:6F:1A:59
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer: /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial: 0194BC730EC734976CEB506C4600634A02DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: G2aT6Y9nm0fcimYKoD6KTQvuuyMyaV5PiIUVf0E3Ckg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0e:c7:34:97:6c:eb:50:6c:46:00:63:4a:02:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=33608b45b99c52c775aa63bb654669437e6f1a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:ce:ad:ab:45:1b:81:64:60:45:b6:01:4c:
95:5c:6f:f9:6f:f4:d1:9c:be:84:bd:f8:05:5c:b1:
7d:82:18:ce:4a:f9:7e:dd:a1:a5:64:ef:a4:f2:e7:
b4:6c:da:65:9a:57:e2:93:fe:6c:05:8b:e6:7e:19:
a9:62:4d:66:af:0b:da:c0:87:4d:64:f3:29:12:43:
d3:ac:4b:46:76:d2:74:88:c6:fb:7d:c4:79:78:52:
36:7a:06:72:91:25:a3:19:ff:e4:4c:0d:96:7a:56:
cf:b6:85:f2:e8:98:54:8f:44:83:34:e4:90:2d:4c:
c7:7a:07:40:2f:3c:29:e0:24:fd:a8:50:d8:25:a8:
4f:62:20:68:f3:f4:88:39:41:b3:5a:cf:1a:ec:38:
5c:0a:3d:9f:27:34:45:3f:12:dd:eb:ab:bf:a0:35:
4f:44:1a:d9:47:2f:5f:e9:16:9a:d3:da:e7:66:2a:
51:31:81:f9:e6:15:1f:27:6d:27:b6:4e:81:ad:6d:
9d:f3:1b:49:0a:2a:ec:d6:1c:5b:78:b6:29:b3:6a:
34:b5:9e:75:c8:0c:06:f7:86:65:5d:e6:47:3a:9c:
74:30:35:17:ab:61:9b:0d:05:c7:cc:55:cc:62:16:
6c:84:f3:83:33:05:d2:7c:5b:60:0b:b9:7f:ba:40:
fe:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:60:8B:45:B9:9C:52:C7:75:AA:63:BB:65:46:69:43:7E:6F:1A:59
X509v3 Authority Key Identifier:
keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a4:d4:d3:50:23:2b:0e:28:ab:fc:30:47:33:b3:d2:3b:b9:
3a:96:5e:f9:e7:cc:5b:51:47:3a:10:93:86:f1:7a:a6:0f:6d:
f3:22:99:9d:28:57:ca:d1:b4:45:56:9a:d2:ae:23:4c:58:0b:
b0:b1:63:35:df:f6:93:e6:f9:49:c5:04:2b:71:09:0b:00:68:
17:5c:91:e1:dd:a8:fe:6b:30:f4:73:79:bb:47:7c:30:7c:ba:
b7:da:f2:2a:05:bf:41:54:4e:1d:f4:94:22:93:bf:22:3f:84:
22:41:69:86:b2:ea:f0:3f:9e:e7:08:3b:d7:6e:e7:1d:d5:d4:
bb:37:49:c6:18:0c:e7:15:16:99:56:d2:4b:3d:a6:76:78:8c:
bc:0d:90:0b:c4:76:31:e8:6b:22:12:39:7d:3b:b1:89:08:96:
a9:2c:3c:44:98:d3:6d:b6:74:c4:b4:1e:1b:56:2a:f5:a0:98:
2d:3e:be:20:e6:e0:66:2f:4d:b1:1d:8e:b3:d5:06:b1:1b:ea:
7a:cb:7f:d8:64:27:bf:49:84:13:0f:58:c2:98:df:9b:66:db:
9c:0d:77:ec:1d:9a:be:10:e4:2a:3f:1d:65:a9:11:3f:18:6d:
b7:4d:d1:ae:a9:42:00:01:45:d0:ca:7d:f8:4f:a7:19:68:a2:
66:14:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:19 2025 by rpki-client