Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
File: 9rG5O-fUO4bWT4tLljvJFWJfI_I.mft (raw, json)
Hash identifier: n0U9IVWSBMhUnHhcgwrT3QClyJu9LRJJ6XiIabGyEx8=
Subject key identifier: 99:01:82:A5:08:B5:33:0E:E0:75:9F:28:C2:E9:D6:3C:66:EB:1E:01
Authority key identifier: F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
Certificate issuer: /CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Certificate serial: 0194BD855C35C649D5FA30D25FB77DBA13BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
Manifest number: BC
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: 9rG5O-fUO4bWT4tLljvJFWJfI_I.crl (hash: RBNiHcTz12CP9nOk73YK39S2MNZr8iV7A0Ynzr/vVfY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5c:35:c6:49:d5:fa:30:d2:5f:b7:7d:ba:13:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=990182a508b5330ee0759f28c2e9d63c66eb1e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:7b:d0:2c:75:ed:dd:16:a8:d9:5f:59:3d:
d0:6d:94:83:dc:1b:38:fb:05:a0:72:35:da:31:42:
ee:8c:24:3f:1a:c8:15:e8:cd:cd:67:72:ac:67:36:
7b:c9:6a:6e:15:9e:cb:ae:da:65:e1:c3:8e:db:4c:
85:70:10:ec:18:6f:36:b7:b6:f4:da:9c:8e:4e:9c:
04:aa:37:6c:3d:5f:1a:9b:4a:aa:e8:76:4a:fd:41:
c5:90:38:1f:0d:e4:b3:b4:de:36:2c:3e:f3:9b:e9:
71:8b:34:1f:f2:d3:39:48:53:c2:1b:6f:37:0a:eb:
7d:18:f6:56:21:d0:22:ef:d2:3d:d4:59:84:a6:62:
19:34:80:5d:32:a9:3f:0b:c7:15:24:3f:a5:50:d6:
dc:c0:dc:93:77:31:ca:48:7a:f5:07:f3:ab:2c:db:
e3:fb:0f:63:e3:8b:c3:6e:5b:ea:22:8f:77:c4:bc:
d3:73:22:de:4f:18:81:03:9a:03:ce:16:b5:1f:fa:
ea:e6:1e:ba:60:68:4c:98:e1:11:ec:8e:0a:18:e7:
37:7c:11:6a:8a:1c:50:5f:aa:01:c5:c2:92:05:0a:
7d:b6:7e:3e:d3:43:9a:75:18:ac:e6:80:07:ab:fa:
5e:f9:a7:d9:72:44:b6:77:c5:67:74:ab:78:0c:84:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:01:82:A5:08:B5:33:0E:E0:75:9F:28:C2:E9:D6:3C:66:EB:1E:01
X509v3 Authority Key Identifier:
keyid:F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:38:b7:0a:16:c1:78:a7:89:ca:36:74:af:82:6f:c5:e9:b2:
76:a9:ff:af:ad:77:2c:69:d3:a0:13:b2:d9:9e:47:01:f6:d9:
8c:50:b9:7a:1f:4b:25:da:c5:82:93:4c:01:9a:41:c1:6b:eb:
12:6d:b5:ac:12:cf:c7:c8:b6:d0:2a:09:cf:ac:87:16:4e:28:
10:8f:db:54:66:2a:0b:c6:84:78:b5:bf:f1:7d:d7:29:43:f7:
de:f5:ab:19:ef:13:e9:66:a9:11:63:db:e7:81:0a:24:b4:de:
2a:fc:42:af:c2:24:6b:de:dc:49:08:aa:59:fb:f8:52:21:64:
24:c2:54:e7:55:a2:e5:91:9c:51:86:e6:26:c4:05:1c:c9:83:
96:9f:7e:46:e7:ed:87:6a:47:ba:56:ea:17:34:2c:79:a1:26:
06:19:01:69:ea:47:e4:42:40:49:28:e5:08:26:6d:54:80:85:
85:c0:0b:96:65:36:33:7f:59:cf:9d:b1:d9:a2:78:f5:53:60:
d1:6e:6f:e1:c6:25:15:0b:43:6f:7b:50:a5:3d:5b:7a:84:20:
19:74:b4:8a:68:29:6f:8f:dd:54:e4:ec:83:23:62:36:91:f4:
b0:89:c1:d8:dd:fa:f9:19:03:9f:61:91:51:77:84:c6:6e:c8:
93:c3:f7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:09 2025 by rpki-client