Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
File: v8qNbiIJkMc424yExmshnwNFVgw.mft (raw, json)
Hash identifier: 1t18rLnzitD4D+d/eqyYZ7D5Tv94Zz5ZCY/JBBig/WY=
Subject key identifier: 49:D9:4A:DD:A2:AA:C1:40:7C:9D:9D:23:B0:87:78:AC:EA:AA:B9:5F
Authority key identifier: BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
Certificate issuer: /CN=bfca8d6e220990c738db8c84c66b219f0345560c
Certificate serial: 0194BBCDFC62B3E3A239C7AC929887A8F7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
Manifest number: 0E22
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: v8qNbiIJkMc424yExmshnwNFVgw.crl (hash: GKU3UdVIbGhmZLVd876KM9JdrldYfKAMeeTo2cFk3Mw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fc:62:b3:e3:a2:39:c7:ac:92:98:87:a8:f7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca8d6e220990c738db8c84c66b219f0345560c
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=49d94adda2aac1407c9d9d23b08778aceaaab95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:e7:a6:5d:ae:94:92:ad:d9:e8:f1:5c:bb:
a4:b2:93:f1:19:ba:d7:97:49:66:44:a2:18:e2:b3:
04:85:f6:c9:45:dc:f4:a4:88:ee:98:fb:12:2b:99:
5a:98:4e:e0:a8:89:3d:73:c0:68:92:fb:db:53:5b:
4e:20:f0:ea:82:0e:ea:52:e2:59:a8:1e:0b:bd:31:
c4:b6:88:a0:8b:ff:6b:a6:c8:c2:c1:0d:d5:5b:47:
d6:b8:0b:8e:65:2c:66:d9:23:d2:b9:64:ef:24:13:
83:50:af:e7:46:22:e9:c3:11:af:e0:d9:29:28:1d:
dd:db:ca:76:8e:70:7d:86:10:6f:d7:27:b9:40:a0:
a9:b8:55:80:e0:88:7a:71:1a:aa:9e:45:bf:68:bb:
30:b7:2b:14:b5:79:aa:b4:3c:73:fe:92:75:65:c6:
19:52:08:31:d8:46:d6:92:fe:7b:97:7f:3f:e4:1c:
2d:5c:0f:0e:63:fa:90:8c:6a:f1:4b:01:6d:75:b1:
4f:f4:14:2c:79:9e:c4:1f:c3:b3:e3:0e:34:45:84:
57:10:83:59:04:53:09:a7:e8:19:43:f6:f6:4c:3d:
fb:cd:c0:cc:6a:2b:36:75:dc:33:0b:b1:46:89:4d:
b6:c4:ef:85:3f:fc:44:cd:47:66:8a:62:0c:cf:4f:
57:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D9:4A:DD:A2:AA:C1:40:7C:9D:9D:23:B0:87:78:AC:EA:AA:B9:5F
X509v3 Authority Key Identifier:
keyid:BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b6:ea:39:6d:cf:28:b8:11:f9:46:f8:97:af:d1:99:d0:3f:
19:fb:6c:52:90:68:7b:8a:9a:7e:44:eb:73:9a:d9:dc:fa:a2:
c1:c1:fe:25:06:ff:d2:5c:f5:53:bc:6d:37:59:9a:eb:f5:cb:
b6:6b:36:77:b3:49:f3:8a:10:7f:d0:cd:fd:e7:61:87:be:a2:
00:a0:74:38:f3:4c:fd:8e:db:06:37:2b:c7:60:78:8a:ab:a3:
ed:9c:fa:cd:1f:86:ef:26:74:f6:0a:5f:b7:80:22:18:b6:27:
a5:98:81:20:8a:9e:b7:3c:96:80:5e:02:9c:d1:4d:9a:64:f5:
e2:6b:7b:b8:2b:92:8e:3e:78:6c:4f:20:3d:bb:6c:7f:6f:84:
b8:77:10:02:5f:ad:8d:17:f0:52:4f:b5:b7:42:78:5c:06:47:
99:ce:31:28:1e:74:42:cb:8f:da:57:75:13:8b:b1:4d:d1:59:
d0:94:a0:f8:9c:07:34:df:f6:77:f7:fd:b4:e0:e5:97:c3:f2:
46:78:14:e5:ea:23:3d:51:6c:6e:cb:3c:0d:10:68:20:a5:59:
9e:8b:9c:6f:d4:ed:8a:0d:1a:25:c4:f9:a9:cb:ec:52:0d:6b:
b5:82:a7:49:38:2d:9a:d6:75:b6:26:ab:5a:8f:af:b5:4f:aa:
5d:ba:c6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:44 2025 by rpki-client