Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: EmzlzT/SQwECg6c4nTntJH4tc76O2+5gahh3P2yfXy0=
Subject key identifier: 31:BD:37:D9:18:CE:E2:BD:8F:4E:20:01:11:F2:77:F6:1C:EC:B0:DF
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 0194BBCDD867E44D3552707EAB3079B272CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: gJAQYQ86BuWnutDcxVoEY5ALQoonBtqXY62iTPuooT8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d8:67:e4:4d:35:52:70:7e:ab:30:79:b2:72:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=31bd37d918cee2bd8f4e200111f277f61cecb0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:57:c4:fd:b9:a3:f4:2f:50:9e:59:d6:aa:
15:fd:0b:c4:36:af:62:6f:e6:40:02:2b:7d:2d:6b:
29:bb:40:a9:c4:35:11:fb:27:d4:42:e8:e2:f3:c1:
e7:0a:0f:59:cd:7d:2c:d8:0d:e8:84:66:b8:83:82:
c6:07:05:1a:0d:88:4d:e6:2b:2d:f1:c8:88:0f:61:
75:66:31:18:c5:54:e0:f5:54:e9:03:9c:7c:65:2f:
ff:5a:0e:97:8a:67:f4:0c:d8:f2:e2:39:d4:ff:91:
68:e0:0a:26:0d:48:5c:0b:63:63:6b:fe:15:ea:89:
2b:48:0c:e9:fa:a1:93:7d:fc:8c:bc:85:1e:da:12:
98:87:9a:f4:af:43:88:93:ab:e1:88:15:18:47:00:
e8:84:6e:dd:50:57:9d:87:23:9b:c1:b3:59:f4:7a:
bd:48:39:15:e5:6c:cb:e6:f5:81:84:b0:7d:cb:f2:
82:c6:de:80:22:d4:7a:0c:cc:ec:ad:66:fe:17:96:
56:2d:1c:31:e1:71:5f:42:7a:e9:8a:3b:29:74:d6:
70:79:05:2a:27:04:a9:ee:a9:22:cb:ca:3a:f1:41:
d3:07:44:13:2a:70:9e:32:c9:97:8c:d4:c0:2d:fd:
25:1d:f1:74:30:b0:0a:26:40:23:5c:ab:e3:5f:d6:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BD:37:D9:18:CE:E2:BD:8F:4E:20:01:11:F2:77:F6:1C:EC:B0:DF
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:08:ff:ba:c5:e4:84:56:11:fb:5a:6f:45:ff:d7:03:09:f9:
24:24:18:8a:b2:e4:58:ce:a0:71:f1:25:ab:a0:ef:a0:f9:8b:
53:34:f6:1e:b8:c4:30:87:51:df:e2:5c:00:d9:3d:9f:3e:20:
f7:89:28:5c:53:ff:b0:8e:6f:6e:6b:73:70:a7:e3:37:eb:91:
94:4a:6a:cc:bf:42:ae:9d:a4:30:bb:17:07:65:74:7e:c3:e1:
19:0d:59:f7:e9:7b:1e:1a:10:fa:b9:94:10:3c:45:ae:2c:17:
98:c0:d0:81:85:6f:a1:b4:d4:89:3c:b1:99:37:29:f9:a3:58:
b1:1e:d8:8f:c7:8f:49:01:d7:bd:dc:c1:97:b8:8b:68:a7:b5:
a7:fa:4b:39:ed:3c:d7:65:ca:e0:70:73:f3:6e:3a:f5:fd:7c:
ec:c9:47:ca:b3:61:4c:48:92:a1:74:c8:ec:92:9f:e4:e7:5e:
9b:ee:f2:30:e0:67:40:a1:a8:7f:58:77:57:48:48:ea:a5:d7:
66:42:d4:a3:09:90:21:de:21:ae:3a:56:87:b2:2d:30:a6:a0:
a9:35:13:29:52:85:fd:37:0e:c0:ea:95:f0:aa:5d:68:b5:c7:
94:28:b2:e7:93:ca:7b:0c:22:a2:eb:59:9c:25:09:3d:b5:90:
b7:ec:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:44 2025 by rpki-client