Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/db8ed5-37db-417e-9157-a3c3f9aa8608/1/bdoFbDtU5QDKGcj1xHcKw_RQ5L0.mft
File: bdoFbDtU5QDKGcj1xHcKw_RQ5L0.mft (raw, json)
Hash identifier: mKrnlPUYv4mFAztKkFfZj2OrLRtOaZUtIsDB0rhOmoM=
Subject key identifier: 91:67:F0:98:F2:35:90:4A:7E:0A:37:54:6A:9E:8D:41:EF:EA:A8:AD
Authority key identifier: 6D:DA:05:6C:3B:54:E5:00:CA:19:C8:F5:C4:77:0A:C3:F4:50:E4:BD
Certificate issuer: /CN=6dda056c3b54e500ca19c8f5c4770ac3f450e4bd
Certificate serial: 0194BC3C2D4DEB9DE584F8FDFC6E2F3510DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdoFbDtU5QDKGcj1xHcKw_RQ5L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/db8ed5-37db-417e-9157-a3c3f9aa8608/1/bdoFbDtU5QDKGcj1xHcKw_RQ5L0.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: bdoFbDtU5QDKGcj1xHcKw_RQ5L0.crl (hash: q8V3gcmlbxnlpHO3Sm/i0bJ2Bswd+plCQAmzud4MV1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2d:4d:eb:9d:e5:84:f8:fd:fc:6e:2f:35:10:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dda056c3b54e500ca19c8f5c4770ac3f450e4bd
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=9167f098f235904a7e0a37546a9e8d41efeaa8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:62:2f:47:c9:bd:88:ec:aa:58:67:ef:85:
69:46:51:5c:60:53:80:49:ef:84:ba:0c:9f:70:35:
4d:02:5a:51:71:ac:71:f6:b3:53:8b:84:75:a4:9b:
3d:4d:e6:bb:08:25:ab:39:58:67:5e:8d:26:2a:0d:
21:5b:a9:28:54:71:3a:81:9c:b0:90:df:21:ce:16:
20:66:f2:c4:34:c6:2d:a0:1d:24:c4:32:20:94:4e:
0a:b9:01:9a:94:02:d4:db:07:18:45:dc:02:b7:f8:
42:7e:2e:77:19:bb:fa:c5:cb:a7:13:eb:84:96:d8:
e8:00:be:c9:b4:13:3f:4d:57:f3:15:fd:fc:55:94:
ff:07:8e:b4:35:b8:4f:bc:34:4f:9a:9e:11:f1:3d:
d9:74:31:7f:f6:48:c3:f2:fa:8b:01:6d:27:9a:5f:
f4:b3:1d:c5:b0:02:cd:47:9c:6f:51:8d:36:c0:67:
c2:8c:ac:4a:50:e3:b1:5c:60:07:73:08:14:30:2f:
a5:10:8b:20:bb:85:e7:c2:e5:78:6c:0c:62:2c:d8:
ca:b0:1c:2d:d1:8e:92:83:99:f3:a7:73:2e:6e:61:
48:fb:87:36:bd:d9:1f:e1:1b:5e:49:25:13:5a:06:
cd:06:9f:ba:ce:16:4f:a9:19:ea:03:55:99:31:8e:
a3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:67:F0:98:F2:35:90:4A:7E:0A:37:54:6A:9E:8D:41:EF:EA:A8:AD
X509v3 Authority Key Identifier:
keyid:6D:DA:05:6C:3B:54:E5:00:CA:19:C8:F5:C4:77:0A:C3:F4:50:E4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdoFbDtU5QDKGcj1xHcKw_RQ5L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/db8ed5-37db-417e-9157-a3c3f9aa8608/1/bdoFbDtU5QDKGcj1xHcKw_RQ5L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/db8ed5-37db-417e-9157-a3c3f9aa8608/1/bdoFbDtU5QDKGcj1xHcKw_RQ5L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:dd:b0:e0:bd:c2:87:7c:9b:9c:e1:e0:70:37:a1:a6:c8:3a:
6f:da:d7:59:cb:04:09:6a:b8:6e:33:8c:25:88:42:8a:21:c5:
5d:52:7f:11:a8:2f:bd:b3:83:c4:c3:8b:a7:58:48:2c:9d:33:
1f:d7:43:17:5e:ed:27:15:6c:d6:e7:ea:e3:5a:81:a3:e5:a2:
59:10:dc:bc:79:a8:29:65:2e:2e:0b:c6:5e:57:9b:c6:30:8a:
82:66:eb:48:89:80:64:a3:10:e5:de:a0:03:f6:67:4d:47:64:
d5:01:4c:e7:bd:2f:ad:2a:b7:e6:43:bd:de:cf:58:bb:26:38:
5e:50:10:eb:06:12:6e:93:46:0e:0b:47:99:a7:06:d0:3d:40:
40:f1:48:75:c6:49:b0:21:6a:33:22:c2:ec:8d:2b:20:5b:53:
eb:81:8b:f4:68:b6:21:50:be:89:43:d9:37:81:a7:05:9f:91:
77:ff:12:ac:a5:e2:36:f2:67:62:23:df:42:a8:53:78:a5:44:
aa:94:e1:c4:1d:26:2d:16:01:9b:f3:d1:fe:7f:7a:6f:94:90:
53:bb:ae:b1:f9:38:b1:ea:5e:67:22:75:e2:7d:a5:16:b8:8b:
03:e8:f4:94:9a:8e:d0:27:7c:7a:08:4e:fa:22:7f:77:a8:f4:
34:11:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:50 2025 by rpki-client