Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier: ZWv+UCPObHz56qQBohQTwXY0mZElxK/WKo+CmtHLRII=
Subject key identifier: 62:D3:4B:48:FB:15:AC:1B:8C:67:37:A1:CA:CF:13:48:FD:D9:20:0B
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial: 0194BBCEFEEB2E636BD40ABE424666370526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: j7rdCXsZRj3Ye0zMAuqjr7lWT56iGb1H912fDi72B+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fe:eb:2e:63:6b:d4:0a:be:42:46:66:37:05:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=62d34b48fb15ac1b8c6737a1cacf1348fdd9200b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:fb:b0:5e:43:1b:d7:f5:bc:e8:da:23:d1:
a0:aa:c2:2e:f1:18:96:2f:c9:35:c7:09:af:a9:bf:
cd:54:c1:20:96:e4:ab:ec:a0:e3:09:a9:28:95:57:
93:e6:53:85:66:30:47:44:e9:ab:99:f4:34:7b:27:
f5:57:36:cb:2f:25:87:48:75:d0:b0:b6:13:0b:a2:
8e:e9:b0:2b:eb:50:fc:06:07:c2:f5:17:e4:5f:25:
a5:3c:99:00:57:e6:45:1c:bc:85:d2:fd:65:4f:8a:
cf:ea:d5:65:27:50:cf:cb:ae:9e:24:bc:ac:78:16:
21:96:68:8a:bd:7b:dd:18:a1:70:60:a4:83:bd:cd:
d7:72:36:38:d3:cd:a5:48:11:5d:77:13:0e:76:b1:
b5:d7:ca:43:98:66:a9:8c:9f:2d:52:fd:da:55:9d:
89:ca:4b:30:99:c9:e9:f5:8d:46:19:d4:fd:ed:35:
6c:c2:f7:7e:73:7c:7c:b3:85:d7:f9:94:6c:2a:fd:
5b:b1:9d:47:fe:82:6c:1f:ba:ab:1b:7e:9b:40:a3:
b5:68:89:41:be:37:0e:2c:f6:a8:1a:a5:15:0a:95:
0a:2b:94:34:b5:4d:7b:66:b6:e5:ca:ea:73:db:bc:
70:77:89:50:11:14:a2:5f:49:1d:36:85:50:f9:27:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D3:4B:48:FB:15:AC:1B:8C:67:37:A1:CA:CF:13:48:FD:D9:20:0B
X509v3 Authority Key Identifier:
keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:04:7e:ed:9a:71:87:90:a7:3a:7c:08:86:e2:eb:9f:6c:7d:
12:96:24:2f:37:98:d9:d9:3c:aa:23:2c:54:7f:5e:81:a9:20:
89:85:3e:28:13:9b:1a:9e:66:ac:31:0e:00:21:ab:e2:f2:bd:
11:3d:bf:37:2e:e2:31:5d:0d:9b:e8:f0:45:ff:7b:cd:3b:64:
aa:99:aa:4e:53:53:3c:39:84:72:39:4a:ba:19:d2:46:dd:fe:
9f:9c:25:d5:f8:b4:3a:7a:71:7b:8b:56:88:31:88:b8:2a:47:
73:1c:20:69:b7:c7:58:0a:59:99:47:f8:cc:03:6d:d8:f6:8b:
bf:71:c6:34:3e:44:32:ec:6c:5a:4c:63:c5:ac:9a:97:27:07:
3e:95:87:eb:53:6f:83:eb:ba:f5:1b:d8:6a:f6:a5:44:83:06:
13:1f:db:fa:8b:47:f4:33:6c:ac:d1:15:46:28:bb:8a:aa:24:
15:b1:49:47:d0:74:ff:d1:10:22:a3:38:95:b0:81:1e:67:1d:
f4:b9:5d:cb:11:bd:d5:f5:e0:e0:04:fe:ef:b4:3a:74:77:84:
04:fb:7e:f6:87:aa:99:20:12:0d:f8:d5:92:29:0b:41:e3:dd:
0a:34:fe:dd:24:fd:8a:39:55:51:47:6b:ed:63:5b:88:3c:ee:
bb:d7:f5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:28 2025 by rpki-client