Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier: +eqNPMjqMuvEHQsJdfQlcNfd5uCcI+SzWnYFoB1zCGw=
Subject key identifier: 85:F3:78:75:90:ED:22:80:F9:35:DC:36:AD:3F:62:C9:92:4A:5F:C8
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer: /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial: 0194BC3C110B429789CCE8F5C0AE070316C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: KZd4d8I5Q6ScP4bkYDRFXJ+m2aaqJd7mBmsx0O/bOgM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:11:0b:42:97:89:cc:e8:f5:c0:ae:07:03:16:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=85f3787590ed2280f935dc36ad3f62c9924a5fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:76:7f:10:3c:1c:87:01:03:00:98:de:6f:
51:36:fe:2d:ee:e7:28:c7:83:dd:76:1e:96:b8:d8:
78:5c:30:e1:c4:e6:9f:c7:2e:23:52:63:5f:a5:35:
8c:5a:38:cf:97:41:56:f7:33:ae:19:41:ef:41:a1:
33:39:18:c9:03:f6:1f:c2:c4:6a:82:68:bf:dd:d4:
6a:ff:60:09:d4:7e:68:5a:6b:31:c1:78:ad:9d:86:
f6:e0:11:9f:f9:86:c7:11:dc:9c:c0:ea:d5:1c:41:
6b:52:a0:1b:14:5d:47:2f:f2:46:7c:d5:b2:2e:ac:
39:2d:73:aa:4d:fe:10:3e:43:64:9b:8a:aa:ec:c0:
34:6e:7c:85:dd:86:95:6a:71:dc:87:c4:79:01:51:
05:53:3b:11:90:85:ef:eb:f8:f9:34:0c:45:40:7a:
24:3b:e1:11:35:5c:b9:2c:d8:51:c0:79:8a:43:8c:
a6:ec:59:14:07:54:be:2a:a7:e1:94:f9:3d:67:df:
61:3b:7c:4e:d6:c1:02:65:74:e7:8c:79:b3:02:ff:
46:04:2a:65:10:04:14:b0:8c:a2:03:8f:2a:38:75:
39:79:82:38:63:58:66:df:a3:41:e8:ea:cc:0a:46:
6e:42:9d:7e:b6:58:65:1f:b9:36:9b:e7:b5:99:b7:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F3:78:75:90:ED:22:80:F9:35:DC:36:AD:3F:62:C9:92:4A:5F:C8
X509v3 Authority Key Identifier:
keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bd:6e:33:56:80:95:b7:97:20:b3:35:cf:ff:79:82:37:52:
2f:42:6b:f9:f4:89:26:ec:a5:1d:6b:51:cb:a2:df:dd:3a:65:
54:bb:df:63:4d:2f:97:5f:51:49:7f:92:28:00:27:2c:5d:c2:
b9:95:8d:a5:a9:e9:1f:0c:a3:e6:59:0a:d3:6c:7d:c4:69:0f:
76:9a:75:08:5e:2b:48:9b:40:ca:38:09:87:d5:0b:00:fd:16:
ad:7e:d0:36:fb:a5:db:d7:a6:85:54:61:93:9c:18:99:5b:4d:
1b:a5:ed:5d:ec:dd:64:bc:ef:3d:50:de:92:aa:0e:7d:d5:ec:
7f:78:a5:ce:22:57:0c:cc:7b:cd:ab:89:67:54:58:8c:f7:88:
0e:d7:82:69:10:64:5b:dc:b6:da:92:ea:0d:16:a4:52:0a:98:
2a:80:c3:2d:96:a2:af:b7:5c:ac:ae:f5:16:97:0b:9e:c2:67:
a6:4c:ea:86:f1:50:5f:ab:c8:23:cf:20:53:0b:42:83:a8:3f:
bc:cb:de:46:f0:cd:b8:74:e3:f6:fe:7d:8f:2a:11:7d:db:70:
72:28:e4:d6:a5:e7:dd:3a:05:c3:97:fa:a3:8c:b6:d4:74:8c:
5f:eb:b6:c1:15:76:42:0b:91:74:79:13:c7:b0:56:e4:6e:c1:
c3:27:c3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:26 2025 by rpki-client