Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier: wsFEhXaRaazSo30l4miL3pAtPQ+YRDi5A5fJJAU9zCE=
Subject key identifier: 40:F0:53:09:5B:01:F4:68:F8:3D:71:4A:5C:FD:C9:9F:B4:56:16:BF
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer: /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial: 0194BBCDB3CC583C68A985144968735D300C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number: 0BC0
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: gL3lTEXPQKoLBtDMdakbZ8N3V/bNeukLPZgRKQadPLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b3:cc:58:3c:68:a9:85:14:49:68:73:5d:30:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=40f053095b01f468f83d714a5cfdc99fb45616bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:38:9b:76:1b:be:6d:cc:93:fa:59:be:64:
b0:83:74:79:0a:8c:37:33:dd:25:d8:6e:13:29:e8:
2d:b8:02:4e:ff:fd:cb:c0:d7:a6:c1:29:e4:9b:d6:
f8:86:6d:1c:f0:8f:b0:bd:35:23:b9:e6:08:54:ec:
0d:b0:3a:30:0f:e9:09:89:80:33:0d:4f:fd:51:f7:
93:d6:a3:a4:0c:28:2b:bd:6d:3d:22:04:02:32:2c:
49:ad:70:f4:6e:6d:e8:1d:6b:4a:fd:7c:56:c9:1f:
ad:7c:c1:0c:ce:91:fc:0d:71:8e:08:30:80:34:52:
69:3c:35:5c:a7:fa:9d:0a:5c:df:fa:40:94:2f:60:
18:2f:8f:92:87:21:bd:c6:85:47:f3:52:0f:00:5c:
8f:6f:bc:72:b3:5d:c9:63:31:d9:04:df:45:24:e8:
62:3f:9e:51:88:c3:d1:de:6f:33:4d:15:eb:e0:e8:
03:31:5e:90:e1:3b:53:f9:83:57:9b:17:ce:63:8b:
30:d7:86:49:00:61:2f:5a:3f:96:5b:7e:bd:7b:58:
b5:e9:ac:70:c0:c1:85:31:9d:59:5a:c1:92:d0:7a:
fc:b5:d0:6c:f7:49:4b:4c:c1:db:0f:43:10:62:da:
2d:d4:8c:a0:03:78:2d:5c:a3:ff:dc:ac:d2:1e:13:
bd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F0:53:09:5B:01:F4:68:F8:3D:71:4A:5C:FD:C9:9F:B4:56:16:BF
X509v3 Authority Key Identifier:
keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d7:0b:b9:10:3a:4e:5d:c2:c2:96:66:8a:ff:7e:e0:bf:d2:
39:62:ab:a8:fc:16:38:0e:f1:30:87:29:c9:4d:5f:09:ae:9f:
47:9d:13:05:9e:85:fe:18:2b:96:c5:c1:09:ff:ac:11:9e:5d:
cd:2f:55:61:ec:ab:2f:22:95:95:06:4b:16:b0:a2:4e:8d:9a:
91:ac:c8:18:f9:a0:e9:50:83:d4:0f:3c:0b:f5:29:99:b3:13:
7e:fd:10:ad:dc:e1:f5:68:58:73:1d:c0:a2:41:1d:e6:da:64:
86:b9:87:20:b3:dc:8b:ef:c3:d7:e2:82:a7:9a:31:1e:5d:84:
83:cf:9f:1a:9b:af:d1:08:1d:3e:77:34:81:1e:25:24:1a:fb:
1e:07:f3:ea:22:75:68:5e:3f:eb:0b:a4:3d:86:e9:67:da:36:
f1:b0:bd:28:ce:08:f2:53:f0:a9:28:fc:0a:9b:9a:d5:7b:d0:
c4:2b:3b:37:d9:e2:36:f4:6c:fe:63:8a:46:b5:83:17:43:ff:
3a:40:e8:32:74:f1:86:cd:30:af:02:23:38:0a:5e:5a:ac:50:
48:b3:2a:08:96:47:f1:21:58:23:33:db:68:7d:fc:5b:c5:c0:
1c:97:d0:a1:53:73:28:48:fa:b4:2f:ee:0e:12:0d:ad:58:50:
fc:a9:f1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:15:35 2025 by rpki-client