Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
File: RBme-tyIgD3BoGVhD2R8_c4w9UE.mft (raw, json)
Hash identifier: QR3o8HTcZA+nTYDVpyb2vQeDdclGw4T0CWyqw2S2FPY=
Subject key identifier: AF:83:31:D4:E7:E5:52:A2:74:98:1A:F8:92:03:8D:8B:CC:E0:51:19
Authority key identifier: 44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
Certificate issuer: /CN=44199efadc88803dc1a065610f647cfdce30f541
Certificate serial: 0194BC3C862423C255E01ABD945567E20FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: RBme-tyIgD3BoGVhD2R8_c4w9UE.crl (hash: lDwXcKuicnbCvFMxiG+DPL+Ljri5JRMZKjxSJHwWZ4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:86:24:23:c2:55:e0:1a:bd:94:55:67:e2:0f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44199efadc88803dc1a065610f647cfdce30f541
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=af8331d4e7e552a274981af892038d8bcce05119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:c5:65:6f:d4:19:42:ec:60:3b:35:0d:f0:
23:01:d1:28:f2:dc:df:fe:e1:02:45:c6:39:77:6f:
72:19:3f:15:3c:38:ad:fc:65:2d:3f:af:7e:9e:d8:
9a:5c:29:b8:de:36:43:a4:30:0c:61:4c:94:71:7f:
30:81:f2:d4:f8:12:04:3d:ca:7f:16:76:e3:bd:2b:
00:8e:00:93:c3:9d:98:6f:c5:12:2c:e2:1c:51:13:
de:34:dd:89:72:15:93:d6:fb:5c:90:42:40:77:fd:
05:b2:c7:dd:2c:4a:1e:1b:5e:4a:88:72:2f:b4:59:
87:2e:c7:e7:01:de:b8:13:cb:75:28:15:4a:45:8f:
ed:6f:0f:f9:c9:c2:4b:c6:31:15:18:dc:9c:c1:69:
81:93:4a:ec:27:a1:76:d0:a6:cd:b3:2c:2d:54:b3:
3d:d8:80:52:01:77:ec:cb:29:36:9f:08:9b:26:95:
eb:32:08:6e:bb:0a:b5:25:06:48:9a:4d:22:a6:e5:
79:03:f6:0a:e5:bc:ab:16:6d:57:03:3a:ea:d2:d9:
89:f2:32:6b:30:ad:15:84:1a:98:05:9d:80:d2:fe:
63:77:87:68:77:99:44:51:ba:fd:e9:68:3f:2f:a2:
49:38:17:85:1b:01:83:a8:b6:02:37:21:3c:05:19:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:83:31:D4:E7:E5:52:A2:74:98:1A:F8:92:03:8D:8B:CC:E0:51:19
X509v3 Authority Key Identifier:
keyid:44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cc:39:f5:e1:f2:a5:fb:3f:ca:1a:a4:09:dc:4a:4a:91:cd:
ef:7f:a1:79:b0:52:20:11:d9:e8:3d:18:22:ba:d2:29:ef:87:
ee:6e:54:d2:c3:26:64:6f:af:0c:7e:ad:b4:ea:23:28:5c:85:
a4:0c:99:d0:82:ee:5a:aa:83:22:8d:66:b7:2c:71:b8:07:c0:
16:fc:3c:a4:42:13:26:2a:54:0f:f3:96:34:54:9e:13:f0:6d:
73:90:65:b9:17:fb:0d:b7:db:df:22:2f:f1:54:d9:ab:7f:f0:
df:fe:31:27:b2:ec:9f:92:5a:f1:57:5f:22:b0:1b:9d:73:3b:
98:3a:fc:11:fa:ef:bc:3e:ab:d6:2c:d9:57:45:68:2b:90:94:
55:ef:13:6c:18:8a:70:79:7f:f7:ba:eb:67:05:e2:03:34:c3:
f9:0d:27:c8:16:d1:7c:3e:09:6f:b0:da:bd:6f:c9:a7:84:ce:
95:23:ac:8e:d0:04:81:2f:4e:2a:80:19:3b:ba:78:5f:79:b9:
77:4e:39:09:11:8b:14:b8:03:f5:5b:de:80:82:d7:90:86:f6:
71:47:0f:f5:d2:2e:f7:90:62:7d:af:17:b9:77:63:77:15:5d:
8a:38:ba:b7:c6:82:2f:57:a7:f2:34:83:11:5a:87:7b:c3:b0:
b2:77:71:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:41 2025 by rpki-client