Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
File: d_M68l-VqylxEYjp_-pQzMshHXY.mft (raw, json)
Hash identifier: Mx4zKMMCYFhjAXhqL86A1UaGideclfYk24doLBpEaEs=
Subject key identifier: 16:28:43:A6:92:67:E0:BF:80:2F:FC:E8:AE:3D:14:88:3D:86:7A:FE
Authority key identifier: 77:F3:3A:F2:5F:95:AB:29:71:11:88:E9:FF:EA:50:CC:CB:21:1D:76
Certificate issuer: /CN=77f33af25f95ab29711188e9ffea50cccb211d76
Certificate serial: 0194BD17AAE94721CE9144C43180777991E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
Manifest number: 0BA0
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: d_M68l-VqylxEYjp_-pQzMshHXY.crl (hash: pQE49wptuoI/ddmuJ16HllxFZt/4GuHJYg6gDnlg/Gk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:aa:e9:47:21:ce:91:44:c4:31:80:77:79:91:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f33af25f95ab29711188e9ffea50cccb211d76
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=162843a69267e0bf802ffce8ae3d14883d867afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:7d:5b:d6:93:0b:a2:58:cd:63:d0:9c:82:
c7:3a:9f:93:69:ab:34:bf:e1:4d:59:63:66:3b:db:
e3:fa:31:05:e0:99:be:9c:ec:21:61:09:e7:54:5e:
bd:1a:ad:a2:aa:c1:04:42:d1:4b:d3:65:11:84:c2:
8e:cc:3d:ed:11:80:e1:22:b0:1e:b3:90:cf:fe:10:
ae:d8:fa:8b:d5:f5:30:14:42:17:ff:18:99:51:8d:
d7:f8:73:1d:4a:d4:4a:f3:b1:02:98:cc:95:90:7b:
f0:4d:2e:df:2a:cb:35:e3:29:4a:08:74:41:80:d2:
67:04:d4:df:95:f0:9c:55:40:39:62:97:92:0e:ee:
02:a2:20:ef:ac:6a:52:ca:99:b1:83:ae:32:3d:67:
c2:07:fe:91:ee:cd:89:ff:1c:a4:2f:9d:54:5e:0d:
b6:e9:f1:67:bc:f8:15:2a:ef:42:49:12:03:94:db:
70:14:d8:b5:95:30:95:b3:b0:fc:c8:97:e9:35:b8:
40:2a:b7:06:27:c5:ea:c2:76:83:0a:cd:cf:54:98:
aa:6c:3e:a1:4c:37:bc:9a:a0:4f:71:df:16:8e:9f:
6d:41:78:fb:02:d1:49:17:bc:0e:f2:c2:95:e4:64:
67:04:b5:29:9e:16:a7:da:66:bf:29:ac:b4:84:1c:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:28:43:A6:92:67:E0:BF:80:2F:FC:E8:AE:3D:14:88:3D:86:7A:FE
X509v3 Authority Key Identifier:
keyid:77:F3:3A:F2:5F:95:AB:29:71:11:88:E9:FF:EA:50:CC:CB:21:1D:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f2:e3:4f:4c:18:31:33:52:70:9e:3c:85:e7:3b:e1:bf:5e:
57:5c:91:dd:b1:b4:2f:a4:86:80:23:90:d9:8c:25:e5:f5:5f:
5c:6b:97:30:f6:96:a1:8d:2e:86:cd:37:13:a4:40:f4:d2:5e:
93:66:8e:0f:94:a2:c1:12:15:be:d1:45:14:6d:33:46:34:a3:
28:b4:7d:73:d6:b2:9f:cb:8d:1f:a8:0d:d5:3d:f2:49:48:75:
0b:58:f1:da:22:e5:e1:68:66:95:3a:04:e0:23:c0:8a:62:34:
e9:74:07:f2:30:3e:1e:aa:b7:c8:5b:5c:b2:85:79:16:70:af:
30:a8:63:ae:e6:b3:e9:0f:ff:87:c2:c9:67:fd:9a:eb:ff:74:
c2:fd:27:67:22:3c:10:7f:fb:32:23:1d:82:d0:83:3d:2c:88:
51:49:84:0f:bf:65:b5:31:7c:28:30:bc:db:71:0c:9c:94:db:
26:2a:fd:50:33:8d:bb:fd:8c:ee:3d:35:4a:3d:a2:7e:88:cf:
ce:34:3e:18:aa:f1:86:5f:92:66:37:09:bc:2d:2f:5e:6d:ed:
59:61:9a:57:2b:d5:96:8d:a4:6a:bf:d7:ab:cc:37:bf:cd:aa:
74:47:8e:2f:81:9c:76:21:f7:8c:98:88:6d:28:96:9c:2c:d8:
03:ea:96:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:08 2025 by rpki-client