Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
File: sCBx_ye9CehFJRchNknb9nvK1dE.mft (raw, json)
Hash identifier: euj0txuImZ6qq5nwv5C12+OY73IM4bJVKwM5AB/d+Xg=
Subject key identifier: 63:7C:54:AA:F4:62:2B:A8:DD:97:9C:16:F8:B5:8A:E7:4B:68:69:67
Authority key identifier: B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
Certificate issuer: /CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Certificate serial: 0194BD8548D12D82858DCECE1CB56626BD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
Manifest number: B7
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: sCBx_ye9CehFJRchNknb9nvK1dE.crl (hash: iwBrms9PEbn47NkwPLCJWT8y/Lzlk2kr0PpfAedD8Qw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:48:d1:2d:82:85:8d:ce:ce:1c:b5:66:26:bd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=637c54aaf4622ba8dd979c16f8b58ae74b686967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:66:56:ec:64:99:69:79:17:75:1f:ab:3b:
08:96:25:e0:07:58:e5:62:5a:b7:e7:bc:f2:04:c1:
54:ec:b3:70:22:67:89:3d:aa:33:6f:b8:ec:07:71:
06:85:1f:0f:ed:a5:cd:53:01:fb:c7:d4:bc:3f:44:
de:68:07:01:67:9f:cd:e4:72:d8:5f:c5:08:00:cb:
bc:30:f1:7f:3b:ff:3f:78:af:b1:d5:fd:cf:a9:dd:
a7:44:4d:b5:73:bc:cb:0f:6e:96:4f:41:ba:a4:20:
96:c3:ea:6f:cd:67:b7:42:8d:9e:de:69:93:86:b7:
28:af:8c:e4:fe:5e:90:c6:4b:7c:32:54:36:7c:18:
5a:28:2c:2e:94:0f:b5:60:e6:65:5c:8a:5e:19:6b:
09:ea:40:e9:77:2e:4f:20:af:e6:03:34:3d:55:2e:
e0:2f:bc:70:b7:a4:b0:f4:b8:a8:d5:9c:86:1f:78:
8e:d8:dc:ee:c8:67:50:78:fd:5e:2d:83:df:08:3b:
87:dd:d0:b2:0b:3e:55:4a:57:b9:25:2b:31:eb:c8:
93:eb:c9:7f:db:66:fe:2b:43:60:81:30:b9:87:21:
79:68:f7:90:1c:2c:9f:6e:a6:0a:da:32:22:53:c1:
ae:b4:7f:f5:ca:62:40:50:b6:96:d6:38:15:51:50:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7C:54:AA:F4:62:2B:A8:DD:97:9C:16:F8:B5:8A:E7:4B:68:69:67
X509v3 Authority Key Identifier:
keyid:B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:36:f0:e7:85:c5:0a:79:8c:7b:b6:ee:1e:8b:11:8b:d7:f2:
66:7b:79:80:d1:02:7a:8a:f3:d9:64:47:2f:ce:7a:c1:34:1b:
2e:cc:89:45:ea:6a:66:75:7f:83:87:03:a6:13:83:07:5c:8f:
63:a8:86:c9:63:44:fe:ca:7e:a6:b0:bb:b8:e9:a9:60:de:45:
ba:dd:48:8f:74:2b:2b:bf:b7:d2:08:86:31:03:ac:c2:87:1a:
b8:87:b5:f0:9d:0b:a8:a9:a8:21:1c:8e:a2:d0:a0:d7:b4:35:
da:1d:55:b0:e3:17:c1:83:f7:9b:eb:e7:af:75:ca:1d:fe:e7:
a3:6a:85:43:a0:a6:07:bb:55:f3:04:6f:cc:20:af:76:b3:db:
84:6c:90:96:88:4b:ff:11:2e:ea:e6:23:9e:45:ad:69:b1:a3:
9c:c7:c9:48:52:a1:43:1f:40:f2:94:5d:15:7a:5c:52:79:3c:
5a:1b:bf:ad:8c:e3:e5:b8:d6:aa:8f:a9:3f:a7:86:90:d8:29:
e2:f4:3b:37:22:27:4e:6c:21:99:15:e4:6d:a9:71:e3:b6:c2:
7b:54:48:04:45:a5:43:ad:19:93:7c:af:eb:35:9c:db:a1:ad:
42:96:f6:a8:13:0c:76:09:bb:8b:62:1a:88:17:53:f2:42:f1:
f5:79:7a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:37 2025 by rpki-client