Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
File: v0fz41wqjMrpbOFyEPkTq-fpI_g.mft (raw, json)
Hash identifier: Movu3EGCl6YQz1mgWKehtSfGQ3bqEhDciU8QcBQ09t4=
Subject key identifier: 7F:EA:E6:B8:91:86:15:1A:44:FF:09:50:1E:56:D4:BB:40:41:C7:93
Authority key identifier: BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
Certificate issuer: /CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Certificate serial: 0194BCAA1CCB51208D389BBFA187DD61432D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
Manifest number: 1235
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: v0fz41wqjMrpbOFyEPkTq-fpI_g.crl (hash: FDF7dUQBF9Mmjaz2sRu9JK6Nco9qPL2IfFHfku1Vvxs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1c:cb:51:20:8d:38:9b:bf:a1:87:dd:61:43:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=7feae6b89186151a44ff09501e56d4bb4041c793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:53:69:29:b0:a9:69:a0:69:69:0d:e5:45:
de:77:cd:fd:3e:c1:58:c5:83:76:7b:b8:63:9d:f5:
07:4e:31:87:b9:bc:c9:37:04:23:4c:21:e7:ea:d5:
4d:ba:27:fc:e8:4e:66:de:92:e1:3d:93:59:56:b1:
5c:bd:b9:08:06:fa:f6:ee:4c:cb:f7:5a:d0:c1:21:
8b:a8:2a:af:70:99:bf:21:1c:0f:df:12:a3:1d:ac:
2a:be:be:03:75:04:96:d6:5a:47:f5:d0:46:01:60:
f7:50:df:19:01:94:40:60:e5:23:e9:95:56:20:aa:
21:24:db:44:db:ee:3a:a3:a0:d4:86:e9:68:73:1c:
18:fa:09:bc:aa:a1:66:ab:17:ff:70:fe:d1:20:18:
13:9e:44:89:bb:36:79:8b:9a:c8:18:f0:75:d0:69:
6c:95:6c:a9:01:93:a0:c7:4c:d9:8b:ea:ec:81:56:
b3:84:77:1e:b5:b5:11:31:58:bb:19:e8:30:7e:fe:
59:93:2c:96:e2:3d:95:ef:17:f7:b0:3d:89:8d:91:
ab:bd:dc:97:fb:7d:ef:c8:e1:ea:40:f8:75:61:bf:
ac:8c:13:57:d2:51:fa:98:03:7a:28:fc:aa:bb:f9:
8e:2c:d6:e9:61:39:16:8b:d1:96:e2:6d:17:ee:b3:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EA:E6:B8:91:86:15:1A:44:FF:09:50:1E:56:D4:BB:40:41:C7:93
X509v3 Authority Key Identifier:
keyid:BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6c:e0:97:e0:34:a3:41:0c:eb:36:b0:20:9f:3e:bf:78:e5:
a3:50:e9:4e:5a:b0:94:e5:2d:30:85:cd:a7:7b:db:f3:99:c9:
2a:03:dc:dd:49:46:6f:2c:c8:c6:1a:dd:fd:09:3c:d3:b0:aa:
d7:b0:46:9a:21:88:1f:86:20:32:0c:45:a1:5d:44:6e:76:89:
6c:d7:d3:fe:1e:0d:ff:16:b0:e8:cc:f5:5a:fc:cd:6d:62:93:
7d:2d:80:b0:62:ee:a6:e0:a2:e0:7b:ba:db:2b:be:26:0d:cc:
2c:60:9a:49:d7:f0:6b:8f:f6:f2:b8:86:cb:0b:5a:24:f2:5d:
bc:8f:0b:9e:f7:7c:c0:cb:79:d4:42:16:b3:06:16:a6:7d:36:
b8:f7:bb:c5:52:b8:ae:33:66:30:0b:5e:dd:86:80:a2:e2:6b:
3f:c9:6f:3d:db:9b:42:63:ce:5d:63:68:48:27:aa:6b:37:cc:
cd:dc:00:c8:c7:78:1c:de:3f:5a:bb:e4:ef:35:96:c8:15:b5:
ab:c8:07:7b:b3:c3:0e:d4:58:73:f7:2e:87:4d:98:89:7b:3c:
86:11:86:bc:c8:8f:9c:80:6c:f8:11:96:88:ba:13:17:28:47:
5f:36:4b:1c:b5:1a:31:70:ac:1d:1d:30:01:fd:60:1b:d2:ab:
c6:e7:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:03:18 2025 by rpki-client