Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
File: u8v1S15m1hoXV2yMc2vyZy47mho.mft (raw, json)
Hash identifier: 8KdAvtI1fVrXJRLyUSvWWVywnMObFhH/j48BCa7Rqqs=
Subject key identifier: 79:B3:2C:0E:DA:17:B9:E6:99:07:10:DC:3F:42:97:0D:75:22:C4:68
Authority key identifier: BB:CB:F5:4B:5E:66:D6:1A:17:57:6C:8C:73:6B:F2:67:2E:3B:9A:1A
Certificate issuer: /CN=bbcbf54b5e66d61a17576c8c736bf2672e3b9a1a
Certificate serial: 0194BCA9C9532A23DDA35F00A710056E2E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8v1S15m1hoXV2yMc2vyZy47mho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
Manifest number: 058C
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: u8v1S15m1hoXV2yMc2vyZy47mho.crl (hash: vIpu1diHXENucHgTJzAO/gY7BBWsIPxdKsqvfvPGzo4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c9:53:2a:23:dd:a3:5f:00:a7:10:05:6e:2e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbcbf54b5e66d61a17576c8c736bf2672e3b9a1a
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=79b32c0eda17b9e6990710dc3f42970d7522c468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:c2:16:94:f1:31:a8:a0:a9:49:81:8d:9e:
37:6a:71:03:58:b6:54:3c:01:d2:80:02:7e:32:5a:
39:2e:a0:2f:e5:83:4e:e9:af:1e:64:68:bf:ab:34:
f9:f9:6a:6e:d3:6c:aa:6b:8f:0f:cc:64:d3:e9:7d:
ab:df:37:48:0b:a0:f8:b4:59:97:b2:f3:b8:9a:f0:
79:14:5a:da:c3:ba:00:f4:ff:b5:7b:a0:a2:39:d5:
ad:71:c5:ce:35:db:a9:96:3d:76:bb:68:a4:47:d3:
cb:dd:27:f5:ca:ce:b2:42:88:da:2b:55:11:15:79:
81:70:9d:67:a1:a4:8e:87:b9:f0:71:6e:80:8e:5f:
52:2a:ad:99:37:95:dd:b9:71:22:22:05:33:c1:85:
0e:c1:82:0e:cd:15:bc:40:5c:7e:4f:3e:f2:3a:df:
11:d8:ee:39:dd:b6:23:01:f7:20:8b:88:04:53:f6:
66:77:b2:41:0e:86:fb:3d:c8:6d:ef:f7:80:b8:c7:
e7:2d:3c:b2:c2:53:69:e2:0f:f1:87:e8:64:a7:77:
da:50:a1:c3:ec:68:e6:12:ce:8d:b5:fd:2e:30:4f:
5f:96:4a:64:3f:ca:69:de:a9:d5:cb:7c:3c:aa:e1:
86:ad:41:55:c6:95:46:f8:eb:3c:ec:dd:3e:a1:7e:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B3:2C:0E:DA:17:B9:E6:99:07:10:DC:3F:42:97:0D:75:22:C4:68
X509v3 Authority Key Identifier:
keyid:BB:CB:F5:4B:5E:66:D6:1A:17:57:6C:8C:73:6B:F2:67:2E:3B:9A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8v1S15m1hoXV2yMc2vyZy47mho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:23:28:3c:d5:9a:44:f0:86:65:49:11:53:14:e0:d6:55:7e:
91:bf:a4:36:f2:83:0f:48:a5:9d:51:a9:34:3a:e0:6b:c9:25:
38:6a:6e:63:b9:78:17:75:16:d0:9a:41:d7:5d:53:7a:27:71:
c2:b3:03:92:37:36:a8:d7:f3:07:50:64:10:b4:26:76:99:a3:
04:39:a7:a7:0e:ab:21:f8:5e:7a:87:ca:2d:de:8c:f9:5e:73:
2c:6c:a2:72:e8:f2:d4:06:3e:f2:d0:e1:e1:11:e2:db:e8:24:
f6:b2:20:18:3c:8c:fe:ce:ec:3b:09:39:eb:06:35:a4:95:22:
4d:c7:ad:8a:5c:b1:01:cf:7d:56:6d:e4:99:8d:5a:2e:b6:b9:
7d:f7:03:bb:7e:e8:e8:1d:28:8a:93:2c:9d:3b:94:79:5c:14:
a6:a9:c8:d7:93:b8:a0:c6:0e:f6:94:44:14:4c:48:7a:f9:8d:
40:fa:c6:61:bc:e0:bf:b9:fe:a3:9a:02:bd:9d:93:27:01:11:
72:fa:c6:98:fc:3b:c9:22:21:6a:a4:3a:54:66:b5:6d:df:1e:
b3:d1:3c:02:d4:8d:13:df:3b:98:78:66:70:79:4c:59:9c:ca:
79:8b:1b:78:c5:e0:41:aa:63:9f:6b:6d:f1:43:26:25:0f:d7:
8d:81:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:53 2025 by rpki-client