Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.mft
File: bIlKsevTD7N84imjdNPjE52QUY8.mft (raw, json)
Hash identifier: WT33YU4zMKQy7Yneki0tsJRqUs27+FUCQzk742devR8=
Subject key identifier: 0B:F7:7E:80:03:1C:7E:2C:E4:19:7C:1A:2C:00:2E:47:3B:4D:4E:98
Authority key identifier: 6C:89:4A:B1:EB:D3:0F:B3:7C:E2:29:A3:74:D3:E3:13:9D:90:51:8F
Certificate issuer: /CN=6c894ab1ebd30fb37ce229a374d3e3139d90518f
Certificate serial: 0194BCAA06BA4BAB1978ED34C4AEDC103A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlKsevTD7N84imjdNPjE52QUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.mft
Manifest number: 046A
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: bIlKsevTD7N84imjdNPjE52QUY8.crl (hash: raarvVPZNpGPifYTvRFl0nnwxXj8yKZoaWWhgbGoIyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:06:ba:4b:ab:19:78:ed:34:c4:ae:dc:10:3a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c894ab1ebd30fb37ce229a374d3e3139d90518f
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=0bf77e80031c7e2ce4197c1a2c002e473b4d4e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:51:54:cc:69:c5:29:70:0d:0a:e4:73:81:
5c:fe:be:7b:bc:6e:b2:eb:23:67:70:49:93:75:70:
b9:25:63:ca:69:9a:fb:0b:ba:a2:35:bb:6d:e9:d4:
11:63:43:00:3f:fc:8c:04:cb:e6:0b:27:cb:21:2e:
9d:e9:41:64:4c:0b:bf:b5:c2:fc:e7:d7:4e:f3:67:
43:70:e1:20:d0:65:29:a7:4b:03:71:ad:1d:6c:69:
b1:be:b9:f7:d4:a6:d0:ce:e0:68:4a:f3:ab:99:76:
c6:cb:21:78:d4:12:ac:a0:7a:6a:23:f2:1b:be:1b:
2a:ea:1c:62:d2:21:f0:a8:63:de:17:28:43:b1:72:
87:8d:81:5e:8b:4d:a1:d6:81:58:83:79:87:2a:de:
ad:79:d0:be:12:c9:90:0d:80:72:5c:24:8c:b4:59:
1e:25:ef:93:7a:18:84:57:0e:7b:54:79:bf:c5:f8:
f3:66:20:7e:2d:df:be:54:85:10:29:da:aa:35:5e:
10:d7:e5:f2:2f:6b:9f:85:f4:dd:c4:0a:af:99:5f:
a2:29:6f:b9:20:21:13:7a:45:1b:84:b3:bb:9e:29:
ce:d9:3c:de:9a:65:81:45:5b:0c:56:4a:24:c8:14:
a8:04:fc:f4:ce:24:36:63:19:3e:c8:74:fb:97:ca:
09:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F7:7E:80:03:1C:7E:2C:E4:19:7C:1A:2C:00:2E:47:3B:4D:4E:98
X509v3 Authority Key Identifier:
keyid:6C:89:4A:B1:EB:D3:0F:B3:7C:E2:29:A3:74:D3:E3:13:9D:90:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlKsevTD7N84imjdNPjE52QUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faf76-1bc2-4721-9498-a1ae59e16873/1/bIlKsevTD7N84imjdNPjE52QUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fe:b0:4b:50:70:66:bb:a0:ec:81:99:bd:f5:6b:a7:ae:c2:
d4:9d:c7:34:86:ee:91:8d:06:88:c3:7c:85:7e:ed:27:66:fa:
3a:76:46:b2:e0:be:07:b8:0a:a5:43:09:87:f6:90:e1:eb:bc:
7f:c8:44:9a:7c:14:b1:0e:52:0f:e3:2b:7c:37:15:83:36:23:
13:fe:46:ce:dc:dd:d0:71:a3:1e:d3:a7:23:a4:82:cd:99:8d:
14:f7:12:c4:a8:27:57:95:5b:09:67:08:7d:f1:c1:49:e2:13:
81:7d:37:5a:60:c9:25:94:bb:9f:54:25:bf:c8:ec:cf:2c:d0:
54:26:dc:75:91:b3:29:03:9d:d7:cd:95:8a:7b:09:cf:e5:24:
55:4a:e4:d6:c7:04:75:1c:2a:f3:7d:55:ad:46:a9:d0:bf:3f:
4c:8f:dd:1a:3f:51:29:70:ac:01:1c:3c:95:a8:59:4b:a4:f2:
30:3f:e8:e5:52:83:4b:cc:91:55:9a:73:62:b7:d7:59:79:53:
71:67:59:23:58:08:67:56:6d:31:2d:a2:16:2e:8e:dd:02:09:
89:2c:51:b7:06:20:85:b4:ba:52:16:e4:6b:1d:d1:96:41:89:
1c:1e:79:9a:30:9c:6f:fe:ab:49:84:c4:0f:55:cb:82:4c:b1:
4e:47:ad:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:12 2025 by rpki-client