Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft
File: sBblecxJQEjsEqI_8lOacAS7duU.mft (raw, json)
Hash identifier: T/4Dwqud955g4KUF2whnvcobLZBKg62MUl6oRsaK+fI=
Subject key identifier: AB:53:1D:2C:9A:A1:9E:BE:A5:C8:95:4C:FF:B6:74:DE:47:12:C8:AD
Authority key identifier: B0:16:E5:79:CC:49:40:48:EC:12:A2:3F:F2:53:9A:70:04:BB:76:E5
Certificate issuer: /CN=b016e579cc494048ec12a23ff2539a7004bb76e5
Certificate serial: 0194BBCE2A69A12B85B73D7465632108B876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBblecxJQEjsEqI_8lOacAS7duU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft
Manifest number: 0C6E
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: sBblecxJQEjsEqI_8lOacAS7duU.crl (hash: huPvDFzkrduOGcZCqnvouCQx9ndKoTxAE74DzynNTG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2a:69:a1:2b:85:b7:3d:74:65:63:21:08:b8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b016e579cc494048ec12a23ff2539a7004bb76e5
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=ab531d2c9aa19ebea5c8954cffb674de4712c8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:2b:df:1b:19:62:f6:d9:77:17:9f:f1:34:
95:4c:9a:6d:a2:b8:e1:e4:89:84:76:28:3c:91:77:
15:61:d5:7c:4c:5f:bf:68:86:ab:5c:a9:53:ed:55:
f0:be:eb:a2:be:e8:74:cf:a6:93:fd:e9:c4:68:cf:
88:b2:5c:0e:08:7a:b7:92:8b:ad:d7:f5:9f:80:d9:
cd:d1:a0:74:ff:d7:06:1b:a6:30:71:8d:e4:5c:2c:
f3:3b:ec:35:b6:e3:bd:f7:24:ec:95:f4:6f:ac:0a:
47:b5:47:89:ec:a3:9d:82:f4:4f:f9:fe:48:25:ab:
ba:7f:e3:07:e8:27:dc:ce:b7:aa:1e:9f:e8:2b:65:
5d:eb:c4:4c:3c:c1:4e:d1:99:2b:f3:f5:2f:b8:1f:
a5:89:2b:eb:d6:c0:4f:d5:e6:13:16:0f:97:54:69:
ad:df:f8:21:a7:ce:30:02:5c:8c:71:eb:ef:ab:ee:
d6:65:04:f0:1a:8c:4b:c8:be:1f:cf:d1:23:e4:89:
38:c8:5f:12:33:ff:db:a1:2b:77:d9:30:0f:fd:9f:
e8:9a:13:60:6b:e8:21:39:dd:49:0b:cc:93:27:8b:
e5:05:57:21:dd:21:15:06:91:75:5f:37:20:8b:05:
8d:2f:2f:d4:a6:55:4b:72:41:67:ce:67:1a:25:c7:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:53:1D:2C:9A:A1:9E:BE:A5:C8:95:4C:FF:B6:74:DE:47:12:C8:AD
X509v3 Authority Key Identifier:
keyid:B0:16:E5:79:CC:49:40:48:EC:12:A2:3F:F2:53:9A:70:04:BB:76:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBblecxJQEjsEqI_8lOacAS7duU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1d:96:e6:04:4b:85:3d:d3:db:99:71:65:f8:c3:5c:82:d7:
c3:8c:62:2d:b8:fc:d1:8b:d3:bc:47:17:13:fe:bb:b2:c4:9c:
78:9b:e1:a0:68:6b:48:97:22:87:5c:29:b0:eb:83:9f:81:15:
bb:10:a0:d3:e7:bb:27:ec:b7:cb:a3:7c:aa:ed:be:4e:18:a1:
43:6c:2d:d2:32:30:bf:96:ab:05:02:fc:a6:71:2e:74:3b:c2:
7b:dd:72:d7:2f:67:8e:95:0d:c3:90:81:7f:8d:55:fe:d7:26:
ba:0e:a8:aa:ea:ad:42:7c:b7:b7:d4:5e:bd:f0:2c:d5:3b:f9:
13:c6:bb:e7:33:45:98:e7:4a:b1:1d:26:95:74:18:f3:1b:99:
08:42:96:fc:ea:20:0b:83:07:53:de:fc:8b:e0:a4:8b:f7:77:
44:71:c0:0a:29:03:12:5c:ad:83:2d:38:5c:bf:65:a9:17:37:
84:b6:c0:5a:0b:61:cb:47:ab:1d:aa:1c:64:2f:50:e6:43:c2:
49:a3:8d:7d:fe:58:cb:4e:3f:98:23:3a:97:11:87:75:f7:4f:
e2:85:0e:81:9a:07:66:b5:d4:6b:ca:0a:f2:00:6d:89:95:67:
2e:d9:12:6f:b3:cb:f2:15:f8:85:ae:52:3a:93:4e:ef:82:2a:
ae:f5:62:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:44:04 2025 by rpki-client