Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
File: bQ1uHM2JDfL16cFF7LpGiZzOs70.mft (raw, json)
Hash identifier: s/dy7NPsfN+c0Zt7D/CGQd0AXMkWjTAAIJrhkVnAFuk=
Subject key identifier: D6:2C:AD:BF:3A:21:8C:D0:AD:AE:34:7D:10:5B:94:A8:66:CA:05:63
Authority key identifier: 6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD
Certificate issuer: /CN=6d0d6e1ccd890df2f5e9c145ecba46899cceb3bd
Certificate serial: 0194BC3C33A10E7023D4189A62E3D7D38FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
Manifest number: 10BA
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: bQ1uHM2JDfL16cFF7LpGiZzOs70.crl (hash: NpTRQ0FZ0c3BR4tN/0ZTve4ODlSHIuOyZo6sVSuXlZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:33:a1:0e:70:23:d4:18:9a:62:e3:d7:d3:8f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0d6e1ccd890df2f5e9c145ecba46899cceb3bd
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=d62cadbf3a218cd0adae347d105b94a866ca0563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:92:b9:ed:b3:32:a4:f1:63:8d:03:72:8a:
32:f1:8b:1c:1d:d5:1e:f2:b5:7a:2c:95:74:01:2f:
16:62:89:c8:89:0a:22:cc:95:78:c9:74:94:b2:69:
50:f8:67:51:32:f7:d3:69:65:da:49:b1:c5:c5:c7:
ae:c9:a8:93:52:91:53:fc:4b:82:84:40:c7:9e:aa:
a0:17:47:b1:cd:ab:ef:2d:1a:11:5e:22:4e:70:82:
43:17:7a:e5:11:7e:c8:e0:10:52:9e:27:2a:80:24:
5c:ab:7c:72:13:d0:bb:c5:3a:08:a1:c4:54:fa:2f:
92:16:eb:47:ef:92:08:00:c0:c1:30:2f:fd:14:41:
01:40:54:7b:97:3f:2b:82:db:40:d1:1e:79:04:7a:
a6:e8:d5:3e:fa:53:9e:bc:90:7a:2a:09:c9:52:60:
9d:f7:2e:5d:2a:da:e2:b9:6f:40:62:24:ec:46:05:
d8:57:5d:c1:4a:d4:74:65:c6:54:57:20:05:bf:bf:
4f:19:9b:8c:03:20:65:76:65:4f:28:8e:89:b7:18:
28:20:b8:5f:4e:78:0f:ba:77:b8:a1:25:3c:84:fa:
cd:29:1f:88:c0:0a:3b:ea:66:12:73:d7:c5:82:e7:
44:83:6a:4d:81:92:92:30:7e:84:98:f8:c5:df:61:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2C:AD:BF:3A:21:8C:D0:AD:AE:34:7D:10:5B:94:A8:66:CA:05:63
X509v3 Authority Key Identifier:
keyid:6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:58:cb:9a:c3:af:2f:25:8d:f8:44:a0:a6:01:f3:ef:f9:7f:
e9:3d:71:bc:74:1c:68:90:ea:30:a3:d0:00:03:67:da:06:2f:
b1:25:b2:9b:ef:3c:3e:14:44:43:83:97:3f:32:48:c3:19:a4:
3e:a2:c4:45:fe:bc:4e:08:1d:9d:61:36:b9:5c:1c:b2:35:ff:
09:76:b9:a6:c5:81:fc:b4:4a:8e:46:d7:34:0c:60:a9:c9:bf:
2c:25:ae:47:ee:a9:17:d3:bd:fb:74:1f:c6:b0:9c:e4:f7:d8:
33:fb:c9:46:87:54:8d:81:03:93:84:36:7d:bf:00:fa:f6:b2:
1d:1a:a0:ca:7b:88:1b:e4:41:fa:17:7b:15:b4:88:07:ec:c8:
64:87:ac:f9:50:13:57:09:59:fe:4c:e5:00:25:d7:71:13:d6:
1a:66:e6:5a:75:40:b2:54:23:55:2d:d5:42:58:7a:57:fb:6e:
16:d7:fd:af:84:d2:31:aa:bc:6a:42:9a:ec:70:c9:82:93:f1:
87:c9:52:58:cd:47:d1:a4:08:23:a8:8c:36:86:02:0f:60:84:
46:e2:53:f7:4d:8e:f9:e3:eb:b4:48:91:3f:72:f2:cd:cd:e9:
90:d6:db:39:10:37:d5:29:34:40:ac:ba:19:b1:19:76:fc:61:
de:00:22:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:46 2025 by rpki-client