Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebd0c-2991-4583-bfec-7122feafc8c7/1/BcW97HMY-HHVPoZkgvQXM97wlCg.mft
File: BcW97HMY-HHVPoZkgvQXM97wlCg.mft (raw, json)
Hash identifier: 2DE3T+tktX9Z0CIkPZksus8ngNM2C1GWXPFxAAusz6U=
Subject key identifier: FE:6D:C2:48:29:04:ED:A4:10:8D:DD:CE:52:6D:75:87:72:BB:1F:2C
Authority key identifier: 05:C5:BD:EC:73:18:F8:71:D5:3E:86:64:82:F4:17:33:DE:F0:94:28
Certificate issuer: /CN=05c5bdec7318f871d53e866482f41733def09428
Certificate serial: 0194BBCE16CE226222F73948014263024C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcW97HMY-HHVPoZkgvQXM97wlCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebd0c-2991-4583-bfec-7122feafc8c7/1/BcW97HMY-HHVPoZkgvQXM97wlCg.mft
Manifest number: 0B8A
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: BcW97HMY-HHVPoZkgvQXM97wlCg.crl (hash: QX8gQLJeySrWQxbiWwwEbByIMs4O8u5UHu6gB9rY7bQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:16:ce:22:62:22:f7:39:48:01:42:63:02:4c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c5bdec7318f871d53e866482f41733def09428
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=fe6dc2482904eda4108dddce526d758772bb1f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:87:6e:a1:0e:24:51:94:c6:98:95:26:92:
d9:de:db:d2:d4:82:c9:0a:6a:6b:28:c0:a5:63:8d:
50:1a:68:8a:ec:db:d9:76:cc:20:4b:d1:d2:da:bf:
af:8a:43:65:1b:18:16:ba:f4:8a:5d:69:2d:13:27:
0e:73:5d:7d:e1:12:b5:5e:3f:b1:96:6c:33:16:0b:
ce:3a:f3:21:33:a2:9b:4f:24:f1:5d:b3:39:ff:87:
2a:6f:73:1a:65:46:b7:e7:f3:4d:7d:aa:df:ef:51:
af:84:39:b8:ed:eb:4f:b5:7d:18:28:2c:77:f8:d0:
70:ae:fc:4e:f2:0b:6a:e6:16:57:63:ba:54:3a:48:
e0:26:4c:72:1e:d6:42:70:e6:99:89:63:9b:c7:20:
90:b6:74:97:8a:65:b4:7d:4d:57:4d:50:96:b5:2d:
22:98:2c:64:62:a1:21:f6:41:c3:55:83:35:6e:89:
ff:2f:2d:72:a9:c3:87:34:0e:56:66:de:a8:8b:ba:
58:4a:ff:cc:bf:db:50:e0:04:e7:f1:05:40:f1:c8:
0d:2b:a6:99:4e:7e:60:61:d8:91:e7:4f:42:b0:50:
28:76:ec:1c:7e:27:8a:ec:ec:3f:4c:4a:26:cb:65:
9c:21:0d:8c:9d:b5:8d:43:c4:f5:75:45:a7:71:c9:
ff:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6D:C2:48:29:04:ED:A4:10:8D:DD:CE:52:6D:75:87:72:BB:1F:2C
X509v3 Authority Key Identifier:
keyid:05:C5:BD:EC:73:18:F8:71:D5:3E:86:64:82:F4:17:33:DE:F0:94:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcW97HMY-HHVPoZkgvQXM97wlCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebd0c-2991-4583-bfec-7122feafc8c7/1/BcW97HMY-HHVPoZkgvQXM97wlCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebd0c-2991-4583-bfec-7122feafc8c7/1/BcW97HMY-HHVPoZkgvQXM97wlCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e2:d4:3d:d3:e8:29:7b:25:c0:a1:a1:fc:59:c9:fc:87:28:
5c:a4:61:ff:d1:df:be:f6:76:00:a0:bc:04:aa:87:d9:ff:03:
66:66:ae:af:b0:68:cb:e7:09:de:56:2e:c0:5b:1c:b3:a2:fc:
86:a1:aa:9f:8b:19:77:b3:fb:11:d5:c4:16:98:f8:6a:ec:c9:
77:7e:80:66:cb:c7:4c:0c:63:4d:a5:81:f5:d4:05:ba:e4:4a:
c7:55:e8:da:a7:29:b6:11:60:a6:28:fe:0a:e6:0c:40:b7:a9:
e2:4a:f8:e6:46:52:9a:a8:af:25:84:d2:5d:87:aa:78:11:fc:
21:46:e1:03:c6:53:39:60:5a:ef:95:38:58:6b:bd:5c:b6:24:
c9:94:22:da:ca:35:78:f1:d8:25:10:54:d7:b2:28:ef:9d:2b:
7c:76:0f:b9:a2:d3:0b:0a:4a:92:72:38:ff:5d:81:6a:49:4a:
3e:8e:f0:da:08:a5:0e:c4:01:0e:45:84:99:cf:d7:ba:63:c9:
4e:53:88:cf:71:f1:93:c2:2e:d2:04:25:5d:fa:78:8b:c5:5b:
1a:01:e7:1d:10:cd:ae:d6:25:c2:2b:93:35:0f:f6:da:ce:f4:
58:f1:f0:25:cb:f1:e3:32:c8:01:0b:7c:5a:34:b7:bb:89:b2:
58:8d:01:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:09:57 2025 by rpki-client