Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.mft
File: v7yKhmj1D9r0lPUoosqv0Ct8Ma0.mft (raw, json)
Hash identifier: eNiJqKDX+k5JG73aFpRPtbWax4S/MeAaU/mBI7Hi/OE=
Subject key identifier: 89:B1:36:88:10:D6:8B:34:6A:C8:AF:6B:D6:B2:B0:F5:DE:3F:3A:1F
Authority key identifier: BF:BC:8A:86:68:F5:0F:DA:F4:94:F5:28:A2:CA:AF:D0:2B:7C:31:AD
Certificate issuer: /CN=bfbc8a8668f50fdaf494f528a2caafd02b7c31ad
Certificate serial: 0194BCAA00AB3BD323EFE7E120FCC2175AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.mft
Manifest number: F3
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: v7yKhmj1D9r0lPUoosqv0Ct8Ma0.crl (hash: EA/1+tx15eO51/CW/FBso8wq4YiTZrv2pOMg7cmtj0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:00:ab:3b:d3:23:ef:e7:e1:20:fc:c2:17:5a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbc8a8668f50fdaf494f528a2caafd02b7c31ad
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=89b1368810d68b346ac8af6bd6b2b0f5de3f3a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:dc:81:6d:b2:9a:3c:b5:74:d6:f7:f3:78:
cb:09:6f:73:0a:aa:01:36:92:5e:f2:6a:c3:33:93:
d2:40:5e:82:b3:26:55:80:d2:0a:32:6b:32:53:51:
ba:76:9f:6e:b8:22:e7:ed:71:d0:3c:d4:6d:c0:da:
56:26:e7:3d:9e:c9:b4:79:a4:0d:2b:13:fb:ba:b4:
ee:52:c1:2b:23:4d:bc:a0:7a:9f:25:a1:6f:e3:f1:
6c:ff:e0:d5:1b:0c:34:40:d6:e8:70:96:df:1a:90:
87:4c:95:97:a9:ad:ce:40:0a:4a:b2:5a:7f:51:c3:
39:6e:4b:1b:4f:72:9a:58:5f:4c:3e:13:ed:b4:07:
e6:e1:d0:ac:0e:0b:bd:fc:0f:32:9b:07:cf:e4:d8:
7a:a0:95:94:64:86:95:ba:8e:89:99:dd:74:f5:90:
76:7b:39:b2:22:3d:02:24:22:b2:7c:46:fe:98:92:
6f:9d:97:49:aa:9a:76:51:a2:5b:af:d9:02:0b:35:
a6:6b:32:c5:91:f2:9e:b9:2b:88:11:9b:ef:7f:c1:
b8:54:a4:11:b5:82:2f:c7:da:79:42:1c:75:13:c1:
90:76:87:81:65:01:7c:25:71:fc:f0:22:65:80:b2:
99:b8:3b:c4:8b:c8:1b:7a:ac:69:cb:5b:62:65:cd:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B1:36:88:10:D6:8B:34:6A:C8:AF:6B:D6:B2:B0:F5:DE:3F:3A:1F
X509v3 Authority Key Identifier:
keyid:BF:BC:8A:86:68:F5:0F:DA:F4:94:F5:28:A2:CA:AF:D0:2B:7C:31:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb88ae-f020-44d9-b462-da6199b82f11/1/v7yKhmj1D9r0lPUoosqv0Ct8Ma0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6c:06:f0:f8:4c:86:b5:1a:97:f8:4b:6f:d0:d5:27:8b:f4:
98:fa:6b:87:68:54:21:18:8f:59:e9:f8:f2:f6:67:55:ed:bb:
73:e3:57:40:56:e7:91:27:e9:a5:45:5d:a1:05:cf:85:82:b2:
8b:0f:9a:0a:59:4a:24:05:4b:60:74:5c:b1:31:5e:41:75:53:
95:9f:e6:d8:7b:f6:04:c7:15:5a:3b:70:40:65:16:13:c8:36:
e1:37:d7:0c:2d:4c:8c:bf:ec:0e:80:43:15:1f:46:ad:08:89:
75:87:92:e3:73:4a:f6:23:01:2f:a9:0d:be:a9:7d:d4:4d:46:
d0:4b:84:e6:7d:e7:87:92:5a:2f:79:7b:30:08:6b:f6:90:ed:
5b:93:65:b5:92:f1:cb:72:c6:cf:58:e0:fa:83:fb:fc:59:9c:
15:98:7c:95:96:0f:99:6b:1f:2f:8c:90:81:87:56:01:ef:fe:
9c:b5:d9:95:70:2c:90:0e:c1:1d:05:c8:9c:66:fa:b8:e1:0f:
50:69:bc:ad:e2:c9:3e:35:4e:38:c5:12:b2:dc:21:47:a7:fc:
e0:02:5b:e5:76:34:a7:7a:ff:2e:d1:2b:9f:24:f6:ad:39:3a:
d2:5b:10:e2:6a:27:af:c2:ad:e0:be:ac:a3:7a:3a:ac:70:e8:
03:e0:d9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:56 2025 by rpki-client