Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: eeH6GsvRsaVD0sPAkussdELtnKxBWHn9gnCMgVFpY40=
Subject key identifier: 13:4D:96:0F:C6:A0:8F:F6:EB:FE:2E:CD:C8:04:0C:13:60:B1:27:70
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 0194BCA9E4FB30D2B24805AB348C1BE48527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 0B79
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: Kmoaf5tNj6nf7EezTpR+i5SW8/68JPKuFvZcDEE3EXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e4:fb:30:d2:b2:48:05:ab:34:8c:1b:e4:85:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=134d960fc6a08ff6ebfe2ecdc8040c1360b12770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:0b:01:3e:26:75:e9:89:e0:af:d3:c3:86:
4f:c2:32:84:1e:0a:5d:c3:f2:23:b5:cb:da:e9:90:
0f:1d:b8:5d:a8:72:1f:dd:a2:36:80:97:a2:be:31:
78:03:43:b4:30:4a:f5:e5:bd:85:ce:cf:1f:74:a9:
20:bd:b9:92:6b:75:29:ab:be:3c:01:a9:d7:b4:20:
c0:30:3d:1e:35:49:74:45:85:09:54:25:e3:1d:11:
02:bd:09:0b:ad:65:80:af:10:e1:25:7f:66:8f:87:
0e:17:da:83:5c:ab:46:37:ec:83:37:c6:7f:0f:95:
f7:b8:e2:53:70:6f:91:cf:ea:56:8f:2f:7a:b6:59:
00:93:d4:e5:32:20:12:f5:4f:40:0a:ab:da:43:bf:
35:00:40:4e:4b:2a:a7:80:ea:44:fd:72:08:06:55:
07:18:a0:f6:0e:f3:d5:71:0c:46:b0:2b:84:dd:bf:
50:56:ce:7b:3d:77:67:cb:46:16:9e:a4:7b:72:4a:
bb:44:c3:6d:76:cb:29:09:1c:8b:1b:2b:35:4c:7d:
0b:c9:e6:50:94:db:fb:6e:8f:50:01:ca:10:ac:bd:
4d:25:67:68:56:e7:57:79:ce:94:03:eb:cc:b3:84:
48:4c:94:d2:13:86:c8:f2:b3:de:85:9b:60:ab:34:
d1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4D:96:0F:C6:A0:8F:F6:EB:FE:2E:CD:C8:04:0C:13:60:B1:27:70
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d0:51:a2:24:18:17:1f:35:73:63:4a:94:3f:45:80:cf:81:
35:5c:94:37:44:71:25:e3:e6:3a:10:e7:fd:5f:61:bc:d6:31:
e2:3c:be:f3:e0:44:08:2e:c0:00:94:7e:5b:55:99:ad:b3:7a:
42:7c:ca:bd:11:54:ce:9b:d2:4c:09:76:0b:7d:57:7b:8a:ea:
43:68:0a:92:20:b8:69:6e:68:1d:72:8b:e7:f0:2c:5a:0d:d3:
8e:92:02:be:47:50:f3:f3:96:88:8d:4d:94:31:5f:b4:50:07:
2e:93:1d:a3:71:b3:e4:87:a8:47:f0:eb:27:c1:20:ed:cc:a9:
de:87:21:22:24:e4:61:9e:b7:00:b9:83:b4:bb:ac:8b:66:3a:
04:bc:0c:b8:b0:00:6c:27:17:0a:81:76:1c:98:41:19:c1:9a:
7d:01:e2:be:07:65:68:30:ac:67:ca:17:8c:87:5b:25:d3:af:
4c:92:74:e2:b6:06:2b:5b:84:cb:b1:0d:98:28:f3:f9:af:23:
0e:a2:b7:29:0a:e0:94:05:d5:31:df:56:8e:c5:a3:76:3e:b4:
b2:9d:9d:ab:6c:28:50:15:10:b5:91:ef:ec:7e:3f:da:bf:0c:
6e:ff:c9:6d:c8:e0:a4:89:81:e6:d7:3e:1e:b3:0c:00:4b:82:
38:0a:17:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:50 2025 by rpki-client