Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
File: bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft (raw, json)
Hash identifier: CXDfFLFUvVxRn6qTHUR0hJ+ZkcQKkLxYfbN5do1xuFs=
Subject key identifier: 74:49:14:80:AB:7C:3A:6C:60:AA:F3:F3:93:C9:D6:E4:89:0C:65:77
Authority key identifier: 6C:70:D6:EE:C2:B5:60:5F:8B:1B:E6:CE:84:39:5F:24:6C:42:DF:1C
Certificate issuer: /CN=6c70d6eec2b5605f8b1be6ce84395f246c42df1c
Certificate serial: 0194BD854AE66C42E6C95FF35F9F92A17160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHDW7sK1YF-LG-bOhDlfJGxC3xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
Manifest number: 024A
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: bHDW7sK1YF-LG-bOhDlfJGxC3xw.crl (hash: jYHUkvrrSRUB8F3/7rD7rCp0xFUYmHtJi4nxWcwBXkk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4a:e6:6c:42:e6:c9:5f:f3:5f:9f:92:a1:71:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c70d6eec2b5605f8b1be6ce84395f246c42df1c
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=74491480ab7c3a6c60aaf3f393c9d6e4890c6577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:71:3a:d2:6d:8d:0b:dc:b7:6b:98:f3:46:
dd:bc:ae:75:ff:0c:db:1b:e4:5c:bf:64:ac:b4:c7:
94:8d:61:d1:9e:f9:2c:c7:05:22:49:1c:27:14:fe:
a2:53:2c:98:f4:19:1a:49:24:86:ba:2b:41:08:fe:
74:65:46:c2:2e:1a:32:2e:bb:68:c5:3b:c7:05:03:
c3:a8:7b:ab:29:af:ab:1a:9b:25:4f:e3:6c:4e:f5:
45:11:fd:50:4d:68:f8:e3:2b:c9:f0:80:62:cc:9e:
f0:70:76:91:7d:98:49:b0:d8:c5:7b:91:9f:07:d5:
ef:de:a1:e5:32:17:9e:36:47:2e:db:79:ca:3f:7b:
97:7f:e6:67:29:4f:6c:4e:21:33:a7:80:cb:3b:c6:
77:c1:1d:85:0d:7a:1e:1c:47:a4:12:31:82:72:32:
ad:17:89:bf:bb:1f:9b:ed:f8:f5:f1:7f:fc:d0:a4:
98:95:cd:b6:1f:5a:a2:e8:18:d4:a9:ee:9d:c7:ec:
dd:00:37:ea:c4:19:71:6c:f4:c3:3a:4b:3f:2b:cb:
06:31:84:f3:63:55:cc:37:fc:34:01:05:1f:bf:fb:
8f:92:a7:a3:d3:09:53:e1:6d:72:5f:8d:60:97:01:
1e:1d:86:4b:63:6f:97:1b:61:b6:73:09:3e:e1:7e:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:49:14:80:AB:7C:3A:6C:60:AA:F3:F3:93:C9:D6:E4:89:0C:65:77
X509v3 Authority Key Identifier:
keyid:6C:70:D6:EE:C2:B5:60:5F:8B:1B:E6:CE:84:39:5F:24:6C:42:DF:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHDW7sK1YF-LG-bOhDlfJGxC3xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:05:98:58:af:88:5f:63:0c:5b:18:cb:19:8d:59:98:e2:58:
72:0d:bf:19:cb:32:c5:e4:fe:6d:eb:23:85:f4:a4:c3:da:af:
ac:9f:65:fa:12:08:7e:9f:de:f5:f9:c7:fb:10:68:59:bb:3d:
a1:ef:f2:3e:b1:11:61:a3:a8:44:7f:10:a4:0c:21:33:48:25:
56:b2:ab:73:9d:14:06:60:18:39:b9:8f:ae:59:39:c6:84:5f:
e0:cd:49:b3:41:48:1c:a6:af:50:e2:2d:bd:7e:55:84:5e:0b:
e7:f2:0c:ff:13:49:3d:31:02:ae:d1:e0:7f:e5:39:3a:a8:40:
25:cf:1e:fd:4a:eb:4b:17:4f:60:fd:b9:1a:2c:d3:43:6e:ba:
e8:b7:fd:c5:a1:a0:76:1b:b8:04:85:f6:dd:2c:53:6e:66:b8:
64:e3:8a:f2:5d:da:50:93:c7:45:1c:ca:ef:c3:60:d2:84:d2:
a7:df:a4:0f:cd:c4:14:6f:9c:c9:be:3e:bd:1e:dd:ff:a6:9a:
51:30:60:2c:0c:53:f3:e0:42:0c:41:af:e9:6f:68:44:cc:85:
af:41:0b:06:be:d2:71:5c:74:8e:e4:c7:e0:08:58:b5:f8:68:
a8:1f:18:96:a8:31:90:e4:3e:5a:4e:6b:ab:c1:fe:4d:a7:99:
d0:02:72:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:27 2025 by rpki-client