Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20f5b0-25e9-4150-82f4-d421044382d1/1/bGuWjFE0NX35wri10EVd0C2jIEk.mft
File: bGuWjFE0NX35wri10EVd0C2jIEk.mft (raw, json)
Hash identifier: LD4y/WgDq7XALmkkPaIZ507n5MQoYL7eqs3/EWAs7rE=
Subject key identifier: 57:18:7A:83:1E:5F:E6:90:66:0B:86:DC:B6:35:C8:74:8B:09:F4:6D
Authority key identifier: 6C:6B:96:8C:51:34:35:7D:F9:C2:B8:B5:D0:45:5D:D0:2D:A3:20:49
Certificate issuer: /CN=6c6b968c5134357df9c2b8b5d0455dd02da32049
Certificate serial: 0194EF16A43E88BDB92C02FDBE581939ABD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bGuWjFE0NX35wri10EVd0C2jIEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/20f5b0-25e9-4150-82f4-d421044382d1/1/bGuWjFE0NX35wri10EVd0C2jIEk.mft
Manifest number: 0518
Signing time: Mon 10 Feb 2025 09:00:25 +0000
Manifest this update: Mon 10 Feb 2025 09:00:25 +0000
Manifest next update: Tue 11 Feb 2025 09:00:25 +0000
Files and hashes: 1: bGuWjFE0NX35wri10EVd0C2jIEk.crl (hash: 5tMUzfEbKkg64etFPEaoKGE8IG3ftY9FcPgGZgeFuls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ef:16:a4:3e:88:bd:b9:2c:02:fd:be:58:19:39:ab:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6b968c5134357df9c2b8b5d0455dd02da32049
Validity
Not Before: Feb 10 09:00:25 2025 GMT
Not After : Feb 11 09:00:25 2025 GMT
Subject: CN=57187a831e5fe690660b86dcb635c8748b09f46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:57:88:d9:a5:28:e4:03:6a:72:67:40:7b:
00:cc:3c:66:1b:cb:e5:c4:fb:85:5b:7f:1f:44:69:
24:69:4b:ef:9f:1c:58:df:32:47:2a:fd:6b:f1:f1:
cd:80:7f:55:02:aa:4d:72:33:7c:33:51:ff:6f:40:
33:ae:ee:9f:af:78:8c:66:a7:ba:18:06:bd:42:eb:
41:25:8e:63:7e:5e:40:99:c8:90:99:16:93:4c:ee:
89:56:a3:69:77:58:13:41:88:01:a1:b9:33:f7:a5:
0a:9d:ec:6b:e6:98:21:36:19:f0:fe:73:50:14:67:
b9:f4:80:c3:42:a1:73:78:7e:91:e5:1a:75:93:67:
e9:99:20:1e:2e:b6:65:52:85:ae:10:e6:53:fe:1f:
d3:a1:6c:9c:3f:d5:b7:1a:fa:34:c9:4a:e8:e5:7a:
ae:11:47:e2:31:ea:4c:82:05:56:8e:e0:06:ae:79:
40:4b:0b:71:64:e3:be:0e:00:b4:48:81:ea:0d:26:
f5:53:3e:37:21:9d:61:cb:29:9d:87:d8:f9:89:18:
61:e1:f3:64:9a:27:e2:dc:a9:50:cb:45:36:3a:a0:
44:31:79:1f:58:9b:72:52:40:59:ed:4b:c2:b0:36:
e8:af:d6:83:78:9d:15:7c:93:e7:c4:0e:e1:01:76:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:18:7A:83:1E:5F:E6:90:66:0B:86:DC:B6:35:C8:74:8B:09:F4:6D
X509v3 Authority Key Identifier:
keyid:6C:6B:96:8C:51:34:35:7D:F9:C2:B8:B5:D0:45:5D:D0:2D:A3:20:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGuWjFE0NX35wri10EVd0C2jIEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20f5b0-25e9-4150-82f4-d421044382d1/1/bGuWjFE0NX35wri10EVd0C2jIEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20f5b0-25e9-4150-82f4-d421044382d1/1/bGuWjFE0NX35wri10EVd0C2jIEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:70:37:5b:93:19:ee:90:ef:b8:0b:c0:3f:37:d7:43:09:5e:
c2:36:5e:2a:24:2e:e5:5d:79:3b:49:4d:7c:e5:7b:54:22:48:
fe:57:89:bd:ac:d5:71:43:d7:e5:aa:f8:55:97:94:c7:35:ba:
8d:65:29:23:6d:13:88:10:94:31:2e:72:d5:33:b0:bd:9b:5a:
f4:14:fd:e2:f3:60:b5:ee:3d:d7:8b:05:88:87:e9:60:32:f8:
3e:4b:3a:96:d6:e6:84:6f:d9:55:7b:f0:8a:24:85:47:48:55:
11:41:41:6b:e1:34:08:9a:bc:9b:30:8a:ac:50:b8:01:e2:e7:
b8:1d:83:23:1a:13:76:a6:ed:18:94:15:b5:bb:55:ee:09:41:
73:eb:d3:e8:ec:51:f2:4a:48:2d:fe:e4:4f:6d:d8:91:51:61:
ad:2b:4d:f1:93:d9:ab:b0:6b:ae:f2:ed:92:1c:ad:31:c5:cb:
af:8c:41:41:f3:2d:49:bd:c7:ab:2c:25:5d:a0:93:ab:5c:30:
35:91:41:ce:7c:46:d8:51:81:84:68:bc:ed:e3:3d:39:03:0c:
e5:e8:9d:61:91:70:27:f1:9a:bd:ef:3b:70:5b:e0:41:b4:e7:
ba:2e:45:4a:c2:51:45:73:b3:0d:3c:d5:73:de:74:75:5c:9e:
e3:48:bf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:05 2025 by rpki-client