Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ff4a3b-2191-4841-b764-245a41b5ab23/1/bS3Yl1bQU-BM7RPrmc9XXz36qQE.mft
File: bS3Yl1bQU-BM7RPrmc9XXz36qQE.mft (raw, json)
Hash identifier: +n+n29HIZMDjKxGQUjJQ2ew9trnSbzpkrXE4X5572kY=
Subject key identifier: 81:95:99:B6:EB:46:91:E1:24:32:CC:06:A4:56:78:A1:72:00:4C:FD
Authority key identifier: 6D:2D:D8:97:56:D0:53:E0:4C:ED:13:EB:99:CF:57:5F:3D:FA:A9:01
Certificate issuer: /CN=6d2dd89756d053e04ced13eb99cf575f3dfaa901
Certificate serial: 018BAC3BB7720CB707A01EBA99458A635DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS3Yl1bQU-BM7RPrmc9XXz36qQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ff4a3b-2191-4841-b764-245a41b5ab23/1/bS3Yl1bQU-BM7RPrmc9XXz36qQE.mft
Manifest number: 0F75
Signing time: Wed 08 Nov 2023 00:01:16 +0000
Manifest this update: Wed 08 Nov 2023 00:01:16 +0000
Manifest next update: Thu 09 Nov 2023 00:01:16 +0000
Files and hashes: 1: bS3Yl1bQU-BM7RPrmc9XXz36qQE.crl (hash: X28om7OL1Lb6HUROWnt+E72VLIP65aBCVCAMmpI/Slc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ac:3b:b7:72:0c:b7:07:a0:1e:ba:99:45:8a:63:5d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2dd89756d053e04ced13eb99cf575f3dfaa901
Validity
Not Before: Nov 8 00:01:16 2023 GMT
Not After : Nov 9 00:01:16 2023 GMT
Subject: CN=819599b6eb4691e12432cc06a45678a172004cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:8a:0f:17:25:d5:e0:84:58:ce:10:2b:3b:
26:1a:d3:76:b7:26:ff:d0:25:0d:29:2f:1e:b8:cb:
8d:81:99:73:18:1d:eb:13:79:f3:92:e4:c8:42:85:
37:63:7f:e1:68:b8:d0:97:48:c4:c4:32:30:09:60:
ef:c4:d2:1d:89:d9:0d:4b:5c:5e:e5:3d:a2:44:a4:
17:46:d1:09:d5:f8:ca:04:19:c7:98:c5:75:65:6b:
19:6e:82:14:e5:8d:01:19:d1:3c:a2:32:d1:4e:4b:
34:e7:2b:3f:7d:d3:4d:5a:9a:28:77:87:e2:50:8f:
d2:69:f7:c4:7c:5b:5e:34:47:23:d5:99:cd:b3:a4:
fd:5e:d2:a2:56:e3:55:a5:46:ff:e9:d0:44:74:f4:
7d:ff:d6:52:93:40:53:12:bb:71:d9:dd:c9:5a:32:
f6:4c:c9:24:d5:21:47:b2:4d:e4:9a:4c:66:ed:f9:
28:71:26:37:0b:5e:d2:f7:0e:04:e2:af:2f:03:91:
9e:92:22:a1:ab:e4:c2:ab:c1:9a:56:f3:36:1a:4b:
25:3c:05:f7:7a:50:1f:f0:2d:68:1e:77:cb:2f:66:
9a:88:67:9a:a0:ea:34:0b:c7:a5:11:18:0e:a6:63:
8c:16:5d:fe:84:db:d4:4c:d6:23:ff:b1:a3:7b:1d:
c2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:95:99:B6:EB:46:91:E1:24:32:CC:06:A4:56:78:A1:72:00:4C:FD
X509v3 Authority Key Identifier:
keyid:6D:2D:D8:97:56:D0:53:E0:4C:ED:13:EB:99:CF:57:5F:3D:FA:A9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS3Yl1bQU-BM7RPrmc9XXz36qQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ff4a3b-2191-4841-b764-245a41b5ab23/1/bS3Yl1bQU-BM7RPrmc9XXz36qQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ff4a3b-2191-4841-b764-245a41b5ab23/1/bS3Yl1bQU-BM7RPrmc9XXz36qQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ac:a7:94:0e:d7:42:9d:f6:04:62:c5:16:4d:1f:36:c6:93:
e2:10:4f:c7:bb:68:0f:02:32:a7:6d:a4:5b:93:d9:14:e4:b1:
f9:33:2d:09:49:7e:64:ff:e6:ac:ac:57:30:c3:4d:93:ca:f1:
e9:e9:48:38:d9:3f:aa:92:ba:01:a8:d7:a6:0d:22:ee:ce:1d:
01:59:43:a7:76:fd:00:c4:f7:35:f4:f7:a5:4f:2b:e5:5c:f6:
97:12:28:f4:0f:2e:fc:a7:ca:17:0c:c9:d7:d0:5d:fc:39:86:
1b:ef:3a:75:3e:63:9d:67:d5:b0:20:db:22:73:42:a6:40:ff:
3e:f7:f4:4c:10:23:dc:82:1a:be:61:a2:14:f2:0a:c3:20:61:
aa:df:96:64:8c:06:9a:22:7d:02:df:8d:12:15:5c:93:f6:ca:
7a:f9:3b:76:cd:63:8e:7f:2c:42:37:89:66:f8:4a:80:c9:1d:
b4:5c:61:d3:9a:35:b5:38:91:47:b3:78:28:09:20:21:35:07:
d5:b7:0d:43:0e:fc:6c:4a:8f:56:1d:78:7d:e9:ba:3a:07:be:
a4:80:03:7d:91:ff:74:54:2f:e5:53:fd:eb:08:96:74:ee:c6:
06:af:72:c1:e4:da:0c:ff:82:19:b0:b3:63:d1:e9:64:e3:80:
0d:b1:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:56 2025 by rpki-client