Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.mft
File: S674BgHHxrBqwfclCB8kLg8GvFE.mft (raw, json)
Hash identifier: xzpSMmCYdikAiw37N6xTvBc5swmO+NG8z5TapsyQiYI=
Subject key identifier: 4A:75:35:72:7D:81:40:7C:70:C6:0E:CC:79:B4:21:9C:DF:14:F7:C1
Authority key identifier: 4B:AE:F8:06:01:C7:C6:B0:6A:C1:F7:25:08:1F:24:2E:0F:06:BC:51
Certificate issuer: /CN=4baef80601c7c6b06ac1f725081f242e0f06bc51
Certificate serial: 019514A3EBE2FC43905C6B5B9AAB0F4468AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S674BgHHxrBqwfclCB8kLg8GvFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.mft
Manifest number: 069C
Signing time: Mon 17 Feb 2025 16:00:41 +0000
Manifest this update: Mon 17 Feb 2025 16:00:41 +0000
Manifest next update: Tue 18 Feb 2025 16:00:41 +0000
Files and hashes: 1: S674BgHHxrBqwfclCB8kLg8GvFE.crl (hash: fF1eY8s2LWlrEoPBNLaqXTR+7QGm2K621w8Fn8TAqIs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:a3:eb:e2:fc:43:90:5c:6b:5b:9a:ab:0f:44:68:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4baef80601c7c6b06ac1f725081f242e0f06bc51
Validity
Not Before: Feb 17 16:00:41 2025 GMT
Not After : Feb 18 16:00:41 2025 GMT
Subject: CN=4a7535727d81407c70c60ecc79b4219cdf14f7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:c8:a0:5b:a0:c1:e2:e3:27:08:a2:32:80:
47:c0:5c:73:12:4c:4d:5d:e6:59:78:33:8d:4a:1e:
3a:5a:7a:bd:8f:f9:81:d0:2b:9b:89:ef:97:f3:6e:
3d:c2:2c:50:19:4e:67:c5:87:10:db:a7:08:69:82:
4f:84:21:08:b1:e9:2f:54:84:bb:df:de:c3:09:66:
3e:be:73:ea:ec:b9:d4:a3:53:35:87:ea:84:bf:95:
ac:4c:70:ee:4a:ba:58:7b:11:54:1f:ce:dc:86:b1:
b9:82:5a:5f:d3:4b:68:2e:87:5a:3d:7f:19:f5:b5:
fd:10:36:0c:fe:da:36:4c:a7:6b:2d:63:3e:07:72:
7a:04:6c:e8:d2:d6:c4:cb:12:76:d7:ea:f7:93:53:
4d:e8:43:08:0b:e2:a0:ac:f0:a7:e4:34:9f:a6:0b:
49:08:7c:53:3f:00:60:76:2c:3c:ab:fd:ad:78:b1:
be:5b:ec:2a:52:79:70:6c:27:2f:5e:17:ad:5a:66:
27:87:65:f4:91:47:23:91:f9:6d:49:23:9e:66:84:
a7:4f:70:a2:7b:45:d1:48:7b:91:97:03:fc:5c:64:
a4:32:10:0d:d1:65:15:8e:6d:bf:2a:95:a8:a4:13:
ac:27:73:ab:72:68:90:18:18:a3:cc:25:11:1c:2e:
25:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:75:35:72:7D:81:40:7C:70:C6:0E:CC:79:B4:21:9C:DF:14:F7:C1
X509v3 Authority Key Identifier:
keyid:4B:AE:F8:06:01:C7:C6:B0:6A:C1:F7:25:08:1F:24:2E:0F:06:BC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S674BgHHxrBqwfclCB8kLg8GvFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:86:e0:42:63:66:38:94:04:5f:ba:9d:dc:d4:9d:28:f1:2a:
f7:20:ac:0b:d7:0f:49:12:dc:32:53:54:0c:ed:08:d4:a6:e5:
17:ba:f3:90:cd:78:b9:3c:6c:4e:a6:68:a6:be:d5:6a:58:23:
55:46:6b:57:e4:c4:7a:c0:42:ef:4b:e1:74:33:bd:93:2b:82:
a3:83:47:58:f0:0d:43:f4:58:f0:09:04:77:d9:6a:1b:0a:ea:
70:57:b5:a7:7f:49:1c:c7:af:b0:7e:d4:60:a3:20:e0:b0:60:
e8:b0:d2:58:e9:fc:77:d3:4a:58:09:cc:d5:e5:56:3d:ba:b1:
f3:78:5d:4e:60:1a:ed:dd:49:40:04:53:3a:c0:8e:ce:f4:e7:
09:00:9a:80:14:49:5c:00:18:1e:0a:fb:33:97:f5:b0:4a:0f:
6a:b9:bd:02:3a:f7:db:92:35:db:76:7d:d0:20:2f:b4:92:5e:
3f:cd:33:b6:cd:16:26:82:40:35:ff:d7:c8:03:d4:19:86:c6:
34:4c:f1:09:80:ea:93:eb:3b:93:7b:fe:ae:40:5f:11:b1:80:
ae:61:03:10:93:12:d2:73:c7:18:1b:9f:61:c8:ff:4a:bb:20:
25:06:cf:11:aa:0c:8c:e7:d6:6e:f8:30:53:48:7d:20:f4:60:
ff:c9:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:41 2025 by rpki-client