Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft
File: bfcVxYs6uhTfvf_-FTvea3p_L9g.mft (raw, json)
Hash identifier: uMlYzfLyVXj4cNUygx3Y+gLRg4esTtnCQsQMUFTtwRs=
Subject key identifier: D4:9F:48:D0:27:1E:01:2B:3D:3E:F5:BD:58:B5:E5:9F:E1:78:FF:02
Authority key identifier: 6D:F7:15:C5:8B:3A:BA:14:DF:BD:FF:FE:15:3B:DE:6B:7A:7F:2F:D8
Certificate issuer: /CN=6df715c58b3aba14dfbdfffe153bde6b7a7f2fd8
Certificate serial: 0195A2E851265CFEF1930C480CAC72EEF226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfcVxYs6uhTfvf_-FTvea3p_L9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft
Manifest number: 0A50
Signing time: Mon 17 Mar 2025 07:01:28 +0000
Manifest this update: Mon 17 Mar 2025 07:01:28 +0000
Manifest next update: Tue 18 Mar 2025 07:01:28 +0000
Files and hashes: 1: bfcVxYs6uhTfvf_-FTvea3p_L9g.crl (hash: vXstqC3R5NKLkOJuxoht2yBHJrJZs4jvV1s8RTbLOr0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:e8:51:26:5c:fe:f1:93:0c:48:0c:ac:72:ee:f2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df715c58b3aba14dfbdfffe153bde6b7a7f2fd8
Validity
Not Before: Mar 17 07:01:28 2025 GMT
Not After : Mar 18 07:01:28 2025 GMT
Subject: CN=d49f48d0271e012b3d3ef5bd58b5e59fe178ff02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:44:c6:76:c0:7a:d9:d8:e1:46:29:16:b8:
1b:39:30:78:c9:4b:5d:e6:b8:44:f2:75:39:55:98:
0f:82:eb:65:02:f4:0c:ca:6c:17:f1:09:41:1f:8d:
0b:75:67:22:be:50:b2:c2:67:b6:61:cc:26:d6:99:
9c:14:50:9a:fb:4c:78:7f:55:4d:37:48:71:3b:70:
42:e5:91:15:49:88:29:d1:43:fc:e9:e7:33:8b:4b:
b0:5a:a2:dd:80:58:74:cf:2a:6a:75:23:6c:a4:84:
57:84:78:7a:b3:55:c7:18:1e:63:fb:ff:d8:60:c9:
11:d7:3d:1c:3a:38:b2:c4:01:e5:ca:5e:9a:c4:99:
c9:69:c9:f2:50:02:17:c5:57:39:67:54:08:f4:aa:
fb:39:69:ff:60:cb:c3:d9:78:09:54:15:2f:8e:9e:
78:c1:03:dd:8e:f1:e9:88:08:cf:c0:df:d8:72:fa:
06:4a:cf:23:63:0f:85:a3:0e:f9:a3:fb:c8:bc:ac:
04:ee:10:b3:3f:3b:44:de:db:ee:d1:25:b9:3d:84:
f4:53:22:39:25:13:5f:3f:76:ed:31:62:9b:ea:00:
28:56:34:36:e1:bc:21:e7:f6:f2:86:7b:dc:f7:6c:
f4:c0:82:19:e8:57:04:fa:43:c3:ef:06:20:b0:d9:
9e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9F:48:D0:27:1E:01:2B:3D:3E:F5:BD:58:B5:E5:9F:E1:78:FF:02
X509v3 Authority Key Identifier:
keyid:6D:F7:15:C5:8B:3A:BA:14:DF:BD:FF:FE:15:3B:DE:6B:7A:7F:2F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfcVxYs6uhTfvf_-FTvea3p_L9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:94:8f:59:26:41:76:3b:cd:ea:7b:c8:b8:ba:21:19:33:59:
fa:c8:ab:19:e5:93:31:62:0b:1e:ad:f9:80:89:a8:05:1f:fe:
c8:97:3b:95:83:09:10:9c:f5:94:8e:2a:ea:a2:9a:f2:f1:1e:
2d:7f:00:cb:ca:c1:95:2d:43:64:b2:36:44:a3:25:40:72:99:
b6:7b:a7:ad:af:9a:05:cb:ae:ca:00:ff:e3:00:48:46:24:f3:
12:ec:17:43:52:19:60:0f:b2:0c:b8:b2:a5:b4:27:16:3e:4f:
80:bb:fe:59:b5:51:7b:f6:4d:90:e5:df:bf:32:35:85:7f:3f:
8a:99:e2:b9:7d:ec:64:eb:fd:3c:0f:35:4a:6d:bd:68:c7:25:
e6:32:88:15:41:7a:ba:6c:0b:50:01:5f:72:04:d0:6e:57:b2:
2f:b0:c2:88:8d:d5:69:12:e8:aa:85:1c:2e:a3:39:b0:7a:f6:
da:a0:0c:fa:e7:3d:3c:9f:b5:5f:5b:a6:12:dc:f3:71:e7:af:
32:68:e0:69:e3:5b:15:f6:e3:c0:8d:c2:4c:55:a1:4b:1c:93:
ab:26:55:e4:ec:b0:e6:cc:45:91:ba:9d:98:62:48:6f:91:36:
1e:31:ae:f9:28:99:c7:df:bc:f6:33:3d:0a:dc:69:28:bb:55:
e2:1c:0a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:29:23 2025 by rpki-client