Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
File: u9Qr14Mqar4W4VIqLX5OQNProKI.mft (raw, json)
Hash identifier: AIbZmw1UVlOcKLoeL64FmlqkT2G6EhIe7UHwN6kCpiY=
Subject key identifier: 79:8A:57:0E:76:28:E7:00:56:CB:76:EB:38:1A:22:BB:A5:E0:F2:2A
Authority key identifier: BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
Certificate issuer: /CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Certificate serial: 0195E00FA38B9395D04B1CB67F8D920C9BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
Manifest number: 14BD
Signing time: Sat 29 Mar 2025 04:01:15 +0000
Manifest this update: Sat 29 Mar 2025 04:01:15 +0000
Manifest next update: Sun 30 Mar 2025 04:01:15 +0000
Files and hashes: 1: u9Qr14Mqar4W4VIqLX5OQNProKI.crl (hash: UN4hhh2iz6Sm6vadB9mljJgFgp/hneSvmxeHj0kZBjc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:a3:8b:93:95:d0:4b:1c:b6:7f:8d:92:0c:9b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Validity
Not Before: Mar 29 04:01:15 2025 GMT
Not After : Mar 30 04:01:15 2025 GMT
Subject: CN=798a570e7628e70056cb76eb381a22bba5e0f22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fe:60:44:c8:83:74:c5:1f:e7:8c:eb:f3:df:
36:5f:44:22:4f:03:c9:9f:a5:0b:d2:1e:0c:a5:3e:
d2:ce:46:0f:a3:67:6d:33:22:93:59:9b:fa:d7:c2:
29:0d:5b:c5:0c:0c:47:6d:60:23:70:f7:f4:91:ac:
b7:06:dc:04:00:e6:a5:4b:51:e3:bf:a6:0a:11:bf:
ab:e5:45:29:b6:31:9e:2c:c3:2d:3f:23:e7:4c:e9:
57:21:c3:c7:91:3b:73:71:58:93:bb:a4:17:3c:85:
e3:f7:66:42:e0:cc:39:08:cb:fc:ec:5e:74:db:61:
16:80:b6:65:48:5f:4c:5c:f4:9e:db:f5:07:c7:c5:
67:c2:3b:33:9e:d0:38:28:49:3f:4b:9a:75:67:11:
a3:de:00:35:fe:92:83:7c:9e:ea:b6:33:02:41:86:
7f:13:ff:23:9f:65:97:a6:5b:b5:81:7f:ab:55:c7:
ae:22:47:ed:28:51:8b:c6:b2:c0:c9:54:fa:b9:58:
51:ba:94:2b:32:a3:d4:cc:8a:e5:6e:61:8a:f3:01:
e8:2e:39:ad:54:b0:f8:25:69:97:b1:8f:00:76:81:
2d:ba:24:00:28:85:40:21:56:f4:3e:f3:80:4f:97:
0c:a9:d0:fb:ed:3c:07:d8:7e:ad:d5:8f:8f:32:c8:
f2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8A:57:0E:76:28:E7:00:56:CB:76:EB:38:1A:22:BB:A5:E0:F2:2A
X509v3 Authority Key Identifier:
keyid:BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4e:26:55:13:83:1e:94:a9:3b:ab:ef:9e:d6:86:18:f0:02:
e9:93:6f:ee:1f:c0:dd:3e:39:ce:27:9b:d7:1f:c4:a2:18:86:
8d:29:74:a9:1d:b6:8c:60:00:40:0f:c3:0a:ae:19:86:bc:09:
2f:0d:90:9d:a1:5a:49:cc:b8:e0:35:58:52:c3:23:2f:f8:28:
5b:1e:b3:da:db:1e:98:76:f9:76:1e:20:bf:50:6a:ca:9a:fe:
da:d1:50:9c:8b:c3:7b:64:88:6e:69:c7:b2:58:4a:32:c5:7d:
ee:bd:30:04:f7:42:2e:56:5f:75:81:6d:c2:09:bf:fe:dc:85:
c3:83:c2:94:e5:2c:9c:0b:bd:d8:0d:91:cb:f7:d4:99:30:65:
9e:a7:61:31:b4:5c:7f:0f:76:6d:1b:90:33:6e:4c:f1:5d:97:
76:f8:54:13:b8:d3:ba:14:71:11:8d:01:b9:de:9d:43:1d:58:
43:f4:73:75:1b:3f:82:98:ea:91:15:68:ac:04:64:c1:2f:5c:
04:ce:a6:50:92:20:71:2d:3f:b4:a8:9f:72:2b:0b:56:c9:ca:
be:19:96:35:c6:3b:2d:23:58:83:fd:db:4e:db:6a:fe:3a:2e:
77:28:4b:ff:c2:db:4e:40:e8:b5:83:7d:fd:78:d7:36:b4:53:
77:42:e4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:38:11 2025 by rpki-client