Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft
File: sBblecxJQEjsEqI_8lOacAS7duU.mft (raw, json)
Hash identifier: 1AJkOaNfNcd39Wqgsx2kEZ2HetEf+26kTcyYnlvQDnI=
Subject key identifier: 31:B7:DD:AB:95:28:FC:01:23:35:C9:E1:6A:7A:1D:05:89:A7:D0:6A
Authority key identifier: B0:16:E5:79:CC:49:40:48:EC:12:A2:3F:F2:53:9A:70:04:BB:76:E5
Certificate issuer: /CN=b016e579cc494048ec12a23ff2539a7004bb76e5
Certificate serial: 019514A3FDD0E7F651D1EAB3E132BDA0D788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBblecxJQEjsEqI_8lOacAS7duU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft
Manifest number: 0C9C
Signing time: Mon 17 Feb 2025 16:00:46 +0000
Manifest this update: Mon 17 Feb 2025 16:00:46 +0000
Manifest next update: Tue 18 Feb 2025 16:00:46 +0000
Files and hashes: 1: sBblecxJQEjsEqI_8lOacAS7duU.crl (hash: oOTveOT8zcw+CiWd6ePz/DbY+sVN0uxrW42xoMa57DE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:a3:fd:d0:e7:f6:51:d1:ea:b3:e1:32:bd:a0:d7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b016e579cc494048ec12a23ff2539a7004bb76e5
Validity
Not Before: Feb 17 16:00:46 2025 GMT
Not After : Feb 18 16:00:46 2025 GMT
Subject: CN=31b7ddab9528fc012335c9e16a7a1d0589a7d06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:61:0a:74:f7:7b:e5:0d:63:8c:b0:3f:cd:
78:74:4b:f2:82:40:f5:bf:02:7f:f6:bc:c0:81:10:
bf:d7:4a:56:13:fc:82:c9:3d:0d:6f:a5:dd:b6:aa:
d4:45:53:7f:05:62:33:29:2a:16:5c:b5:df:b1:ad:
77:ea:b3:91:ad:34:ba:11:5b:06:9d:77:aa:83:0b:
f9:7a:6d:86:ab:10:aa:a6:a8:98:72:53:d9:b9:f9:
68:83:e8:6d:66:f0:8f:89:55:00:ec:58:79:44:0a:
ab:7e:8f:3b:e5:d9:02:6b:55:c1:7f:cf:e4:bb:f7:
eb:42:da:3d:b6:b5:10:79:cf:8e:fe:31:32:af:2d:
3c:94:e1:91:c4:dd:1d:8f:c5:5e:75:6c:72:82:a7:
b0:46:02:0e:ad:59:39:a0:6f:e9:58:b2:01:5b:89:
80:2f:47:5a:a5:c3:84:1c:36:77:98:2e:15:d8:64:
4e:ba:9c:c8:27:19:4b:7c:87:e0:8f:7e:94:56:6a:
fd:72:99:93:af:16:24:c6:7a:c4:d6:90:7c:d6:d9:
4f:37:68:61:09:45:ff:d9:f7:d3:9b:8f:c8:8b:e0:
0f:03:28:f8:78:a0:5e:1e:c9:41:45:2d:e4:62:13:
8a:d5:2e:de:1d:39:04:af:69:97:ee:eb:c7:55:be:
f7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B7:DD:AB:95:28:FC:01:23:35:C9:E1:6A:7A:1D:05:89:A7:D0:6A
X509v3 Authority Key Identifier:
keyid:B0:16:E5:79:CC:49:40:48:EC:12:A2:3F:F2:53:9A:70:04:BB:76:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBblecxJQEjsEqI_8lOacAS7duU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c73d16-4bfb-4277-957e-d5c13e448bcc/1/sBblecxJQEjsEqI_8lOacAS7duU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ae:13:7d:a7:df:d6:27:64:93:45:84:39:61:c0:be:7e:bd:
b5:19:5e:ba:e6:3a:2a:19:7e:1e:b2:04:83:60:a0:2a:56:70:
62:bd:f0:c3:b6:21:27:a5:b5:0f:57:83:38:45:6f:48:78:7b:
91:18:40:d7:4c:81:57:8e:9b:9a:a3:b2:e5:1f:62:47:f0:94:
6a:7e:21:86:ab:ea:45:1d:24:e6:e8:fa:8b:2b:a4:2a:0f:ef:
a2:5d:45:1a:b8:be:63:53:ff:f4:fb:de:b8:b5:b6:c7:3a:f0:
f7:67:06:07:10:c6:9f:62:3a:d3:41:eb:b5:d3:e7:cd:5d:6f:
73:bb:09:72:6c:bd:5c:47:cf:82:1d:0b:ac:8b:69:ac:62:79:
c9:c0:42:08:48:f2:d1:8a:12:74:45:63:e7:05:15:ab:fe:f4:
73:c8:34:53:5f:cd:47:1b:9d:e1:d6:1f:7c:26:6f:02:4a:25:
66:08:5b:d0:d5:8a:87:ad:f7:ea:98:fd:0a:96:4d:9a:b0:17:
61:31:01:c2:74:cb:b1:0c:fe:e9:38:66:8c:e8:89:1d:6f:f4:
a0:ff:4f:dc:15:95:ee:d1:26:6f:83:dd:de:b5:0f:8a:fd:3e:
fc:ea:8d:2f:bd:c8:ef:9b:22:fd:fc:00:2c:c2:b6:fa:50:3d:
b3:26:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:48:26 2025 by rpki-client