Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e6285b-abd1-4d76-9845-548ef3845269/1/_-BodRu9xkUKIUa4VBshlMKcgAk.mft
File: _-BodRu9xkUKIUa4VBshlMKcgAk.mft (raw, json)
Hash identifier: +hclijsodtVrTrQqSVeUh6XZmxYNXkKipdYElrCBLD8=
Subject key identifier: E2:32:6D:33:96:DB:FA:4A:C2:25:74:F6:45:CC:EB:C1:48:90:8A:52
Authority key identifier: FF:E0:68:75:1B:BD:C6:45:0A:21:46:B8:54:1B:21:94:C2:9C:80:09
Certificate issuer: /CN=ffe068751bbdc6450a2146b8541b2194c29c8009
Certificate serial: 01957DC845588E479547B513CA4CE7B2FF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-BodRu9xkUKIUa4VBshlMKcgAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e6285b-abd1-4d76-9845-548ef3845269/1/_-BodRu9xkUKIUa4VBshlMKcgAk.mft
Manifest number: 037D
Signing time: Mon 10 Mar 2025 02:00:31 +0000
Manifest this update: Mon 10 Mar 2025 02:00:31 +0000
Manifest next update: Tue 11 Mar 2025 02:00:31 +0000
Files and hashes: 1: _-BodRu9xkUKIUa4VBshlMKcgAk.crl (hash: qHeZIeULwAa0TiHheTVUOqcO2P3jBYQWkPrAUzRrfCI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7d:c8:45:58:8e:47:95:47:b5:13:ca:4c:e7:b2:ff:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe068751bbdc6450a2146b8541b2194c29c8009
Validity
Not Before: Mar 10 02:00:31 2025 GMT
Not After : Mar 11 02:00:31 2025 GMT
Subject: CN=e2326d3396dbfa4ac22574f645ccebc148908a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:90:6e:ed:c1:95:34:b4:8d:8e:c4:86:fa:
11:0c:fd:32:0f:e6:bf:94:05:35:51:65:c1:89:84:
2f:87:a2:65:58:4c:1c:79:9c:9a:e9:73:22:52:a8:
70:ce:42:ef:41:91:d0:9e:07:bd:7a:8f:79:10:fc:
be:72:0b:14:f6:70:db:84:02:1d:59:bd:94:35:73:
71:49:9c:3d:1d:69:cc:d0:6f:8f:84:c1:ef:a1:5d:
cc:5b:6f:42:c2:07:35:ef:b5:15:ed:d0:86:73:75:
49:44:39:ba:bf:99:9d:01:94:5d:78:3e:a4:fc:bb:
a9:a8:f9:a4:6e:8b:18:e0:54:82:8b:56:19:e0:79:
d2:9f:a6:41:da:9c:e7:d5:61:75:50:cb:95:90:e5:
e0:40:27:c4:52:ba:3a:d1:2a:e6:c5:d0:d1:b2:31:
99:8e:c3:79:ea:58:38:eb:29:61:c2:81:68:79:e8:
a2:76:f0:ac:e7:d4:c6:33:de:18:ae:de:1d:c6:c9:
ac:ef:b5:8b:45:48:e4:43:64:b9:c0:e4:a4:b5:6b:
c9:bd:b2:25:32:fb:03:f6:4a:bb:a3:e7:93:4f:8d:
e8:4c:7a:bb:d7:e1:00:75:85:ed:72:3f:05:bb:cb:
c2:9e:69:43:c9:61:0c:9e:89:e7:ff:ac:e9:2c:0c:
56:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:32:6D:33:96:DB:FA:4A:C2:25:74:F6:45:CC:EB:C1:48:90:8A:52
X509v3 Authority Key Identifier:
keyid:FF:E0:68:75:1B:BD:C6:45:0A:21:46:B8:54:1B:21:94:C2:9C:80:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-BodRu9xkUKIUa4VBshlMKcgAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e6285b-abd1-4d76-9845-548ef3845269/1/_-BodRu9xkUKIUa4VBshlMKcgAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e6285b-abd1-4d76-9845-548ef3845269/1/_-BodRu9xkUKIUa4VBshlMKcgAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:38:3c:5a:57:b5:c4:bd:9e:be:39:08:1b:ec:a7:27:02:04:
23:34:13:02:cc:a7:c5:6c:99:83:d7:cc:33:ee:a7:9e:42:0e:
0d:62:b2:a7:e6:02:f7:f8:2a:b9:ed:64:5d:a5:2f:ac:45:2f:
71:3b:b8:30:9a:cd:96:50:c6:81:5a:88:e9:1a:11:c5:f5:ef:
94:7f:0f:26:c6:7d:f0:fc:10:a1:c6:f3:52:45:28:ff:ef:7c:
49:91:c2:f1:31:6c:f9:61:e7:30:16:e0:63:04:ce:50:6c:7d:
82:22:d0:78:12:26:9a:b8:8d:64:84:ed:8d:da:a1:5d:c4:d3:
a8:03:41:3e:2f:e7:ee:29:0f:6f:3d:b3:d1:db:da:be:84:b1:
a7:b6:b4:25:1a:d7:56:d5:58:94:37:91:89:42:f1:3e:9f:54:
ed:18:0a:7a:ea:e5:80:63:68:bd:3f:69:92:63:fe:9f:b0:f0:
16:fc:24:38:7f:fd:88:f8:ab:c5:29:56:8e:02:b9:07:b5:4d:
a5:7c:07:0d:a9:d9:cd:19:23:26:c2:6f:fd:a1:ea:2e:af:84:
44:30:24:47:db:27:16:c0:c5:5e:54:5b:04:72:40:fb:5c:3b:
26:e3:fa:94:29:5b:96:be:cc:c6:c7:29:72:c3:35:c1:55:12:
ca:f3:32:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:25:18 2025 by rpki-client