Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bac81a-8dfd-4f13-be52-0b8059004191/1/mnBtLQGxpVoscY9B8Fg5J85_xWk.mft
File: mnBtLQGxpVoscY9B8Fg5J85_xWk.mft (raw, json)
Hash identifier: DYoanQQ57dp3n6ksPvLRcnrWs6iOG3Y9OMQX1xOamyI=
Subject key identifier: D8:9C:57:70:3F:3D:20:D1:C4:B7:51:CF:43:A8:F9:A5:B8:DC:E9:5D
Authority key identifier: 9A:70:6D:2D:01:B1:A5:5A:2C:71:8F:41:F0:58:39:27:CE:7F:C5:69
Certificate issuer: /CN=9a706d2d01b1a55a2c718f41f0583927ce7fc569
Certificate serial: 0187D5700F03FAB3B6F4AB4FE898E1E4F290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnBtLQGxpVoscY9B8Fg5J85_xWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bac81a-8dfd-4f13-be52-0b8059004191/1/mnBtLQGxpVoscY9B8Fg5J85_xWk.mft
Manifest number: 0F
Signing time: Mon 01 May 2023 03:51:42 +0000
Manifest this update: Mon 01 May 2023 03:51:42 +0000
Manifest next update: Tue 02 May 2023 03:51:42 +0000
Files and hashes: 1: mnBtLQGxpVoscY9B8Fg5J85_xWk.crl (hash: Kc1ssJ9PWkxqA2vj1dfoAg81+N2+5CAY9CJni8sBzhQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d5:70:0f:03:fa:b3:b6:f4:ab:4f:e8:98:e1:e4:f2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a706d2d01b1a55a2c718f41f0583927ce7fc569
Validity
Not Before: May 1 03:51:42 2023 GMT
Not After : May 2 03:51:42 2023 GMT
Subject: CN=d89c57703f3d20d1c4b751cf43a8f9a5b8dce95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:06:ef:05:c7:ae:8d:a8:03:36:b1:5f:43:70:
d7:3e:33:a9:47:4a:52:0f:6c:f9:38:d0:b7:9a:e3:
92:1c:c5:0a:b9:79:2f:e5:5c:c5:dd:49:94:ef:23:
3f:54:77:8a:28:60:d6:35:1c:6b:5c:91:65:ed:c3:
c6:50:90:5d:41:ed:2c:88:a0:30:02:fe:ca:d1:c2:
cd:22:1c:a5:ae:88:a2:96:94:4b:32:71:ea:45:86:
cc:bf:e1:02:5e:79:49:d7:3c:f4:68:71:ce:f7:cc:
07:09:e0:44:33:2a:ec:a8:fc:eb:2c:af:e2:c7:20:
5c:f3:09:1f:03:4c:54:18:bb:0a:99:3f:60:7a:18:
0a:24:42:49:7b:21:04:46:77:33:9d:66:f5:bc:20:
72:70:a6:8c:af:ae:53:38:ad:f2:b9:c9:81:91:67:
65:16:84:e2:63:f8:d7:5a:a5:28:e9:3c:9a:43:49:
0f:c7:f0:87:8c:25:c7:70:1a:c3:36:ee:57:eb:b6:
1c:f7:c2:b1:99:80:a8:34:e9:78:f1:f5:0b:91:df:
79:8d:93:a7:0e:6e:e6:75:3e:14:a4:cc:65:c9:61:
a2:08:3b:32:65:f9:7c:6c:99:fb:51:e5:82:f5:00:
b2:47:81:57:4c:7b:fc:1f:e9:24:9c:d1:04:cd:97:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9C:57:70:3F:3D:20:D1:C4:B7:51:CF:43:A8:F9:A5:B8:DC:E9:5D
X509v3 Authority Key Identifier:
keyid:9A:70:6D:2D:01:B1:A5:5A:2C:71:8F:41:F0:58:39:27:CE:7F:C5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnBtLQGxpVoscY9B8Fg5J85_xWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bac81a-8dfd-4f13-be52-0b8059004191/1/mnBtLQGxpVoscY9B8Fg5J85_xWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bac81a-8dfd-4f13-be52-0b8059004191/1/mnBtLQGxpVoscY9B8Fg5J85_xWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:03:b7:be:f1:8d:4d:5c:84:ca:07:ba:9a:92:f9:4e:82:90:
2d:1d:f8:2f:53:76:84:d8:8e:16:ea:d8:76:6c:49:7e:74:a4:
83:7a:33:2a:07:85:ec:49:5c:80:a3:c8:f0:2a:c7:23:9c:a7:
b0:da:c7:82:d6:0f:19:d4:77:51:8e:1e:b8:ed:25:22:d2:f8:
cf:16:e0:35:43:0a:bc:04:ea:e0:2e:32:da:c4:e3:4b:c7:70:
04:09:c4:cb:f6:f1:e7:92:43:77:6f:86:10:07:f8:e8:68:26:
01:4f:8c:6d:2a:fc:40:a9:d8:fe:87:7f:1d:a6:15:58:31:fd:
24:09:1c:55:88:5d:7b:de:a3:90:d8:2a:db:19:b5:c8:f8:48:
f4:15:64:43:f2:44:09:44:14:5c:2c:6e:47:a7:a0:71:e6:a4:
2b:79:81:e1:ea:b9:b0:fe:16:cf:21:d7:f3:d1:1a:fa:5b:30:
82:3d:cd:c6:d8:5b:50:5a:71:28:2e:ad:e8:ae:86:59:8a:35:
b5:dc:e0:97:9a:15:bb:fa:88:e0:7b:8e:87:43:73:bb:22:c5:
e2:f7:6b:98:79:3b:dd:d2:fe:89:3d:13:4a:63:de:31:2b:c8:
26:d7:02:62:26:fa:84:7d:90:b3:a0:9b:00:58:a0:31:63:64:
2f:18:1c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:38 2025 by rpki-client