Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d1c40c-236d-49e7-a1f1-acbb90d240c2/1/ID-0Bd1jKYgtkew_I3lJLoJ0Btg.mft
File: ID-0Bd1jKYgtkew_I3lJLoJ0Btg.mft (raw, json)
Hash identifier: NoU/Pn3K25bfCe0H4LNTmh+uohy/jyBqTFRiyDqzu/w=
Subject key identifier: F7:9D:4B:73:4D:A7:39:22:9B:B5:05:6A:0D:68:65:D2:87:BE:82:29
Authority key identifier: 20:3F:B4:05:DD:63:29:88:2D:91:EC:3F:23:79:49:2E:82:74:06:D8
Certificate issuer: /CN=203fb405dd6329882d91ec3f2379492e827406d8
Certificate serial: 01946C3265D396C8CE7BF6D8622411A6E0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ID-0Bd1jKYgtkew_I3lJLoJ0Btg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d1c40c-236d-49e7-a1f1-acbb90d240c2/1/ID-0Bd1jKYgtkew_I3lJLoJ0Btg.mft
Manifest number: 09
Signing time: Wed 15 Jan 2025 23:00:29 +0000
Manifest this update: Wed 15 Jan 2025 23:00:29 +0000
Manifest next update: Thu 16 Jan 2025 23:00:29 +0000
Files and hashes: 1: ID-0Bd1jKYgtkew_I3lJLoJ0Btg.crl (hash: n5lMRdn9M6r9RAjaMHx0+4nL6VvmDCyCyTdAD9yIlQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6c:32:65:d3:96:c8:ce:7b:f6:d8:62:24:11:a6:e0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=203fb405dd6329882d91ec3f2379492e827406d8
Validity
Not Before: Jan 15 23:00:29 2025 GMT
Not After : Jan 16 23:00:29 2025 GMT
Subject: CN=f79d4b734da739229bb5056a0d6865d287be8229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:a5:e6:a0:95:1f:7f:6c:97:7e:14:43:83:
4e:53:33:85:cf:43:ec:3f:23:4f:bc:39:71:6a:17:
ee:bd:ff:4a:d7:19:75:37:d5:df:45:7c:1a:18:f8:
63:13:c8:f8:98:8b:0c:7e:38:03:8f:ed:4e:0e:0e:
da:35:ee:69:d6:00:5f:9d:2c:d4:70:5a:88:42:a1:
bc:ff:f3:98:a2:db:50:8e:bf:e6:c5:80:1b:c8:83:
fe:96:6d:f3:78:cc:4d:e1:8d:97:9d:a2:1d:81:cc:
ee:cd:97:40:f0:64:34:88:58:d7:bd:c3:23:6c:e6:
71:39:1e:10:40:cf:af:19:c0:06:cf:5d:b5:41:4b:
7a:28:23:8f:48:94:9f:60:42:58:87:a0:24:99:06:
e3:13:b2:5b:62:21:a8:2d:1a:af:19:9b:e6:41:a7:
3c:4f:05:c8:22:21:2c:17:76:97:d6:5b:22:b2:c9:
7c:38:5e:02:e3:ec:a8:d7:35:76:f0:b8:bd:08:3e:
52:60:f3:7f:33:18:29:26:b9:45:2b:e7:33:36:ef:
30:28:75:56:45:40:4d:9e:8c:8a:30:d9:37:89:5b:
81:1f:b8:a6:fb:23:c0:bf:29:6b:6a:f2:62:79:70:
91:18:a9:cc:b4:f1:27:3c:7e:fd:7f:55:d2:12:7d:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9D:4B:73:4D:A7:39:22:9B:B5:05:6A:0D:68:65:D2:87:BE:82:29
X509v3 Authority Key Identifier:
keyid:20:3F:B4:05:DD:63:29:88:2D:91:EC:3F:23:79:49:2E:82:74:06:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ID-0Bd1jKYgtkew_I3lJLoJ0Btg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d1c40c-236d-49e7-a1f1-acbb90d240c2/1/ID-0Bd1jKYgtkew_I3lJLoJ0Btg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d1c40c-236d-49e7-a1f1-acbb90d240c2/1/ID-0Bd1jKYgtkew_I3lJLoJ0Btg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:bc:4b:8c:3b:99:c7:34:a2:f3:51:5d:3a:ae:e8:0e:ad:d4:
45:f9:eb:fb:68:c3:4d:00:ae:de:ed:a3:13:80:81:84:22:2f:
6e:24:0c:7f:4b:e0:02:22:4d:59:79:0c:f6:66:ff:9e:f7:7f:
d8:94:31:ce:ec:41:99:75:99:8c:fc:c7:1d:bb:a5:57:e3:56:
ad:be:fd:26:78:3b:ea:31:51:6b:29:20:78:38:8f:dd:46:51:
20:8f:73:f4:85:40:42:13:44:a1:7a:8a:44:a4:87:52:1a:05:
4d:66:ce:7e:57:27:ea:67:da:87:ef:e3:d1:b3:ad:5e:50:fa:
28:cb:f1:e0:29:15:cd:46:05:9c:5b:91:ef:d7:4f:4b:3c:39:
a5:e2:04:2b:cc:47:f4:2b:c2:09:1e:70:38:3f:8f:ff:8d:54:
c5:bc:56:69:e5:17:3d:99:23:0a:6c:97:8d:f4:f9:73:db:a8:
17:c1:29:e0:8e:a3:32:fb:23:1d:1c:9e:ab:86:c2:14:b5:6d:
7e:4f:df:91:d5:e7:66:63:51:ab:6e:81:c1:6b:c7:7c:b4:c6:
83:27:5b:35:3c:da:da:1e:50:57:4c:89:d4:6c:6e:77:c1:cf:
a8:a5:a9:de:ca:5d:98:b0:6a:e5:72:1d:dd:1b:4f:e4:6c:10:
5f:a3:c9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:00:50 2025 by rpki-client