Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20f5b0-25e9-4150-82f4-d421044382d1/1/bGuWjFE0NX35wri10EVd0C2jIEk.mft
File: bGuWjFE0NX35wri10EVd0C2jIEk.mft (raw, json)
Hash identifier: gfXK1YkfEcjssts5ivrl9j3FJayiSkV6pvQzGWOvDbM=
Subject key identifier: 3F:F7:0F:72:10:76:2B:78:E2:82:49:BD:AF:60:BC:12:2B:5C:57:38
Authority key identifier: 6C:6B:96:8C:51:34:35:7D:F9:C2:B8:B5:D0:45:5D:D0:2D:A3:20:49
Certificate issuer: /CN=6c6b968c5134357df9c2b8b5d0455dd02da32049
Certificate serial: 01948EBE4A1C9E2CB540520C04A802A69539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bGuWjFE0NX35wri10EVd0C2jIEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/20f5b0-25e9-4150-82f4-d421044382d1/1/bGuWjFE0NX35wri10EVd0C2jIEk.mft
Manifest number: 04E6
Signing time: Wed 22 Jan 2025 16:00:22 +0000
Manifest this update: Wed 22 Jan 2025 16:00:22 +0000
Manifest next update: Thu 23 Jan 2025 16:00:22 +0000
Files and hashes: 1: bGuWjFE0NX35wri10EVd0C2jIEk.crl (hash: jmbuKRdqYmormIVNziYP6pKzmj/FukyzFnn0WPBH2Rs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:be:4a:1c:9e:2c:b5:40:52:0c:04:a8:02:a6:95:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6b968c5134357df9c2b8b5d0455dd02da32049
Validity
Not Before: Jan 22 16:00:22 2025 GMT
Not After : Jan 23 16:00:22 2025 GMT
Subject: CN=3ff70f7210762b78e28249bdaf60bc122b5c5738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:25:d0:d6:d6:b1:1a:dc:df:60:27:17:09:
cc:16:8c:01:7b:85:b7:64:cb:57:30:09:ed:c4:e8:
1b:cc:86:12:cd:2a:81:8d:54:b4:0e:6d:b1:c1:61:
cd:c7:e3:c7:aa:36:4c:3a:3e:3d:01:0f:30:e3:95:
98:47:c7:09:d6:d9:3b:ca:99:f3:83:e5:7d:40:39:
9b:ae:e9:ad:8b:eb:3b:54:6c:77:32:e6:44:8e:58:
9d:ec:89:49:4e:2b:d0:18:46:dc:d8:40:0c:10:a9:
15:3f:64:26:b8:ca:05:2d:59:24:d9:b0:49:55:80:
17:3a:c6:30:cd:a2:47:5c:69:4f:35:2d:fc:6c:7f:
6f:79:28:9a:63:76:48:c1:44:e7:fd:ac:d5:0d:fa:
4f:30:46:33:f4:93:44:89:15:81:59:98:a8:d9:bf:
a3:3e:0f:41:7a:f4:99:16:1b:d1:9b:b5:f7:41:ae:
92:15:29:94:6f:fb:65:f8:82:c4:52:90:b4:9f:23:
a9:bd:29:d8:98:6a:b0:b3:d8:c9:ac:4a:68:be:a6:
6f:9d:2e:db:9b:f6:9d:23:30:22:a6:84:fd:1b:fd:
ab:c6:74:ad:d1:33:5e:9a:97:68:82:7a:40:2b:c9:
b2:f6:e7:fa:27:2d:86:b6:73:85:2f:56:b7:63:57:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F7:0F:72:10:76:2B:78:E2:82:49:BD:AF:60:BC:12:2B:5C:57:38
X509v3 Authority Key Identifier:
keyid:6C:6B:96:8C:51:34:35:7D:F9:C2:B8:B5:D0:45:5D:D0:2D:A3:20:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGuWjFE0NX35wri10EVd0C2jIEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20f5b0-25e9-4150-82f4-d421044382d1/1/bGuWjFE0NX35wri10EVd0C2jIEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20f5b0-25e9-4150-82f4-d421044382d1/1/bGuWjFE0NX35wri10EVd0C2jIEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:54:88:11:d1:d7:3f:ce:00:65:aa:11:f7:1b:bd:ec:dc:8b:
e0:2d:c3:3e:37:7f:d7:91:49:7c:06:cb:5a:d7:da:03:ba:5a:
58:f7:a4:4d:14:b8:d9:2f:19:ad:f0:2d:38:ab:59:27:f7:0c:
a8:5a:7c:3c:4e:f6:0a:6d:80:b7:55:f0:45:3e:6f:fc:55:9d:
13:27:3f:90:fd:27:e0:77:66:a8:29:0b:b5:1e:2b:44:8b:70:
62:88:8a:b6:0c:16:24:dd:8a:8d:cb:d5:86:eb:4e:b2:88:05:
b4:63:48:17:a1:71:2a:ce:25:00:c7:57:6c:0a:9f:a3:3e:db:
45:33:5d:41:90:cc:ae:73:63:bc:4b:f9:69:af:1f:dd:45:26:
08:23:9e:b6:e8:a9:29:d6:aa:0f:28:e2:3e:83:2f:1f:0d:0d:
50:2b:20:0e:6a:39:3b:bd:66:22:49:b2:ac:47:88:33:3f:46:
26:05:09:97:7e:d6:a7:0b:b3:88:bd:6f:16:bd:ff:6a:1f:c2:
fa:9e:fd:bd:84:64:36:06:84:2b:40:cc:2d:f8:c9:42:96:4d:
b5:38:cf:60:5f:76:d5:c5:1f:fe:05:3c:b8:05:bf:16:bd:1b:
e8:10:0c:eb:9a:7c:31:d3:e9:6a:fa:c1:4d:b1:6f:0c:84:3a:
ec:09:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:33 2025 by rpki-client on console.sobornost.net