Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier: FTeRTNTYZoa7Iz2SDCiOk9D3PjIrc1aFxiF6wOCmMs8=
Subject key identifier: 62:BC:58:E0:CF:14:4C:4E:08:11:40:3C:0A:EB:55:04:21:B7:E4:90
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 0194BD85769A850BFE9D31D5F12A4C73890C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number: 0A32
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: 2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa (hash: tlC/Cdti9DOTrW2vJ3/LMhMeuxhFOtOxFl2p6304PGs=)
2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: 91X3bC3ZKEs8VVMiB4DFn4RfjNv/veQEQhqfOUgijlg=)
3: fU6yW_PiEcFG6y0YRf-8f1Jzu_Q.roa (hash: 2+Tq9mzuPHMsXsWwvsSna6yZaCK0no4VyORSRWilikA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:76:9a:85:0b:fe:9d:31:d5:f1:2a:4c:73:89:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=62bc58e0cf144c4e0811403c0aeb550421b7e490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:03:d5:d2:39:09:bf:70:7b:d5:9c:ab:54:
9b:05:a6:f7:d1:dc:ff:a7:84:9c:71:ba:b6:bc:40:
9e:1c:59:7c:49:f6:5e:d0:7f:e7:6f:6f:f4:bf:ba:
19:b0:c5:8a:78:26:13:1f:c0:c4:40:7d:99:69:be:
55:e4:68:93:bd:f6:c3:75:54:8f:cd:16:e2:81:1f:
be:18:03:0b:e7:f3:69:ca:34:49:3d:31:83:73:8f:
db:7a:06:15:fb:27:2f:a8:0f:ec:4f:ed:a6:8b:9b:
0e:d1:99:96:4d:37:42:f4:49:69:42:4b:07:7f:e3:
f0:53:db:67:7c:23:5d:20:98:b4:50:83:f2:fa:c1:
2a:08:89:db:db:0f:01:5d:66:b9:b3:1d:f6:17:8a:
31:02:94:14:e5:7a:e3:dc:33:93:62:64:dc:b5:c1:
89:13:4e:d3:b8:95:f1:32:a7:81:69:94:87:6d:f7:
b9:e2:b4:03:01:48:4c:d9:8b:b2:ac:7f:9a:f2:fd:
a6:b9:2e:df:26:a3:26:97:f2:42:2e:7d:d1:5b:6a:
39:25:72:48:16:bd:56:88:35:8b:23:09:d7:69:1f:
1a:f7:7b:1c:2f:aa:3d:2f:61:7e:e2:99:8f:6c:b2:
f9:89:d1:ee:f7:b6:b3:52:73:f6:02:43:27:77:a9:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BC:58:E0:CF:14:4C:4E:08:11:40:3C:0A:EB:55:04:21:B7:E4:90
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:88:29:35:62:66:ed:04:99:74:6a:79:48:f7:c0:f8:ae:e5:
7b:49:e5:10:82:89:66:31:2c:c9:20:2c:49:48:70:5c:85:f4:
61:f3:24:ea:c2:91:2c:0e:12:ad:87:b9:eb:8a:27:17:25:8e:
a1:fd:f4:36:3a:f6:4e:1b:6c:63:3c:11:a8:45:6f:78:76:9e:
13:5c:55:04:36:39:d3:ab:89:c8:44:76:9e:7c:3f:ef:dc:7e:
6e:76:e6:36:ef:7b:4a:ac:7e:51:34:ed:73:1b:50:61:8b:fe:
f9:ff:75:f2:6b:5f:9e:ff:8b:16:b8:02:3b:39:f5:70:11:c2:
78:37:42:fe:51:d4:77:2a:50:93:9f:e6:2a:d8:2a:7e:eb:de:
75:d4:a2:05:84:33:a3:c0:66:84:d3:a9:96:56:d3:97:ea:11:
1a:07:64:ca:c7:1d:43:57:c9:f9:1b:6d:c9:b3:32:b0:4b:c4:
76:31:b1:9d:b6:48:e2:a2:1b:35:d6:62:c9:fb:32:50:4a:da:
f7:2b:67:14:87:6b:70:b3:37:70:f5:9c:6c:d2:e1:45:aa:b3:
91:51:37:b7:cd:c1:7c:d5:b4:cd:3c:f7:09:4a:3f:ba:be:70:
91:92:32:68:2a:20:5e:b6:1e:10:7c:cb:5b:65:4e:23:e5:9e:
16:37:f2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:31:06 2025 by rpki-client