Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: 38cbtbk9xUg2lSs36IJ5kx9Bxqj8MVLoe3oMrLWeAys=
Subject key identifier: DD:13:3E:DC:BB:68:CB:0B:40:5E:49:33:58:10:13:D4:BA:1E:C5:B4
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 0194BCA9D25B597CC4CD689CCD66EB6CC411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 0EBF
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: vvdFuuGghvzYWlYgLuei0ML5pO84ToxuzP8/3Xm7hTE=)
2: by6raZCZNNtEi9tbGKEvnYOsqYE.roa (hash: aOGc7df3nlEJOygOWFL3hI418E+YoyI9nyziWKFPXfY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d2:5b:59:7c:c4:cd:68:9c:cd:66:eb:6c:c4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=dd133edcbb68cb0b405e4933581013d4ba1ec5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:18:46:da:5d:98:83:7b:8c:00:15:af:46:
a4:6b:c2:bb:9c:d9:c5:81:55:dc:cd:5d:bc:72:54:
9a:22:d1:8d:4d:58:17:32:72:f1:63:44:13:9d:f1:
ad:c6:72:e9:b5:42:5a:21:db:45:d4:c4:84:41:2d:
e7:bd:f2:65:80:46:b5:99:05:c9:47:e1:70:9e:e5:
ef:84:29:0b:2c:9d:2b:91:d0:53:c0:a4:2a:67:70:
c2:75:76:e5:de:f0:73:31:90:89:96:e5:e6:db:98:
2d:f5:e0:2d:04:57:75:d3:c4:a9:4f:4d:95:86:5a:
30:d3:fd:b2:e4:c7:53:49:5c:2b:a4:e2:21:c6:1a:
ac:6d:3a:af:cc:3c:0c:b4:2d:71:78:9a:91:56:fc:
2f:6a:ad:a1:b8:4a:02:cd:b7:86:4a:b3:46:92:f8:
70:70:e6:24:32:0a:36:7e:ef:43:e4:13:a5:df:96:
59:02:b1:c8:e9:3d:90:1d:b0:0f:55:03:28:6d:0c:
c0:7f:2e:f7:1e:08:b9:17:47:cc:ef:2a:d9:d4:f3:
47:d4:dc:50:b6:02:cf:72:d9:fa:70:50:fb:1b:d6:
36:a0:97:60:ee:4c:7c:10:85:e0:de:68:bf:af:7e:
a2:e5:32:1d:d9:48:14:03:8e:0d:52:a3:ab:fe:d6:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:13:3E:DC:BB:68:CB:0B:40:5E:49:33:58:10:13:D4:BA:1E:C5:B4
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:eb:9b:67:ae:ab:20:70:0c:53:79:02:3d:c6:bd:19:c9:81:
80:fb:cd:b2:82:2e:9d:cf:2f:2c:03:16:07:cc:fb:ad:3a:fa:
0b:78:e7:66:1a:7f:f8:2e:7d:1b:2d:b6:d0:cb:17:86:4f:1f:
1a:b7:5d:b4:4c:66:bd:c4:ce:4a:c6:b8:99:fd:9f:ab:f7:c1:
2d:af:a0:78:bb:30:c4:5f:a7:13:af:da:5c:ea:5b:5e:6a:1f:
fc:06:36:44:2d:80:66:03:08:de:fb:ad:a1:f4:87:28:9b:93:
c3:b9:fe:f9:08:2a:c7:8f:97:7d:83:d7:f3:86:f9:ad:d3:0b:
a4:19:ea:80:1f:f3:2f:e7:08:4b:ff:58:3f:88:bd:b1:84:86:
63:10:f3:4e:3f:6a:0e:33:85:98:51:09:29:a6:04:98:e2:77:
2d:1d:10:1c:66:fc:6c:cf:08:6b:c5:3c:95:67:fb:29:50:7d:
67:cc:d7:d2:8a:48:ce:c9:85:ba:40:b7:bd:6b:60:c9:80:07:
fa:a0:fc:01:f0:04:72:2a:62:48:9b:69:f8:2b:b0:bf:3a:bc:
b3:de:d5:b6:22:90:ff:a0:ae:84:23:dd:f9:7a:42:e9:fc:a2:
e4:08:64:70:7b:52:0e:ad:52:00:61:65:f2:50:87:b6:ca:58:
1d:b1:b1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:19 2025 by rpki-client