Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
File: bdLO01LwH3613HYZ7XFMa2pceR4.mft (raw, json)
Hash identifier: 4U50x326kFt79UB/Ok3uAzy/BtoNxNfpMOBxf8IVEco=
Subject key identifier: 74:72:07:24:B1:80:34:A8:E0:82:56:E3:74:E0:B1:AE:10:B9:B2:31
Authority key identifier: 6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
Certificate issuer: /CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Certificate serial: 0194BD85AE991656E467204DE184B68B5647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
Manifest number: 28
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: bdLO01LwH3613HYZ7XFMa2pceR4.crl (hash: R/FNdC1jJFYBawK1GJhzcy0iYraU/+JUGfAQDbAITz8=)
2: ldaG2ZtwFXa0D8MT2zJfF9j3gsg.roa (hash: Iho31engw2p2ICkoCri0OTvpMAFdFfQ9ZJ+brUIBG2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ae:99:16:56:e4:67:20:4d:e1:84:b6:8b:56:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=74720724b18034a8e08256e374e0b1ae10b9b231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:b9:15:24:f3:05:0d:64:a2:df:2c:99:48:
38:9a:51:3c:98:73:37:e5:89:cd:77:c4:bf:74:38:
00:1d:15:2a:d7:b9:6e:69:6a:9a:68:24:b9:a2:7e:
67:69:35:ba:c9:a2:f2:ba:cf:9b:90:6b:7e:72:a6:
aa:73:d2:2d:e8:99:b8:f5:9c:29:13:e4:fc:7e:71:
08:f8:a6:eb:61:01:53:1e:9f:59:28:4f:a6:5b:a5:
95:f8:9c:ef:2d:3b:4d:49:fa:97:8c:90:97:4c:08:
e5:b6:21:e5:a2:73:d2:3f:23:76:ce:42:60:f8:7d:
6c:e3:93:92:70:86:d4:aa:e3:52:aa:bf:2f:0b:52:
e0:7e:a6:36:f5:66:86:c9:69:77:40:80:85:d4:ff:
60:91:3a:53:68:fb:e8:c6:61:19:16:0b:d4:da:f4:
e8:c9:f8:16:0c:9c:2e:ea:52:71:55:33:c2:71:95:
91:94:ce:83:e7:01:74:d1:73:72:0d:b8:96:97:a7:
c3:02:de:d1:31:86:f6:4d:06:ba:86:ae:73:af:0c:
7a:77:18:f1:29:02:1d:a8:c2:b3:94:b8:e3:a4:94:
13:cb:4f:36:0f:8d:0e:21:a7:88:8a:a8:5a:71:11:
10:ad:2e:d9:92:ec:35:c8:b9:ae:32:9f:23:5e:56:
72:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:72:07:24:B1:80:34:A8:E0:82:56:E3:74:E0:B1:AE:10:B9:B2:31
X509v3 Authority Key Identifier:
keyid:6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bb:36:d6:90:87:63:85:a3:6f:85:bb:59:2e:9f:64:85:c8:
ed:ac:87:f0:ad:6a:67:35:66:4c:44:c0:7a:7d:70:8d:8f:a1:
06:f0:aa:48:20:c1:49:af:c6:0a:1f:ec:68:ed:e1:24:0c:9d:
de:9f:c4:3f:dd:75:bf:c9:20:18:37:70:a3:9b:10:ff:9b:d1:
39:b8:a5:6f:d9:68:9c:ac:93:e5:a4:a8:23:87:5e:4f:73:a3:
30:d1:9b:ea:ab:e6:d2:35:18:84:33:f5:2c:73:d5:28:98:d0:
48:51:ee:38:8a:ed:a4:55:04:26:e4:9d:ba:cf:13:a1:7b:55:
1a:68:d9:18:a9:7a:b8:4f:50:3e:86:e7:09:c6:52:ca:2f:2c:
ba:a2:78:cc:82:68:23:82:be:c2:81:5a:c8:f8:c0:f6:3d:9f:
d9:7a:4b:26:a1:3a:ac:47:68:6d:ac:64:3e:41:36:78:46:ac:
8d:9b:c5:ae:e3:c3:bb:a2:3e:97:65:d8:11:30:55:5e:4c:3b:
4f:8e:e2:84:67:79:c1:84:38:59:a7:92:25:36:c0:5f:b3:0c:
29:a8:64:dd:1b:71:6e:51:fe:58:11:c1:68:48:fe:72:67:20:
ad:99:af:9c:a1:64:40:69:1c:cc:d0:76:2d:05:71:ff:93:75:
80:da:8f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:31 2025 by rpki-client