Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: 3jPS+5J3KnU9LTuyc1Rjq48+bza57DXyJMA7JdLkPhA=
Subject key identifier: F1:C5:03:5A:15:41:DC:60:46:63:01:A0:B5:D5:ED:54:DD:38:D6:E1
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 0194BBCED5C005A48350A00A3241B70203CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0B9C
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=)
2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: gJcXGYC4eusMdquYtpKuZmHkVDDDhocFNnK8YTwCERU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d5:c0:05:a4:83:50:a0:0a:32:41:b7:02:03:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=f1c5035a1541dc60466301a0b5d5ed54dd38d6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:43:4b:80:3b:65:f3:5d:33:86:1e:97:8a:55:
15:3d:95:21:7c:54:3e:41:4d:04:af:f0:b4:ea:a8:
15:f2:a0:6f:06:68:d4:cc:7a:05:a1:6b:91:1e:2a:
4c:e0:21:f9:3e:6d:dd:83:a3:54:f2:84:4b:8c:74:
06:5d:15:3e:ff:7e:f5:24:ca:9f:9c:6e:49:16:36:
b4:8c:88:13:c4:74:a3:cd:99:43:23:54:85:eb:f7:
ef:a0:c0:ac:e6:22:d6:88:0b:b6:80:91:6e:ee:ba:
c8:96:e7:a5:58:cb:e9:69:8b:6b:c5:a5:60:bb:77:
ad:85:e6:a1:c0:cb:bb:42:40:34:4c:b3:a2:a5:eb:
00:92:c5:f6:55:5f:94:6f:de:86:a6:3d:f6:2f:a8:
28:78:07:35:52:05:b1:6d:67:50:4a:73:50:78:82:
f6:8b:7b:99:97:2f:ea:e2:3d:16:3e:f5:82:b3:8c:
3b:fa:b4:0e:5f:58:eb:6e:99:79:22:58:d6:8a:8e:
25:11:bf:e4:c2:58:1e:03:b9:be:bb:c6:38:27:d6:
aa:42:87:bb:f2:fd:9c:b6:6b:42:31:cd:a2:3c:ba:
df:6e:f0:51:87:31:3a:7c:38:be:84:55:b3:95:95:
34:50:87:c0:d1:f6:d5:eb:50:b7:9e:02:5f:44:fa:
9c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C5:03:5A:15:41:DC:60:46:63:01:A0:B5:D5:ED:54:DD:38:D6:E1
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:21:3e:dd:07:a1:47:25:63:8a:2d:c4:e7:08:d8:be:14:48:
16:cd:7b:9c:42:40:f3:4e:b9:d9:02:2b:d2:67:3f:b5:a6:ae:
26:83:ec:64:7f:32:1c:bb:24:44:3a:53:25:dc:bf:00:e7:95:
1b:56:9d:61:23:58:2e:33:3b:e5:08:ce:d1:4a:91:1f:94:ef:
ff:0c:f2:92:21:e7:47:8b:9d:13:9d:b4:f1:f3:36:8f:da:89:
dd:e4:90:1c:6e:8b:71:80:b8:c3:14:ef:7a:59:39:28:e4:54:
5e:e8:e0:9a:cb:30:33:f0:12:ee:3e:c8:97:49:81:ad:06:4d:
d0:76:11:33:d5:54:de:ae:1f:fd:8d:e7:ea:4b:e4:59:10:eb:
f2:04:9e:45:8b:ec:21:d6:7a:f6:69:e4:17:5f:90:ec:7f:f2:
1b:b8:7a:23:08:11:98:b3:5a:04:71:7d:42:ea:9e:84:3d:35:
35:c9:dd:ff:0f:bd:ef:d3:ab:97:ec:ef:22:fb:a5:15:35:aa:
65:1c:47:82:e8:33:0c:f9:02:a9:85:41:81:63:a7:4f:d6:b9:
29:80:65:7e:6b:3b:29:53:e6:44:e2:c8:1b:b6:0f:a6:90:bd:
e7:c1:37:c5:c4:52:fc:df:da:ea:5f:85:2d:a7:54:96:19:61:
d6:87:32:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:40 2025 by rpki-client