Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json)
Hash identifier: qWW45/rgY+jQL5XAc6wcP9tsfpukJsyoJJUGTftrhTw=
Subject key identifier: 19:C5:9B:F8:F8:4F:C7:BB:F3:34:50:AB:2B:D8:7E:A7:2A:EA:52:91
Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
Certificate issuer: /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Certificate serial: 0194BD17D13AB9462648DE413A8F79BFA3C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
Manifest number: 1303
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: 0odbREbB857YuWZzhCvuCAsEstvxhJWPlGyE0Tpfrfs=)
2: xIncpff8t5DuBdap78CZRmBq41M.roa (hash: iuGa85kLc6g4Qd8kr/ZV4w/v+4lb0FJF9McHzQYZMGI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d1:3a:b9:46:26:48:de:41:3a:8f:79:bf:a3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=19c59bf8f84fc7bbf33450ab2bd87ea72aea5291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:f9:ee:29:5c:96:31:0c:2d:5f:75:e7:32:
41:f1:36:cf:b1:e0:37:b2:3d:e9:f3:59:7b:67:89:
f1:3f:8f:74:7d:e5:8b:ba:d9:5e:d4:39:2c:aa:2b:
6a:aa:eb:f4:a1:f0:16:7d:02:95:44:6e:b9:f5:36:
c9:8a:c4:a6:a3:f4:12:e0:29:a9:93:0d:ed:9d:19:
1e:ad:43:6a:f9:ae:fd:9a:75:b6:5b:8b:fc:11:99:
d9:07:da:16:ae:11:6d:a4:57:0c:c9:3b:b5:d7:65:
c1:20:8f:3f:ad:8a:d9:48:b4:b2:d5:56:8e:26:bc:
8c:c5:9b:6d:2c:82:8c:f9:3b:aa:c8:40:a8:8e:e3:
f9:6a:b4:eb:e3:6c:ab:a4:d6:b9:7a:e2:72:c8:6f:
57:51:0c:df:00:1b:92:81:8e:f7:ed:d0:9e:e4:cc:
8e:0c:8c:69:8c:92:99:6d:c6:dd:86:ce:54:43:a3:
6d:ea:67:d6:52:d4:1c:ac:6c:39:09:57:de:15:a8:
0b:c0:95:96:51:81:93:b9:d8:c5:46:91:e4:e5:2a:
26:70:fd:7e:e8:a1:c2:b8:fd:36:68:2b:af:72:fe:
d6:68:f5:38:03:84:2a:8a:e5:bc:59:3c:68:62:2c:
7f:99:c5:4c:80:e4:81:e0:25:ff:29:7a:a0:08:cb:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C5:9B:F8:F8:4F:C7:BB:F3:34:50:AB:2B:D8:7E:A7:2A:EA:52:91
X509v3 Authority Key Identifier:
keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:22:e2:eb:37:8c:22:91:5b:10:d6:ec:71:1f:2e:ff:70:ff:
ca:c7:c5:55:c7:dc:6c:f8:57:3a:99:74:de:e6:ed:40:87:2f:
95:e0:8a:0e:af:48:ef:86:67:f9:44:e9:28:ef:8d:04:6e:a0:
66:4f:df:6a:90:77:e2:4d:8c:78:2f:5e:bb:56:4a:fd:20:6a:
fd:be:d4:55:60:31:21:17:c4:41:8a:8f:1d:c2:a7:cd:85:dd:
28:ae:8d:cc:87:94:dd:23:d5:56:3f:d5:ac:e5:01:e4:d8:3e:
94:7b:00:2c:bc:03:dc:f7:c6:82:f1:49:e2:1b:e9:6b:d4:ce:
22:c6:86:97:1c:83:ff:84:e4:e1:34:3a:7c:95:63:b9:ca:74:
66:a2:87:5a:3d:36:eb:34:bd:8c:ce:99:73:89:cf:02:37:a5:
ce:eb:28:be:70:12:bd:25:a7:e9:c8:f3:ce:25:00:b4:8d:6e:
7d:87:f4:89:e8:40:5a:9d:5f:50:8b:45:c7:98:d9:94:ea:8b:
3b:b3:96:9e:c3:e8:d0:fe:8c:c7:e4:e3:97:b7:54:57:13:fc:
ff:5c:74:40:a0:b1:4b:b7:23:24:9d:cc:6c:d1:9c:0a:f7:44:
ee:44:97:03:2c:cc:48:2b:98:21:84:48:b5:55:07:b9:a8:96:
be:df:08:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:32:41 2025 by rpki-client