Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: SNou6BNFjf5/LbX+3mn2L1/kNa/TzvvAzN1evClKmic=
Subject key identifier: 31:91:46:94:33:6D:1A:E6:F4:81:25:C6:4E:37:8C:8F:82:D5:A5:2E
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 0194BD17AFFB42074C51F56481EFB62B5BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 0593
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: JztZZ5jdsYiJwH6r3ruJ841yjPA.roa (hash: fWtXOGVQeuynraDkbnyZnR91bHF3bELX/gnfpid099o=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: if/vQ8fBFnHuCKfrUJ7mPGzYH4MtqC88FXvHSW94+A8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:af:fb:42:07:4c:51:f5:64:81:ef:b6:2b:5b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=31914694336d1ae6f48125c64e378c8f82d5a52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:51:27:95:35:ea:6e:48:62:bd:66:f8:26:
f0:bc:71:ff:1c:fb:28:88:d8:60:59:18:42:a9:87:
e0:d4:60:a2:60:a1:0a:26:8b:22:f9:ec:7a:e9:f6:
ca:8d:ef:45:a8:69:dd:db:0b:ed:40:bc:ae:70:42:
61:a8:2f:b0:08:32:d3:1e:0c:00:c2:c1:57:8c:3b:
9f:f2:3e:b5:4c:38:a5:87:4c:3e:00:1e:99:96:ab:
22:e6:12:a9:46:8d:71:21:2e:65:bb:5e:e7:3d:be:
ef:31:42:8a:27:a9:ae:87:42:8f:da:3c:0c:83:5d:
a9:a1:ea:7a:63:eb:1e:4f:85:db:c4:2c:70:17:f2:
a5:22:7a:ce:b4:43:29:b2:7e:04:2b:54:32:18:36:
b4:18:be:c7:99:ae:d1:0d:6c:33:8e:7a:7c:9a:d0:
f9:d2:c7:82:9d:88:5e:3a:6f:60:d7:e3:f4:4d:77:
12:b2:eb:4d:ad:0a:0a:30:ec:e8:83:a0:e4:48:84:
05:bb:9f:8a:0c:08:9e:f3:9a:24:99:aa:5b:56:54:
7b:ab:47:c8:e9:91:e4:24:cf:21:36:1e:96:35:75:
6e:38:db:71:ec:5d:6c:f9:95:4c:ec:09:99:8d:77:
d8:c5:67:c0:bd:79:94:11:8e:61:67:96:36:6a:9c:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:46:94:33:6D:1A:E6:F4:81:25:C6:4E:37:8C:8F:82:D5:A5:2E
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bd:32:58:bf:06:78:c6:40:d6:90:3d:69:7b:32:b6:65:c2:
df:75:af:60:e6:d9:4c:bc:bf:e0:01:40:c7:4b:b2:1c:53:ff:
5a:8c:da:46:41:00:fc:2e:25:c8:12:f8:33:05:f0:d2:9b:f0:
99:18:2e:51:ab:ad:cf:1f:2d:17:ab:d7:24:a2:da:4a:b8:73:
51:39:45:84:77:a3:85:53:e7:f0:04:96:25:cb:bb:2e:ff:82:
59:fd:c1:72:a2:e9:ab:3d:e1:1b:b4:37:8c:ef:aa:53:b8:23:
62:c6:72:72:91:2b:3f:5c:b0:da:e1:5f:79:b0:7e:a3:2f:c8:
be:08:e0:0b:68:b4:89:ee:7e:a7:f6:ac:33:81:13:56:38:32:
cd:55:11:3d:23:ac:5a:64:d9:a7:ae:0f:f3:53:b4:d1:53:c2:
09:9e:e8:d7:2d:98:25:ef:71:ab:80:41:fe:f4:ac:6d:8b:75:
09:1c:0f:ff:eb:a9:40:85:59:f8:1d:5d:2a:33:f0:d5:f1:0d:
f6:59:67:26:b5:20:a7:f6:e1:c1:e1:ca:56:85:8d:e0:36:5a:
ed:72:10:68:2a:c8:b5:e7:90:75:5c:93:10:b7:a9:53:8f:2a:
cb:a8:df:c2:50:09:26:40:c3:77:df:b2:0c:41:f6:0b:d8:5d:
95:79:d7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:46 2025 by rpki-client