Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
File: bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json)
Hash identifier: bAdNqJN5hzll2mSXdjmpBWFdIdKhTDc4lwRZ+FmMgbw=
Subject key identifier: 76:83:6A:9A:C7:B4:95:D4:B0:03:B2:9B:E1:D4:23:B2:C1:F8:D6:72
Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e
Certificate serial: 0194BBCE205881830E05F3BAE25D4FA658FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
Manifest number: 85
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: C_vZrzZdhy-uejOZ6_GWZTSm_n0.roa (hash: 79ZNhw6Fw3tlIyCfv3zLmQ4ilyJAmRJY2DfEyitGouQ=)
2: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: FAflMlOt6INpSZQS9I0cqmQ4bmAY0ImcnDvRoNEGeyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:20:58:81:83:0e:05:f3:ba:e2:5d:4f:a6:58:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=76836a9ac7b495d4b003b29be1d423b2c1f8d672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:aa:7e:57:37:18:40:e4:05:a2:e2:d5:ad:
59:28:73:9e:b3:0c:33:f2:ee:bd:2f:de:14:16:a6:
ef:7a:b9:2c:29:94:41:50:3e:79:ee:e9:48:26:52:
df:de:78:44:70:4c:ab:55:ff:6e:0f:6e:1d:d4:4a:
78:de:e7:1a:38:84:98:1f:7e:b6:40:37:d3:55:40:
af:62:b5:69:58:65:be:65:fb:1e:0e:c4:ba:d8:c9:
a3:0e:d7:c8:bf:e7:3d:c8:6f:7f:02:f6:0b:b9:36:
92:01:1e:cd:40:c6:2a:ac:04:6b:bd:a1:ce:6b:9a:
10:e4:ef:6d:ab:35:b2:fa:f5:6a:a8:17:79:6f:d5:
a0:de:9c:a3:8f:c6:13:a6:fb:02:33:14:a9:7b:77:
4d:99:a3:52:c3:17:23:74:b2:5b:e5:90:87:d9:c9:
31:37:77:ec:0f:09:15:f3:29:30:ea:53:7e:09:9b:
2f:d3:50:5a:bb:73:61:12:f1:b9:43:77:63:29:bd:
4d:06:1b:06:78:53:95:f2:63:ba:dd:8f:63:23:d9:
a1:b9:d3:9b:44:8e:1b:7a:d6:6b:be:f8:d1:f5:e3:
8d:a4:31:71:46:6d:3f:1e:af:d2:9c:6e:cf:86:0d:
87:a3:dc:88:69:36:9c:e2:d3:83:d0:94:c5:32:3d:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:83:6A:9A:C7:B4:95:D4:B0:03:B2:9B:E1:D4:23:B2:C1:F8:D6:72
X509v3 Authority Key Identifier:
keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:56:52:ad:ae:d4:c3:5a:11:c0:19:ce:c5:3a:5a:a4:c0:d2:
78:b4:ee:53:fd:29:50:6b:d7:96:e2:02:4e:80:67:6a:e1:27:
20:35:05:f1:4e:14:43:61:ad:1f:6b:e7:b4:32:be:9d:fe:67:
e0:a7:e5:d2:d5:76:aa:27:15:67:69:4d:68:d5:b9:f1:fd:a2:
ed:94:2c:d6:94:43:ec:74:7d:da:a9:e1:ab:ac:dd:aa:1b:a2:
96:3a:69:ab:1a:3f:f8:5f:58:97:1d:49:08:2c:c7:12:a8:6b:
37:8e:a7:38:ca:5b:59:bd:7d:33:2c:c0:94:ea:11:1a:36:f4:
11:9f:d7:fe:d7:08:25:7c:e5:85:c6:b9:bc:2a:8d:4b:fe:a5:
47:97:96:50:5a:b8:e1:33:c7:f2:4a:90:d1:83:ed:7d:38:bb:
20:93:6c:12:1f:53:06:12:30:28:e6:4a:c0:fb:82:cc:56:81:
22:54:05:6b:ca:f3:6f:07:9f:6f:df:32:ed:c3:83:da:8f:d4:
e0:26:4b:01:5a:58:6d:6d:5e:4d:08:60:07:f4:b9:a7:79:b9:
13:21:22:a4:57:42:2e:85:53:be:bb:cc:c5:74:9f:e1:89:bf:
39:98:57:b3:f3:8c:52:bf:03:2f:5f:65:69:5a:cd:6c:39:89:
cf:11:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:50 2025 by rpki-client