Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
File: bHO9JP2DCIa_otKWFBbSGF3jN3I.mft (raw, json)
Hash identifier: cuaasHO4hkrbjImgZn4LyAh61xezbHWtoTItjLMmZrw=
Subject key identifier: 25:D2:C8:ED:00:F1:56:46:7D:F4:A7:34:C9:2D:17:24:F6:8D:59:CA
Authority key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
Certificate issuer: /CN=6c73bd24fd830886bfa2d2961416d2185de33772
Certificate serial: 0194BBCDDF97283EC335700A12FD75A6A2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
Manifest number: 0776
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: bHO9JP2DCIa_otKWFBbSGF3jN3I.crl (hash: o7olQkHHdYF+h8v1vHHb4loI+tTHUO3L9qB/V8+zn+s=)
2: qHEAWZ6N3iBzcK7IIzIjqot58Rk.roa (hash: n8u6jtIG9RsDk/UjBbBpLB8puiC2i8ky96Vt7ctj0eY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:df:97:28:3e:c3:35:70:0a:12:fd:75:a6:a2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73bd24fd830886bfa2d2961416d2185de33772
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=25d2c8ed00f156467df4a734c92d1724f68d59ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:32:43:52:14:a2:5a:37:6d:eb:b5:db:25:
ff:14:3a:2e:6d:aa:f4:a8:b7:94:2c:24:31:a2:07:
a6:7b:24:b3:5f:1b:97:41:5c:26:5c:b4:4a:c4:21:
e8:5c:71:89:ff:44:8b:fe:88:3f:00:39:9a:9d:50:
db:d9:78:5c:b3:50:aa:a5:f0:78:7d:9d:e3:ff:93:
57:de:36:78:24:ae:46:e1:2a:56:19:5d:67:75:e2:
f6:a8:af:cf:b9:6d:4f:86:31:0d:67:60:f0:3b:e4:
04:a5:0e:72:91:63:e3:e1:08:c6:de:34:b5:5f:91:
5d:23:f8:25:49:94:af:ee:a6:f2:38:93:54:ca:73:
e4:32:51:a3:d4:0c:fa:ad:b6:e1:7c:32:2f:b7:68:
ac:25:3c:e2:b3:b9:bb:93:98:f9:2b:da:2b:32:5d:
d5:90:0e:e2:c7:d8:68:6c:06:20:af:11:7a:08:6d:
8b:73:67:b4:cd:c9:93:69:aa:8d:5d:73:5c:1d:60:
6c:cc:9a:ac:8d:de:e2:4a:9c:31:61:8e:14:07:74:
17:14:1e:06:e9:67:50:c0:23:b8:95:88:1a:d8:a6:
f1:52:4c:44:74:32:b9:bb:23:1e:46:0a:47:c8:2d:
80:d0:ed:8f:1e:44:3c:56:1d:d9:e4:49:17:c3:2f:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D2:C8:ED:00:F1:56:46:7D:F4:A7:34:C9:2D:17:24:F6:8D:59:CA
X509v3 Authority Key Identifier:
keyid:6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b3:a9:e5:9b:a7:4b:d2:c3:a1:01:1e:ab:bf:41:b3:54:fc:
51:06:a0:15:26:23:fc:6a:9f:14:ec:fd:fe:eb:ef:07:eb:1e:
f2:82:07:41:e4:89:38:71:db:3f:ba:8d:00:8f:a8:d2:35:85:
ea:b0:24:56:3d:7c:f9:71:1c:9d:50:9b:fb:0a:dc:fd:84:f6:
7d:16:51:49:f7:61:ec:05:65:99:df:3f:3e:82:13:7d:28:c8:
6e:4a:07:d0:86:47:1f:f3:d6:0c:fc:d6:11:3b:bd:03:17:72:
da:3b:90:49:df:9b:b5:3d:ed:b8:ce:b1:c6:b6:0f:e6:6b:c2:
05:d2:0c:98:1d:8d:1f:3b:1b:56:41:c7:81:b9:60:cb:2b:33:
e8:9d:37:2a:50:1f:93:0c:7d:fd:3e:64:21:f8:e8:95:09:8c:
92:31:72:38:e8:be:df:6e:bf:1c:50:ec:cc:15:27:eb:2a:11:
a8:7d:67:5f:b8:59:b0:de:12:bf:7b:50:50:23:ce:1f:27:33:
50:86:a6:b6:1b:ec:60:a1:a8:41:83:ba:17:7b:3c:e5:0f:de:
39:47:08:78:8f:5b:75:32:35:b0:f4:83:16:ff:66:ec:fe:68:
ca:3f:89:34:68:db:59:99:7a:e4:9b:69:bb:ac:26:fd:6e:c2:
39:e3:41:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:11:37 2025 by rpki-client