Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File: bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier: yE3HFwg2GSZ44uBpegX8gn1vIoTCcz99Gq6yrzGPa2s=
Subject key identifier: B6:F8:C3:01:45:89:02:0F:B5:C0:E8:83:BB:90:A5:C5:B7:C7:9F:B5
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer: /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial: 0194BC72FFF59F72A95A478C4B0D8D2A6278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number: 0BF5
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: NbaALD0q3dEG97u3Hxf4a1Hu0XU.roa (hash: I2cRj+89A0JU13KVmdh4JlmOsFRbyD7Lf9jI3qtGRKU=)
2: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: mpan7WJowlHV68b1Zr412EL+ueCEkRbOLPbV0cWK3vA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ff:f5:9f:72:a9:5a:47:8c:4b:0d:8d:2a:62:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=b6f8c3014589020fb5c0e883bb90a5c5b7c79fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:6a:d8:b1:4e:f9:42:ea:d0:c4:9c:62:4d:
b5:2d:ac:99:9b:17:e9:61:30:d5:bd:69:80:98:f9:
71:9e:6b:be:d7:97:7c:49:97:62:ca:71:ad:f6:22:
e5:c5:ed:a5:94:ee:cf:75:b9:24:d0:23:e4:6b:a7:
7e:26:90:0c:16:fe:49:f0:8a:e4:cc:d5:db:92:7b:
5d:8f:b0:4a:bb:f1:75:60:58:b1:c0:7e:f8:64:bd:
9d:52:0f:dc:6b:08:bd:21:ac:bb:f0:dc:22:1a:c2:
c7:a5:e0:ac:4a:d1:c5:2a:87:76:eb:7a:e2:c1:3c:
07:87:f7:a2:86:9d:8d:2a:81:83:c2:c0:a0:bf:01:
a2:00:11:e6:23:9f:e2:96:ac:c1:ad:40:5e:1b:34:
7f:6d:73:52:66:81:57:7c:77:b4:8b:4b:9c:28:a0:
60:e3:6b:05:ad:48:53:a1:c7:02:49:45:d0:99:23:
9d:8d:b2:dd:5e:0f:4c:fe:de:2f:88:92:e8:ca:a3:
71:d4:92:9c:64:76:e6:af:f1:fb:5e:d2:0d:bb:53:
a6:37:80:0b:b4:b6:4e:0b:5e:d4:33:23:f4:38:4b:
cb:b4:c0:11:3c:1a:17:55:5d:42:02:1f:27:91:3f:
7f:c3:9f:79:c5:aa:ea:e4:0d:94:c5:e9:1b:8b:6e:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F8:C3:01:45:89:02:0F:B5:C0:E8:83:BB:90:A5:C5:B7:C7:9F:B5
X509v3 Authority Key Identifier:
keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:87:f6:c0:4c:23:8b:93:3a:ed:de:53:28:67:ab:b2:e9:ce:
3b:fd:3f:80:06:99:33:51:15:d7:28:50:40:26:44:a9:c6:c5:
cd:c6:76:e9:ec:4e:66:b1:de:a8:db:35:67:9b:24:39:17:2e:
33:f4:cb:0f:b6:fd:60:6c:c8:26:1f:f4:db:0d:47:10:cb:b8:
8e:fd:27:55:1a:30:c3:30:7b:14:c0:82:81:21:32:b0:c8:25:
14:bb:2a:3a:8f:e5:fc:5f:b1:a1:af:5d:2d:74:e7:e8:20:20:
82:35:c5:3b:b6:24:5f:9b:ae:10:4f:ac:b8:3c:b3:8b:bc:2d:
19:91:e7:79:2c:38:88:ac:f3:51:61:2d:d9:09:6f:87:a7:c4:
96:8b:75:99:3e:15:a0:b5:70:a8:70:d1:9f:a5:bf:fa:1d:d5:
f1:3b:10:d2:98:c5:b9:32:49:a5:b3:0e:1c:67:64:24:3c:b2:
98:e7:9a:b6:b1:7c:84:21:2c:7e:37:59:d3:22:a5:c9:83:bd:
a9:d0:be:fe:49:29:55:58:73:30:30:98:db:38:dd:e3:2c:29:
3e:b4:a3:1c:8d:03:3e:0c:aa:13:bd:d5:a4:e9:dd:b4:9e:32:
38:f0:d5:9f:65:0c:09:c4:3f:6f:cf:91:bc:d8:9f:0d:2c:ca:
ad:bd:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:08 2025 by rpki-client