Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
File: K0bJzPf_e9zPg3dioOFXvcE1cOA.mft (raw, json)
Hash identifier: WzS8FsZ2V8g0wRy7Vn+e/HoGiBO1jPaTbrbe0AFe4GA=
Subject key identifier: BC:BC:D1:E7:0B:55:04:21:8D:88:A9:89:8C:3A:DA:47:90:4B:32:BD
Authority key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
Certificate issuer: /CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Certificate serial: 0194BC3C22140F11AFA64B82A1F1AC3BD716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
Manifest number: 043B
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: K0bJzPf_e9zPg3dioOFXvcE1cOA.crl (hash: cNp2XdZ7I9l7QKzEUNqXISzfF+XseVtCArekEHamN14=)
2: qLWefGaIQEsRkcA1tO3guUVq3OU.roa (hash: xslOk/6LQdIGFli9jwCBp6kVRfq8yxFvis0Kh4JP+fk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:22:14:0f:11:af:a6:4b:82:a1:f1:ac:3b:d7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=bcbcd1e70b5504218d88a9898c3ada47904b32bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:bc:ee:1a:2d:02:aa:de:5b:3b:58:cd:3c:
93:c9:c8:c3:20:5a:a3:2a:fe:bb:8f:68:8b:a3:45:
fd:09:15:d3:ff:f5:f3:cd:c2:07:a5:40:73:5c:e1:
f6:b4:2c:60:59:e6:30:49:68:75:96:d0:69:1a:0c:
7d:5f:ee:4a:dc:31:b5:6e:63:f9:fd:c0:ed:39:df:
b4:70:d4:01:64:16:76:27:ab:c6:e1:c1:43:f8:70:
97:69:6b:69:65:5b:fa:3d:7c:87:7f:14:d9:7a:99:
45:ed:66:ab:53:aa:d8:10:bf:8b:90:f1:0b:44:b6:
3a:56:b8:64:d4:0d:dc:d7:86:c2:ad:08:ef:7a:c7:
95:91:82:f7:c4:c1:e7:c4:3c:77:3d:0f:62:32:35:
ed:d3:c9:5a:5b:6a:a4:10:08:a4:f8:49:55:15:80:
a8:5a:60:bd:74:15:1e:b1:f0:de:ca:da:16:42:8c:
01:ca:ec:b0:c6:b4:6c:79:65:bc:83:6d:0a:1c:24:
f4:89:4c:cc:20:1a:ce:69:18:bc:90:03:a7:ca:ee:
b2:28:07:65:01:05:57:9f:63:c0:59:5d:0b:9e:a4:
5a:86:6f:0e:cc:cd:b3:73:84:a2:30:45:a9:6a:50:
8c:31:9f:df:96:ec:31:f7:c8:b7:1f:5b:b7:25:e5:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BC:D1:E7:0B:55:04:21:8D:88:A9:89:8C:3A:DA:47:90:4B:32:BD
X509v3 Authority Key Identifier:
keyid:2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9a:27:9a:cd:42:4c:99:15:72:15:a5:ec:05:fe:80:61:f9:
d3:e7:3a:55:7d:7f:3b:73:fc:e9:18:97:44:52:fb:4b:99:99:
b6:be:9b:2a:a7:5b:31:34:38:f0:e4:24:56:1c:74:e0:63:2c:
3b:9b:07:47:df:92:8c:1f:d4:ce:94:53:55:9d:24:44:3b:dc:
d8:05:ce:01:2b:1b:24:c9:12:46:7f:ed:f2:c2:0b:c6:95:cf:
7a:f8:b6:be:d8:07:4d:b6:c8:1f:e5:be:2f:7d:13:44:3b:29:
c0:4c:2e:f0:8a:72:43:14:8a:34:63:d0:79:e7:a2:c4:57:c7:
67:d4:f7:67:11:cf:f8:46:de:b0:b9:64:c7:13:fa:5d:65:85:
a9:2b:c1:ff:41:fe:40:c5:0f:0b:51:8a:02:92:c8:1e:66:ee:
c1:31:cb:00:c7:00:ff:59:bf:cf:4b:b6:87:9f:15:b5:b9:7b:
95:57:2c:e5:8c:52:8f:81:dc:98:cb:1b:9c:e6:5a:63:91:bc:
fa:49:4d:8d:d6:39:05:23:27:26:b6:29:8e:42:6f:4e:eb:80:
3d:80:c1:0a:cb:d3:c3:35:b0:5c:79:d9:c4:2e:1f:df:3d:1c:
96:b0:b2:32:d8:5a:79:23:5b:d6:f3:50:5a:48:cc:79:91:13:
e6:dc:5d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:48 2025 by rpki-client