Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
File: bWUK8XJES1IRanpn10qsffilXhw.mft (raw, json)
Hash identifier: P7XPw3x9ntOSWCEH1dUMvoy6cFyYJEr+EfJroM9tjfQ=
Subject key identifier: B8:6B:31:B1:0A:B3:FD:4D:43:58:40:B2:38:7A:E3:72:48:0E:DC:52
Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
Certificate issuer: /CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Certificate serial: 0194BCE0DDF6EE1813E5E2417029A12AF522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
Manifest number: 0528
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: JA7bmNFaXPZ3zOhIhSoSK6cX0GM.roa (hash: /9NIaaC/nQfKu4JBvIQ0FkNL7E03OA0xPdL0pUFpcGQ=)
2: bWUK8XJES1IRanpn10qsffilXhw.crl (hash: oXMLjSoiuNmJMuo59opzcA6ToHdZPAxDIv307H3oF7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:dd:f6:ee:18:13:e5:e2:41:70:29:a1:2a:f5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=b86b31b10ab3fd4d435840b2387ae372480edc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:f0:59:6c:65:61:d0:5f:8b:fe:7a:75:54:
43:06:c9:54:18:76:94:cc:34:a6:1d:a6:8b:ae:8b:
66:d3:1f:6c:fd:1c:91:c2:79:81:0d:ca:91:f7:df:
16:3d:65:17:fb:1f:90:00:bf:c0:c8:8e:03:96:15:
65:7d:ce:09:11:26:a6:03:13:fd:12:76:5b:62:4a:
c1:37:0f:b7:f4:db:36:bc:e7:4e:b1:50:cf:02:63:
85:99:cc:00:24:4c:cb:a2:08:06:65:d1:f2:e2:be:
ee:d2:c5:69:de:9a:7a:8f:38:4a:ae:19:7b:67:95:
01:fe:26:0f:73:a2:2a:a7:87:bb:ec:20:ba:7f:15:
80:ba:03:fd:18:30:80:62:77:2c:b2:ba:3b:5e:70:
59:06:e2:a8:d1:80:f2:1e:41:5b:d1:22:5d:6d:46:
fb:b7:8f:c7:26:2c:94:59:f5:97:a3:41:ef:b3:3a:
c1:ee:f3:cd:ea:d1:ba:dd:35:10:f4:99:93:4a:2b:
0d:c0:77:d9:f6:53:84:69:83:74:66:28:53:94:70:
ed:76:0e:7a:d4:06:cd:50:97:5e:19:49:6a:63:b5:
59:cd:7b:40:81:b0:8e:42:e7:00:3b:50:fb:30:3d:
59:e3:92:a9:4f:b5:d4:ed:e7:a4:87:c5:db:53:e6:
2c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6B:31:B1:0A:B3:FD:4D:43:58:40:B2:38:7A:E3:72:48:0E:DC:52
X509v3 Authority Key Identifier:
keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cf:2b:6b:97:4a:4c:0b:56:86:03:ed:fa:be:88:8f:06:a5:
de:0e:fc:d0:63:3d:87:49:bb:f4:66:da:e2:57:5c:1d:90:22:
c5:c4:e9:c1:2b:79:dd:2a:ae:04:fe:82:4b:62:03:21:0c:63:
6d:f1:ad:9a:d0:96:98:87:f0:1b:71:ae:99:05:9e:10:35:f6:
0b:e1:f7:92:6f:39:4c:71:9f:a7:4f:1c:f4:10:e3:16:67:b4:
a6:b6:ef:fd:a0:37:6a:be:22:ec:ee:e1:cd:e5:69:9f:2b:53:
4e:f2:f2:b0:2e:88:a4:13:3b:ae:21:3f:aa:a6:6d:06:b8:60:
33:2e:ba:6e:0b:6f:38:f2:b5:ae:77:fe:7e:9c:9e:31:b3:a4:
9d:3b:4e:6c:e0:13:4b:b2:ce:e2:b2:9d:76:4e:92:8e:05:49:
9d:67:6d:39:3b:f2:7e:ec:bb:24:36:00:e0:77:c7:c7:27:eb:
8e:e1:47:24:9b:92:18:95:76:99:f1:25:8c:61:b6:7b:d2:14:
e0:14:68:62:b2:97:c8:42:86:34:1c:bf:bb:f8:b5:62:64:7b:
98:e7:72:36:aa:3e:95:3e:73:84:3a:22:27:04:45:e0:ba:7c:
43:80:f5:72:c8:0e:6c:2e:b1:62:6d:9e:1c:52:66:f6:ce:fc:
f9:60:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:04 2025 by rpki-client