Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft
File: bQih9MOF86e2KYTVPoFmWplUEPM.mft (raw, json)
Hash identifier: m+j5UtnYiAMq6VKUUjPIM9bEJr1TN1g7s4u2FmANCMA=
Subject key identifier: 25:ED:6B:C4:85:3F:38:60:26:A2:DE:DE:88:8B:8B:6F:42:F5:CE:13
Authority key identifier: 6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3
Certificate issuer: /CN=6d08a1f4c385f3a7b62984d53e81665a995410f3
Certificate serial: 0194BD4E89558623B0A6FAF909DC0DB25B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft
Manifest number: 082A
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: J7EMvjCrDCSEaNvEXQjzbwryII4.roa (hash: Ak6AJOV8w0m5lQCAa41zEyYCpJIBSURSyT+w9pihP/8=)
2: bQih9MOF86e2KYTVPoFmWplUEPM.crl (hash: TptRPCfvjQ7/R//ApW1ktV96WAvyM+63syHC4uU5B4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:89:55:86:23:b0:a6:fa:f9:09:dc:0d:b2:5b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d08a1f4c385f3a7b62984d53e81665a995410f3
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=25ed6bc4853f386026a2dede888b8b6f42f5ce13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:2b:35:77:c0:94:ff:16:ec:0b:bd:55:85:
43:28:29:a9:2e:8f:2f:2d:e6:ae:fe:bf:ec:ad:f1:
05:47:36:2f:67:c7:24:f7:1a:6c:be:25:e6:1b:e4:
ac:a2:e2:ea:b0:7d:7d:9c:bb:f2:3d:c4:04:86:e7:
f9:82:37:46:62:38:18:4f:c0:56:b6:ab:ee:60:a5:
13:af:22:1a:61:23:ae:90:3b:20:0f:5f:19:f8:f4:
93:8b:35:69:d0:8b:27:55:cb:5f:9f:13:2b:aa:83:
4a:d5:54:28:cc:07:e0:6e:c2:16:de:ab:f5:a1:6c:
a4:b4:dd:0d:d0:78:da:d4:40:cd:0c:84:65:c2:b8:
bc:65:70:0b:10:43:91:0e:b4:04:6a:e1:91:57:e1:
f2:68:bc:b8:0e:53:a5:52:96:2f:fd:4c:cc:7f:c5:
2c:f9:fb:e9:57:ef:12:4f:dc:e2:a8:c1:ed:1d:d2:
6f:a8:09:3e:02:69:34:f0:eb:b4:89:0b:06:05:50:
57:e4:e6:7f:2d:9e:3c:84:4b:58:26:43:96:38:7a:
db:15:60:1d:ef:2a:2b:cf:af:50:fc:f0:5b:b2:06:
8e:19:61:00:21:e6:7a:a4:ca:45:b3:ee:34:6e:97:
53:e0:c5:6c:77:11:16:70:88:4f:fd:c1:09:83:cd:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:ED:6B:C4:85:3F:38:60:26:A2:DE:DE:88:8B:8B:6F:42:F5:CE:13
X509v3 Authority Key Identifier:
keyid:6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0e:f2:f6:c7:5a:1f:6c:89:a0:b0:fe:a9:d0:32:1f:0b:2d:
50:6e:41:99:dd:1b:35:c9:39:d6:73:4b:84:fb:6a:60:dd:f5:
98:0a:87:36:1b:3b:f3:c3:d7:72:19:6d:56:a0:9e:cc:09:26:
d7:ce:65:91:7e:f3:1a:22:33:c7:48:64:8c:cd:72:bd:22:29:
af:1b:07:46:ec:ab:33:db:a8:06:15:cf:18:7c:45:0b:f6:08:
fc:e9:5c:dc:46:ee:8b:2c:b1:3f:a1:52:f7:6c:03:fe:db:8e:
8e:47:97:25:3d:01:ff:ef:ba:d9:63:f3:14:45:ad:d9:ae:98:
59:24:9d:7d:f2:09:51:c4:84:29:c9:d3:6a:dc:72:44:f7:2b:
56:5a:01:7c:87:7d:93:9c:66:04:d6:5c:16:04:d5:2e:ed:e1:
ee:d5:4e:e8:4e:8b:0d:39:0d:17:1d:f6:98:c5:40:3d:6b:19:
bc:4d:b0:d4:5a:5c:36:cc:c9:1b:87:31:85:f0:eb:b5:34:cb:
37:1c:d9:3f:29:42:e3:20:b7:db:c7:1c:9e:ab:10:62:29:78:
43:4a:c5:17:ac:46:2a:91:1b:21:d7:61:c3:7c:0f:80:94:bc:
d3:ba:ab:4b:34:2b:03:d7:d9:b0:0a:25:c4:92:3f:a8:5a:c0:
62:e4:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:16 2025 by rpki-client