Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft (raw, json)
Hash identifier: 0SG2GB/JE2WKONnRnbCfuud3Z1I8tUGuu1CqcyTRnwQ=
Subject key identifier: 03:FF:89:A9:DD:AE:3D:68:6B:C5:9B:79:D5:24:D6:F5:3C:BF:9E:49
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial: 0194BCAA35F58D502B80D35FAB36E333592F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
Manifest number: 0B9F
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl (hash: wTNlI8ngMtUqM5QuqE5lW5GKs2E2QUMO24x4ztmOTfA=)
2: mf0dhA7BgjaM7eDjfmF7DxTSVfY.roa (hash: 1vX40l9RdR1damElfdrSUBtrrLE1iQPxYSNwcaRMl0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:35:f5:8d:50:2b:80:d3:5f:ab:36:e3:33:59:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=03ff89a9ddae3d686bc59b79d524d6f53cbf9e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:72:a0:07:f8:4a:a7:6b:e5:93:d5:f9:0d:
67:d5:a3:38:cf:4c:70:71:9d:cd:01:88:85:cc:30:
50:4f:57:c2:95:f2:5d:90:96:d9:26:8d:b0:c0:2e:
40:9e:d6:ee:5d:d3:0d:80:f8:97:b1:84:fa:08:5f:
ca:9b:2f:be:e7:a2:70:76:d1:f4:75:22:5d:fa:c0:
f9:2f:5f:a5:71:79:18:0a:9c:6d:47:b0:a7:52:49:
02:16:9e:7c:19:1b:63:67:89:a6:36:38:e3:6a:65:
38:70:13:ef:be:2e:b6:02:d0:a0:82:13:e0:fa:c5:
78:75:ad:96:87:1f:6d:fa:fd:39:2a:b1:3b:f3:df:
1e:d9:7d:ec:ce:1e:b4:a6:5f:ec:ed:af:45:e8:82:
19:58:57:42:1d:9c:88:6b:dc:57:e5:8c:ad:96:fc:
2b:30:8a:db:47:19:65:3a:c2:76:6f:ff:a8:85:c4:
d3:c7:bb:f1:4e:bd:b7:37:42:66:8e:dd:7c:fb:9f:
f3:ac:e8:93:02:5d:2a:61:f8:f7:2b:13:f0:3b:92:
80:d5:8e:0f:f5:4c:89:a8:dd:8c:83:9e:a7:f6:3a:
48:d8:37:bb:f0:56:9b:f3:2d:d9:79:52:59:82:4d:
42:5b:37:8f:1b:d5:e0:5f:11:97:d8:9c:32:4c:2c:
74:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FF:89:A9:DD:AE:3D:68:6B:C5:9B:79:D5:24:D6:F5:3C:BF:9E:49
X509v3 Authority Key Identifier:
keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:01:ad:72:9b:84:a2:97:23:c9:0d:6a:5a:f5:24:4a:91:65:
6c:c6:84:9f:7f:56:56:bf:9c:1e:86:6c:93:a0:f8:62:d2:e8:
0b:0d:d0:05:ee:8c:f5:85:8b:38:86:2c:66:c3:23:1a:a0:7e:
ed:9e:04:d6:98:ed:3b:3c:79:f5:10:1e:f9:28:ee:ed:ce:5f:
d3:76:d2:29:c6:bd:5b:24:64:81:06:ec:19:aa:a2:b9:cb:e3:
2f:6b:5d:bd:79:82:fd:39:6a:b0:12:1d:75:ef:76:5b:8c:34:
97:02:12:c2:4e:da:eb:dd:13:08:e5:da:15:99:6d:fc:e1:12:
ad:a9:7a:60:05:26:ba:d8:e9:34:d9:c5:60:e8:1d:45:c0:aa:
d5:21:17:2f:42:2a:74:af:18:4f:87:74:93:06:84:6f:b1:ec:
f7:df:d6:b2:52:55:17:93:77:1e:8e:b3:36:67:a3:99:66:d9:
1f:58:09:c0:68:c8:e0:c4:a9:79:2e:6c:7b:68:87:f2:40:64:
0b:5f:13:93:d5:de:b6:2e:1a:60:a7:1f:de:55:61:59:d8:68:
bb:0b:ff:0e:24:66:04:dd:48:88:79:31:e4:47:1a:45:d4:3b:
6b:0c:d1:84:c2:53:80:12:08:7c:66:41:1b:4f:8b:3c:9b:e2:
9b:1b:77:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:46 2025 by rpki-client