Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json)
Hash identifier: +TjYIE+qs014ZIbX/nNAB8DtNzfhphjvgIqo4guswIY=
Subject key identifier: 01:AE:30:A7:DB:C4:66:98:D2:33:82:83:E0:CE:BB:92:65:66:F2:20
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial: 0194BBCDC7A023A66E0C5BC64B11A4314800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: G8ZxZv3rAsdyjkZIWbmu2tXV_Og.roa (hash: lGe21WZY7KMyNN8ysWzw0Q97lgbjrid4+uoj3fQOhEo=)
2: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: /WdItcA4UhTNFysOC1Haq2gSPJMiApY9DY5jy7nAsA0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c7:a0:23:a6:6e:0c:5b:c6:4b:11:a4:31:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=01ae30a7dbc46698d2338283e0cebb926566f220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:03:91:1d:5e:5d:ab:03:c9:71:42:66:4c:
12:19:23:5a:64:0a:91:b1:85:9c:2a:38:9a:6a:f0:
92:23:53:21:46:46:de:e7:50:97:b6:17:39:80:03:
48:51:a4:f3:ad:df:a0:84:80:0c:23:b9:ee:a8:ba:
ce:52:4a:8f:1f:61:36:9d:f7:6b:00:18:f3:6d:5b:
01:83:1a:48:c7:e9:16:a5:00:65:d2:d7:cb:53:21:
ea:04:00:07:84:08:d2:c4:c7:f7:d5:13:36:ca:f6:
5b:d2:2c:b3:0e:31:a1:c2:49:36:3d:94:c2:fe:c8:
3f:99:35:5a:31:2b:4f:83:13:9e:3c:ff:73:6d:f1:
6b:86:bd:4d:22:ce:c6:b3:60:84:8f:7a:4a:57:e6:
4e:47:2e:48:fb:39:a6:4a:65:31:9d:55:d9:70:99:
32:3d:9e:78:b4:26:b2:3b:4e:95:4f:f6:e2:6e:cd:
38:5c:31:8a:b8:f9:96:2e:3b:ba:3c:91:07:5d:5a:
17:a5:6e:27:55:18:16:14:81:79:ad:82:7a:fc:ae:
19:af:0a:9e:9e:ed:59:63:29:df:dc:9f:2d:b9:02:
b1:4c:b5:af:3e:6d:11:7f:7b:3f:e9:87:90:29:b0:
d9:51:3b:ca:71:ff:7b:84:68:1a:3c:71:ae:48:94:
04:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AE:30:A7:DB:C4:66:98:D2:33:82:83:E0:CE:BB:92:65:66:F2:20
X509v3 Authority Key Identifier:
keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:67:86:83:7f:83:d9:9f:94:76:76:ca:2f:cb:03:10:49:18:
ba:3f:2a:43:f9:66:c3:b7:60:50:ce:57:b8:2c:4b:5e:7b:05:
75:7d:38:49:ea:fc:08:54:c9:89:5c:86:32:12:d5:d4:10:2f:
56:75:34:2c:24:8b:a3:e2:8c:67:16:35:94:27:39:e0:37:72:
4e:fc:88:10:70:8f:cf:c5:43:4f:4f:0c:d5:5a:b2:f2:4f:5f:
c4:f0:65:0a:ac:c4:2a:ac:0b:a2:6e:31:45:8b:f6:c9:9f:1c:
45:73:c2:65:d9:28:c2:06:25:a6:89:a8:b7:a6:15:99:e1:83:
98:51:ee:95:ff:e4:b9:d8:b3:36:18:6c:13:01:a0:4b:02:12:
93:1d:56:99:b8:9e:bb:d4:b1:07:45:d4:70:5b:86:15:f1:18:
f3:26:e3:5b:ce:91:00:fe:6c:b3:38:62:d2:a5:a9:ab:ca:27:
90:31:e2:ce:fb:37:b1:c0:d1:6c:cb:35:71:ee:79:bd:cd:dc:
e8:f6:bc:79:21:35:ce:2c:eb:b3:58:f9:75:bb:91:04:bb:00:
42:fe:52:ee:b7:5c:f6:8e:fe:df:22:33:0b:37:01:ce:b9:7e:
c8:af:5b:f4:69:73:6f:b3:0e:36:c6:cb:69:f1:ef:66:e2:ee:
53:a6:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:27 2025 by rpki-client