Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
File: bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft (raw, json)
Hash identifier: XGSWnCVAVnXXTs5e5whS39nTRexFOPpoe2STLPYtzD4=
Subject key identifier: DA:7C:2B:69:F2:C9:88:48:20:E2:A6:4B:94:6F:6C:79:A3:CF:4F:B0
Authority key identifier: 6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70
Certificate issuer: /CN=6e4428f7f17b19c15068cab939d377940e8d4c70
Certificate serial: 0194BCAA1B584AC5C104ED7DD4D42966266D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
Manifest number: 01DB
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl (hash: VQtTfvRYUIkyLpI1Psy0VDDMrtXYFSz9Ir5TX+rqsm0=)
2: r5LfqFNzBSvkVNYj6vVDPex2eII.roa (hash: zD3Y+yhvhdTCP2LNWWBpR2SBF00RvRC4BFmgCTYqEsc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1b:58:4a:c5:c1:04:ed:7d:d4:d4:29:66:26:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4428f7f17b19c15068cab939d377940e8d4c70
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=da7c2b69f2c9884820e2a64b946f6c79a3cf4fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:07:91:ae:f8:16:82:f4:63:5e:c9:03:ad:
1c:29:08:01:0b:70:88:26:2a:ec:dc:e4:aa:13:22:
f4:0d:ac:f6:da:14:43:2b:cb:96:f4:eb:d9:2b:42:
1d:4c:43:e3:9e:ec:d9:8d:4b:fa:9b:a8:0c:77:ee:
d9:b6:94:cf:de:3b:b2:01:1e:97:82:77:56:7a:79:
d9:84:e9:6b:4e:d8:cd:0f:20:02:7f:45:56:14:2c:
2f:d0:60:cd:3b:5c:0f:4f:95:a6:70:e1:5a:6c:f8:
4d:d3:81:92:e4:c6:4d:91:0a:44:00:fa:05:43:d2:
81:05:f7:19:23:36:80:b7:72:73:60:0c:70:87:6a:
27:5b:92:c1:19:fb:5f:41:3d:10:77:86:56:92:b5:
f9:a4:83:ce:ae:26:de:f2:f1:da:2c:49:fe:21:f8:
20:70:88:a5:6c:f3:28:51:38:29:e2:b6:c4:08:09:
c9:79:6e:20:8d:75:28:4a:27:c2:5a:1e:16:46:cf:
cd:60:3d:8b:15:04:80:87:54:fc:68:44:3a:31:df:
46:4e:2b:48:33:c8:77:cb:84:5c:2e:c8:50:69:c1:
be:1f:d2:33:9d:af:eb:fd:61:80:a7:a5:64:b7:9d:
13:39:a6:e1:24:73:c6:8e:0e:44:1a:a2:c2:67:98:
a9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7C:2B:69:F2:C9:88:48:20:E2:A6:4B:94:6F:6C:79:A3:CF:4F:B0
X509v3 Authority Key Identifier:
keyid:6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c8:08:6f:5d:4b:62:86:4b:7e:6c:30:c1:a3:5f:27:23:e6:
ce:66:ed:ab:79:a5:6e:4f:27:2e:e5:65:40:5e:91:73:d7:1a:
4f:69:e3:11:cf:aa:88:c1:b6:cc:0a:73:66:d8:c4:86:a1:21:
d6:0d:5f:41:f5:e4:55:30:ed:8e:37:a1:89:04:49:b4:2f:ac:
6c:e8:75:73:31:35:cf:13:85:2e:7a:bb:96:c7:52:84:83:11:
3d:05:7a:63:c7:62:62:88:c8:ca:21:6c:27:9c:1a:3c:73:66:
fd:5e:8b:02:12:bd:5f:af:c0:a4:17:7b:b4:8a:1c:a2:6d:c7:
2a:23:77:f0:a4:ad:6b:f9:dd:cf:68:1c:df:11:29:37:d7:e1:
f9:58:1a:18:b1:df:bc:a8:c4:a3:24:2f:73:f2:1d:7b:6d:40:
d2:f6:bb:a5:78:26:25:d0:55:45:d6:95:65:c3:e6:ca:69:4d:
e2:8a:56:aa:92:e5:69:01:79:9c:2e:5e:d6:1b:6e:d6:4c:49:
f4:c3:85:ed:30:ee:a0:03:81:ac:18:04:c8:b3:6c:90:90:38:
1b:aa:53:03:aa:ea:e6:f6:30:6d:e2:d5:55:cb:9d:68:de:19:
7d:be:f5:da:f8:a9:22:18:67:52:30:0f:1a:c2:ac:52:1d:8a:
38:58:47:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:10 2025 by rpki-client