Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier: UYjfYIcYexrQDQ4fdJbhRRoQbHPfYm5n+8M2wP/Njew=
Subject key identifier: D5:4F:65:A7:46:F3:56:56:A1:AE:17:0F:D5:02:D8:A7:EC:CC:87:AC
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 0194BBCE11CE67CB3BB342FE6D3502EC00F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number: 09D7
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: 1sawfU1Q76Yei8VXWnZk31rGjExCkH+HZp+SWo7JRJs=)
2: ergYcBtNSn5r4Zi1l42KV0S9mDk.roa (hash: uo/5j8D7Yv+RjgeXCM0+M4CRhoYawB/FduDyyKS00RE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:11:ce:67:cb:3b:b3:42:fe:6d:35:02:ec:00:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=d54f65a746f35656a1ae170fd502d8a7eccc87ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:20:07:02:3d:f5:b6:f0:8f:26:79:ba:c8:
67:f4:d7:c7:7e:17:7a:5b:32:4b:26:3d:19:a2:9f:
93:d5:ab:68:ad:89:f3:6a:31:eb:f7:19:8a:fa:8e:
37:0a:d5:78:a7:69:cc:b8:5d:73:df:4c:44:0f:05:
40:53:a7:77:8f:71:a9:a4:ef:05:f5:f4:65:05:d5:
85:c7:b5:ed:de:6a:a6:47:75:cf:6a:5f:3d:b9:b7:
af:1a:dc:d9:6d:4e:3d:0c:2f:1d:1b:1f:ed:9d:b6:
e0:0d:4a:a1:4a:a9:77:fa:99:83:9c:6b:da:0e:2a:
5c:0f:e6:85:42:f6:37:7d:f4:d7:b0:2c:6b:bf:b5:
25:22:15:be:2f:25:18:7c:a6:a8:cb:53:53:d6:2a:
38:69:78:05:44:bc:bf:ad:bf:63:75:37:4c:2c:0e:
c1:61:48:34:82:82:57:12:7f:64:78:78:55:07:37:
df:a4:78:1c:0e:2e:a1:52:04:30:0a:92:b5:4b:9f:
b4:51:fa:06:fd:11:0a:0c:3b:f3:27:07:b9:44:d0:
70:74:40:af:95:15:57:6b:88:79:c3:2e:b1:20:f5:
8e:8b:47:f2:cc:56:d0:f0:68:ff:c7:9b:32:7c:76:
b8:8b:90:9c:23:ae:90:35:ee:38:cf:60:55:3f:d4:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4F:65:A7:46:F3:56:56:A1:AE:17:0F:D5:02:D8:A7:EC:CC:87:AC
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6c:b2:19:b7:a7:b0:37:5a:04:c7:9a:13:21:ba:17:62:43:
1a:b7:48:c0:51:86:fd:59:24:f8:aa:15:0b:fd:fb:61:bb:cf:
89:4d:43:4b:0b:3e:43:00:95:a6:6c:db:68:33:3a:60:a9:f6:
b4:75:83:8e:8e:5a:56:96:b0:df:26:68:c5:b5:08:4b:19:2d:
a6:42:3c:d2:1d:3a:5b:00:dc:88:ca:64:b0:e2:fa:2b:af:c1:
12:ab:38:13:1f:ca:f5:be:2d:2e:77:a1:a1:8c:63:4e:02:df:
f9:47:54:d5:99:28:ec:50:ab:4a:05:5c:cd:28:c3:66:35:99:
c8:fd:6b:86:4b:42:e9:e4:13:ad:8a:8a:26:ea:04:a0:f7:cd:
3e:a2:8d:97:7e:b3:42:68:75:f8:44:ac:cb:d8:d8:c5:c9:0a:
af:3c:94:2c:97:18:0d:5e:c5:88:f2:65:bb:60:7a:c3:09:a2:
b8:89:bf:61:0a:cd:6e:e0:a2:74:a7:27:b6:44:90:f8:92:1d:
d8:6b:e7:44:8b:12:63:55:36:f7:9b:3b:58:70:c5:1a:40:64:
ac:ec:66:77:77:20:66:3c:ca:8b:fe:43:cd:f4:85:8a:02:03:
86:29:7a:fb:d1:ee:e0:7e:68:15:52:30:99:72:f4:cc:ce:ee:
c4:06:02:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:39 2025 by rpki-client