Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier: uQLxmuRzCRQNAp7U0mKUZwfB0GEan4GX1/LWRu2Rh/E=
Subject key identifier: F8:93:1E:11:C8:3C:95:AE:2D:59:D7:43:C4:FF:EF:59:01:8E:C5:37
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial: 0194BCE0C5A919E5E4BBD1F076EE3607876F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number: 4D
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: AnOjAErapOHwpd7AwIATrv6oaPs.roa (hash: Z5NCDzdRe0c7oL58VbkecPbcKaio1C3c2yksvrR6h14=)
2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: Fl+dPJSF9Iyyg7bPGjijcBl+0f3Y8caVHpQx5DtaA3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c5:a9:19:e5:e4:bb:d1:f0:76:ee:36:07:87:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=f8931e11c83c95ae2d59d743c4ffef59018ec537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:7c:69:c0:c9:f6:38:3a:48:f6:26:3e:df:
06:96:cc:9e:4f:a2:36:17:bc:47:b9:7e:0f:e0:d7:
e0:3f:a5:48:f3:88:51:66:59:92:f0:3e:07:83:d8:
ba:6e:be:3b:c4:83:63:b1:32:7e:a7:45:28:00:92:
f3:15:07:38:80:8a:32:0b:d7:43:17:01:c0:12:d6:
78:eb:21:ff:6c:9f:78:80:73:1f:67:76:a7:50:be:
8e:4b:0c:a5:d8:e6:b5:b8:90:7c:95:f6:0b:ed:30:
76:02:3c:bb:ca:39:65:58:cc:aa:d3:7a:e4:8c:32:
5f:9f:7f:11:a1:f0:ed:64:df:79:e3:9e:dd:af:66:
23:74:da:66:27:ff:58:8b:5a:e7:4e:cf:1a:f0:8f:
14:f8:40:90:58:23:bf:ae:59:42:a7:e1:19:c8:17:
89:8f:3c:4e:f6:a1:71:b1:4d:04:f0:ff:45:10:f0:
52:7d:bf:30:58:c8:69:b4:b3:a7:8b:2d:14:0e:61:
50:8a:6e:f3:e6:ed:9a:b2:1b:6c:5f:7a:5e:62:73:
a4:a8:8b:2e:f6:42:90:43:6e:07:9b:bc:9b:d6:43:
ed:48:3e:04:2a:8e:92:f9:75:19:43:fc:62:12:9e:
41:f0:98:85:18:a6:77:48:a8:16:2e:d0:d0:ef:ef:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:93:1E:11:C8:3C:95:AE:2D:59:D7:43:C4:FF:EF:59:01:8E:C5:37
X509v3 Authority Key Identifier:
keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ff:14:b2:db:38:62:a9:10:ea:42:32:ba:ce:a3:39:02:47:
e6:1c:92:76:b9:e9:de:fb:3b:f6:96:29:74:c1:23:3b:bd:8c:
74:c9:da:31:93:c5:b4:ad:a4:f8:c5:29:ef:88:21:68:b3:97:
f5:ca:1c:57:1c:44:f7:47:60:83:6e:2d:0e:7d:df:b2:ba:25:
4f:3b:71:83:0d:06:be:c2:47:32:b8:6d:82:9c:26:8a:53:37:
e0:40:12:a9:f0:58:01:17:5f:d4:04:65:96:3c:0b:29:e9:a1:
36:65:71:3a:d3:45:39:22:a3:e5:0e:7a:9b:3f:df:dd:cc:48:
a2:87:28:28:51:6f:6d:dd:aa:5f:1b:9a:ca:ee:d1:25:7b:cf:
5d:56:cc:9a:76:d6:67:33:b1:cf:34:af:9d:b2:97:00:42:93:
8e:f5:7a:38:27:1f:66:06:fc:74:23:50:c7:6e:50:28:05:d4:
e1:37:1a:c6:2a:89:2b:0c:26:cc:f5:cb:49:97:3d:48:e0:0c:
d6:7a:bd:8a:61:70:3d:c1:8e:51:cc:d0:0a:ec:07:ab:3d:34:
5c:6b:9e:6f:b4:12:11:bb:b7:31:e7:b1:70:da:e6:40:5a:e5:
2f:7d:a6:f5:b4:d2:9b:e8:ef:e8:c6:0b:5d:7e:8d:35:6c:13:
e1:a7:c0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:34 2025 by rpki-client