Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
File: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft (raw, json)
Hash identifier: 66JTOfnUwmgYXXtV8mxHUjDpUdWcondp1S+MzsNyZ3M=
Subject key identifier: 3D:78:FF:D5:74:B3:29:E9:2B:F6:33:2A:5C:3E:2D:72:95:20:05:7A
Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
Certificate issuer: /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Certificate serial: 0194BD8541C582773E4B1516F0D4A1BB066E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl (hash: x39vVu3djAxD6KpKNaEQbrH2O6GRY1cxE//XlbSo+9U=)
2: dT_nuVNPNVy7zap0s-GlTGbCJFQ.roa (hash: 2ckePt60vTr0Jaf/aV6ugqWUeBibjAZagoTGX9Ra3Qc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:41:c5:82:77:3e:4b:15:16:f0:d4:a1:bb:06:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=3d78ffd574b329e92bf6332a5c3e2d729520057a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:73:f8:e1:7a:4c:31:e4:df:18:d9:57:2d:
6b:ae:2e:50:98:66:39:0d:0b:9f:2d:04:ed:f2:66:
5a:9a:38:c7:d2:9c:c2:b9:fc:7e:ba:90:72:59:5c:
16:3a:99:88:93:59:02:a8:5a:4f:b7:cc:0e:c4:92:
f7:91:c0:2f:d3:98:7a:68:e9:ee:71:b4:8f:a2:d8:
6c:2a:1e:47:dc:a1:ad:0c:cc:17:75:24:63:37:4f:
60:f2:29:15:e7:cc:c2:dd:fc:84:8b:8d:5a:33:1e:
82:03:b4:e1:1f:9a:7d:a5:12:59:ef:c3:8e:91:f3:
92:e3:d0:fa:5f:66:f4:68:07:d0:8c:b9:ac:aa:33:
12:93:a3:27:32:f4:69:38:04:5a:f7:e6:14:29:d7:
d3:72:d2:6e:3c:f2:0f:6f:4b:be:41:fd:dc:57:72:
0e:b8:66:11:91:8e:31:a2:97:7e:c5:ee:30:85:f1:
e7:63:42:ef:0d:70:46:e3:f9:1e:19:3c:1a:d8:51:
b1:b5:85:f3:9b:f7:a6:16:5a:6d:82:ae:bd:e3:82:
8a:6c:50:04:4b:33:29:70:ba:bd:13:92:34:83:2b:
d9:c4:0e:32:67:ea:f9:19:59:b5:38:74:00:6e:b6:
a7:3f:4c:58:58:e6:97:a8:fe:08:b8:c0:83:8a:23:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:78:FF:D5:74:B3:29:E9:2B:F6:33:2A:5C:3E:2D:72:95:20:05:7A
X509v3 Authority Key Identifier:
keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1a:2c:94:ab:ea:1c:b7:a8:43:5a:64:2a:14:8b:ef:7a:b3:
fc:91:ca:1b:c3:ba:18:20:f2:93:34:8b:9c:3a:8d:76:7f:4f:
7f:21:b9:06:01:13:fb:f9:20:fa:d2:f3:9a:00:7e:c8:9b:b8:
6a:73:20:2f:5c:06:41:8f:25:ff:0e:38:3a:e0:f0:f4:b5:08:
7b:4a:3a:e5:b0:80:09:68:9d:7b:4b:cd:4c:ab:20:b0:2e:20:
cd:64:a5:23:1b:49:9f:e0:dd:92:49:5f:39:25:6a:84:93:f0:
33:ee:28:cc:41:84:0c:8a:dc:b6:9e:34:37:23:15:f1:48:81:
58:cf:06:39:9b:74:0c:5a:3b:7d:de:28:a0:36:ff:84:17:27:
33:4b:f0:6b:1e:c6:eb:e9:7e:bf:0b:34:be:1a:17:45:df:09:
a9:b9:f6:9f:9f:3c:bb:82:7d:02:7d:5a:c1:dd:d6:76:25:70:
eb:a0:90:28:39:b5:9c:5a:af:b3:44:16:8a:b6:86:2c:c6:60:
1a:88:ce:a8:bb:77:9d:16:61:c4:45:1b:cd:bb:18:c6:eb:6c:
eb:a6:c6:d8:76:63:35:0a:d3:52:50:b8:99:06:3c:c3:07:73:
11:24:14:6d:43:3d:95:f0:c5:a4:6c:4e:b1:60:b3:f3:46:48:
b3:72:02:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:32 2025 by rpki-client