Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File: bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier: wZbW8B+UuoMQPt1cjoR8H4/kZB1s7VqGAunI7viz9xQ=
Subject key identifier: 2C:14:F9:0B:E5:11:BE:55:EF:C8:20:13:8C:BC:DC:70:94:12:AA:56
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial: 0194BBCE590373E2F5125527318420A15D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number: 0C9D
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: CUY45Y1KmLWjDR8KaCm8pfbWmHk.roa (hash: Wr/mH88dBzO09g3KW6jW/bHo4ew9LfQROwCNYWZRYNQ=)
2: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: cFPSB/2XbgnF69OWcszLpVxN9Jlzx/rjPkbK1lbqrbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:59:03:73:e2:f5:12:55:27:31:84:20:a1:5d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=2c14f90be511be55efc820138cbcdc709412aa56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:96:c1:b1:47:27:2e:b4:b9:5d:44:6b:92:
e9:49:a8:a4:66:b7:83:d6:d7:a1:dd:73:3f:ff:86:
35:a0:80:34:03:db:ef:4f:45:98:ac:d7:b4:a0:c8:
d2:bc:5a:72:b7:79:db:e6:aa:d7:5f:34:c1:8c:e2:
72:79:92:90:3f:1b:2a:fc:c9:1c:b5:59:2c:9e:66:
44:bc:f7:c8:a0:60:cd:82:9e:e8:71:25:ec:9e:5f:
4e:b4:ae:48:da:e1:73:7b:78:42:48:f9:92:c1:fd:
c2:57:c9:b4:11:12:53:ea:11:35:51:07:71:9a:c9:
b4:2c:e1:35:0a:2f:89:a7:8e:74:9f:18:b4:d5:20:
09:3e:21:3c:4e:45:29:20:49:04:14:9d:e6:8e:09:
ac:2e:ed:7a:4e:82:06:73:78:f2:81:62:86:22:d1:
4c:65:61:24:4a:e8:ad:d2:0e:ff:05:bc:f5:d1:0d:
7c:ee:95:db:57:45:bf:5d:3f:4c:04:bd:e7:28:d1:
cb:30:f5:cb:71:ed:9b:0b:2a:4a:e6:ba:6a:53:30:
42:76:6e:ff:fd:16:35:59:34:a0:d6:b2:67:61:ab:
1e:12:e4:d4:3c:2a:ba:d3:c1:6a:14:4d:85:59:7b:
3d:f8:35:bd:49:32:b6:6b:21:e9:39:68:c5:7d:94:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:14:F9:0B:E5:11:BE:55:EF:C8:20:13:8C:BC:DC:70:94:12:AA:56
X509v3 Authority Key Identifier:
keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:45:75:d5:a0:4b:f3:2c:73:8e:77:ca:14:fc:5a:df:14:2b:
5f:cc:2d:09:e4:ff:cc:05:e4:36:5f:8f:cc:2c:49:a7:d4:ea:
c4:e7:cb:14:d4:80:e9:f3:4e:2a:6d:b4:57:07:2f:38:b5:cc:
50:65:fd:d7:c9:c6:88:f6:8f:7c:f7:43:0d:d0:a3:17:b5:5f:
1d:d5:70:6a:bd:6d:32:ff:67:ff:fa:c6:e0:70:66:e5:21:a4:
31:f0:5f:1c:db:44:2c:3a:c8:a1:0a:94:cb:cd:12:9e:89:23:
25:0b:1a:6a:34:16:13:4d:4d:38:1d:65:36:6a:b0:0e:fc:a0:
aa:34:83:a5:20:60:9e:51:64:27:90:0b:a3:de:7a:df:ea:3e:
43:e7:78:8e:db:2f:82:3f:b5:94:e6:49:f4:80:e7:30:63:ae:
89:ad:9a:7e:24:ac:a9:76:c2:27:e5:24:7e:42:0f:64:09:f7:
de:81:90:ab:d6:5f:6b:c1:b5:24:4a:6e:ae:42:a5:a9:8d:fa:
c2:fd:b0:e4:16:fe:9d:3e:00:e6:57:67:8d:a9:19:24:d8:35:
d2:81:ec:fb:b5:23:28:6d:69:ec:0b:dd:0e:c9:dc:d7:df:9e:
f2:cd:fa:7e:97:9f:42:5c:14:1b:eb:9e:94:7d:c1:bb:5f:4e:
12:56:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:05 2025 by rpki-client