Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
File: BADXfvnqDtKVK-L2D6067MLhaKw.mft (raw, json)
Hash identifier: O9Et7MzsAdTS6IDA+ZmFD5m/6nhN7uUVRG6Y9i6GUms=
Subject key identifier: 6C:03:39:89:A6:FC:44:03:0E:93:0A:54:A4:4B:32:8F:2F:21:68:68
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 0194BCA98A779D48767785672F87718994DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
Manifest number: 074B
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: BADXfvnqDtKVK-L2D6067MLhaKw.crl (hash: M6l4IKgbMm+9ueXV7q3DKgo5njS3ptq1bcWF3+ys7oY=)
2: jgMTcyosgm7FIVLeAPtI1RSjhVU.roa (hash: g2bFBV/1uz4ha4E7siEdgYNeYk8szBDsVWWKSTGKJE4=)
3: pO3Lr4jiN61Kn49lUDVd_S0OVvM.roa (hash: mIykw56twR66Kx0cZsZgXBwa4bIpNsTJWsybM0eym2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8a:77:9d:48:76:77:85:67:2f:87:71:89:94:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=6c033989a6fc44030e930a54a44b328f2f216868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9c:42:ca:07:db:24:74:8a:81:f6:6c:06:aa:
f4:79:9a:8a:7a:a9:e8:a2:df:64:4b:71:9c:82:04:
46:68:af:cb:d5:82:65:78:b9:2b:a8:c6:7c:91:96:
e6:5a:d6:be:bc:7e:e1:5b:a1:1a:d3:ce:6d:81:e1:
56:90:89:61:17:70:96:1d:bd:19:64:30:82:b4:7a:
53:fb:78:7c:02:d1:02:65:e0:2d:6f:8e:6e:19:31:
9c:bb:ff:36:8f:cd:65:4a:af:6e:66:a9:f7:5a:67:
e8:29:e3:cf:27:5f:14:00:43:7f:fe:46:82:2f:02:
24:bd:3a:bd:2a:01:9f:5e:ce:42:88:77:ae:ec:af:
9c:93:c2:a9:23:ce:49:80:8c:26:a9:47:48:31:34:
42:31:8a:46:b6:b8:49:b5:46:b1:fb:2a:51:87:4b:
6c:4d:8b:50:8d:8c:5c:f2:d6:5e:7e:2e:97:fb:ad:
65:ac:de:b9:e8:f6:6d:aa:48:98:dc:12:b0:46:99:
b5:25:22:f3:bf:ca:c7:2c:6a:88:53:7a:8e:d4:a9:
81:96:2f:ab:a9:2d:50:99:eb:47:21:85:57:ce:23:
e2:78:50:53:1c:65:4b:d0:c5:d9:b3:2e:ed:41:2b:
42:d9:7a:9b:0c:dc:6b:b8:f4:d4:bb:a9:03:fe:08:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:03:39:89:A6:FC:44:03:0E:93:0A:54:A4:4B:32:8F:2F:21:68:68
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0d:b8:7c:0e:94:86:22:6f:cf:10:c8:36:56:1a:6f:aa:82:
5d:ff:83:41:34:8c:b9:dc:f5:ac:4d:13:f9:aa:94:df:d5:8f:
93:59:49:18:d1:5b:19:10:e9:ba:94:22:dc:b4:93:cd:dc:98:
80:7a:52:3b:d7:9d:77:d2:3e:f1:b7:d1:ec:ec:76:a8:7f:83:
86:ed:2f:60:4c:89:8d:d8:b4:8f:6d:51:d4:b0:91:bd:29:1c:
4c:80:49:fa:14:aa:45:22:34:07:af:32:09:2d:7c:4c:6f:9c:
29:71:21:e5:91:6b:de:f4:d2:cd:1d:a0:7e:3c:75:e1:e6:77:
c3:6a:df:a6:bf:56:5f:ec:6c:b4:38:3a:75:8f:c2:0e:0a:66:
49:2b:c0:4d:9f:a3:06:b8:eb:11:56:55:18:36:e5:80:8b:dc:
14:ce:65:4a:01:5d:e6:66:05:65:8a:c8:70:d2:b7:fc:47:25:
c4:56:0e:f2:5f:d5:06:e1:ac:dd:3d:b3:c5:71:64:be:c1:b7:
c8:5d:33:21:a3:5c:e3:7f:ca:52:0a:91:46:0c:75:5b:15:23:
57:e6:f2:70:76:ea:37:dd:01:7f:f5:d5:4f:b3:e5:fb:55:e6:
24:2b:5c:fa:db:59:91:8d:c4:54:d1:8e:21:cb:52:c3:1e:e4:
69:86:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:52 2025 by rpki-client