Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: XU/Fp9LvPi0sC0+kJEf/TZrirUPE+pSS2mvaWG5p+fA=
Subject key identifier: 12:53:76:B7:71:F0:7A:DA:41:63:9E:8C:53:A8:CC:D2:9C:BD:96:7D
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 0194BC3C3EBA63B62029D4F455AD874FD116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=)
2: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: E1EB5b4OyKDwClAfs++ZXW+Pf6gJ4KeFviuhLYF34Uc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3e:ba:63:b6:20:29:d4:f4:55:ad:87:4f:d1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=125376b771f07ada41639e8c53a8ccd29cbd967d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:44:25:a3:0e:15:fa:23:be:b4:46:2f:70:
d4:4f:75:0b:02:b6:b3:44:58:e9:1f:e1:3e:27:d5:
91:bc:bb:87:1e:16:d1:cd:11:61:69:d9:90:b5:eb:
89:fa:2f:fc:69:aa:95:c0:dd:0a:20:90:5d:3a:35:
10:bb:94:fe:87:da:ac:54:a2:ea:75:0a:ef:f4:58:
1c:43:41:d1:97:00:19:66:a6:e8:85:c8:0d:4f:68:
62:5f:b0:3c:5e:f3:29:aa:21:4e:69:a0:12:97:34:
c5:db:70:51:f9:70:d4:94:85:ee:20:dc:1e:63:d3:
12:87:44:86:c1:da:ca:6d:db:d5:9d:91:d4:bd:58:
54:23:66:f0:8f:fb:c1:d6:30:44:34:85:db:7c:c8:
9d:8c:27:45:55:84:74:eb:a3:4b:ae:7d:4d:38:71:
ad:3c:ac:22:fd:a6:49:6d:68:ca:92:e6:ed:35:ad:
62:7c:ed:72:d0:02:82:d8:4e:fe:06:e6:17:ae:53:
25:9d:43:a7:07:9f:00:57:9b:f2:d8:af:3f:b0:60:
1f:ff:e0:b3:22:56:1a:f4:ce:c0:cc:1b:5e:ae:92:
8c:40:8f:03:13:a4:63:1e:d9:0f:7f:c5:f3:ef:55:
93:e2:8f:16:79:f5:bd:87:db:e4:20:a8:9f:21:75:
8b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:53:76:B7:71:F0:7A:DA:41:63:9E:8C:53:A8:CC:D2:9C:BD:96:7D
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bc:2f:59:3b:ca:fe:92:33:88:a2:8d:e2:12:40:c6:01:66:
6d:11:88:a8:1c:df:6a:89:b9:55:56:20:2e:c4:6e:84:55:d5:
8e:f3:30:bd:96:76:1b:e1:aa:52:1f:9a:55:96:79:50:dd:08:
d3:2a:15:a8:30:b0:fe:d2:32:0e:72:70:0e:f2:ba:7d:5a:71:
ad:bf:88:29:a5:4d:69:76:43:a3:25:4e:8c:13:b5:1c:2e:fc:
0a:5b:83:bd:f8:2c:5f:64:0e:b3:54:e3:d4:07:d3:73:3e:2a:
72:d9:8a:81:d6:21:7d:71:69:2f:ea:d0:85:34:c0:04:97:15:
c5:33:23:25:48:9a:70:0f:f8:66:0d:39:0b:32:3d:f6:f4:dd:
16:24:14:cb:7f:6d:f0:ff:55:33:d4:40:81:11:85:11:45:6c:
77:b2:ea:46:fa:8e:8a:ca:90:71:02:32:80:b6:5a:70:46:91:
24:4e:ab:a6:83:dc:ea:ad:71:37:8b:76:1e:de:03:07:03:65:
25:bf:c0:dd:33:21:08:e9:88:05:5c:fa:5c:20:d2:c5:d4:88:
74:92:92:83:9e:69:13:1a:67:b7:bf:7f:c1:61:ab:24:8f:c4:
6d:cc:07:5f:6a:0b:fa:a4:bd:f6:d5:9f:26:90:63:c7:7e:ef:
53:8a:3f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:19 2025 by rpki-client