Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
File: bEme6h8J0BEiUo1BdU03xcqjS6c.mft (raw, json)
Hash identifier: NYJw66xSb8lCvPBzxK0duM7Gj3FNu5MU+t80xSAnPgQ=
Subject key identifier: 16:7C:53:09:58:76:B3:32:3F:9F:A9:8D:08:0A:93:06:B1:A2:03:35
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Certificate issuer: /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial: 0194BC04D730B0595312E3EA518FACF5A4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
Manifest number: 09FC
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: bEme6h8J0BEiUo1BdU03xcqjS6c.crl (hash: SES+PKHuPgfWo9qp5pKzRKIjuEne3oDBQ2GX9ZrQsKY=)
2: kqOQ78t4w6FZpmwe4_k_12IlEMA.roa (hash: HyBjAoXV0kXvavyvJersLyuqJgRnm+q7hrBZfg1KGdM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d7:30:b0:59:53:12:e3:ea:51:8f:ac:f5:a4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=167c53095876b3323f9fa98d080a9306b1a20335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:fe:60:c3:79:0c:72:83:47:85:e9:8a:aa:
3e:87:e2:80:45:69:34:8e:1e:ab:e3:e6:ca:f3:75:
d1:35:a5:86:d8:80:37:30:b2:f3:18:21:e6:36:d1:
59:8a:27:2d:c7:25:0f:90:a8:b9:6d:58:20:36:7e:
b1:11:b1:17:9e:ec:97:ce:f6:58:05:77:6f:16:79:
d4:3f:72:a9:4c:4f:82:cc:3c:47:e8:da:b1:9d:d4:
c7:fd:21:7f:e9:1e:0a:cf:2c:d7:4b:12:5b:86:82:
6c:e7:aa:af:59:52:0e:55:e5:f0:a6:13:f3:10:2b:
50:b5:da:aa:dd:28:ca:db:a2:fa:18:ef:e6:6b:1b:
1f:04:44:9a:84:f5:8f:1d:db:a9:6e:d6:a6:ac:c1:
a4:11:83:95:2b:26:cb:bf:3b:df:a7:56:16:09:db:
d3:c6:be:32:87:d8:fa:a3:c5:35:35:cb:24:74:84:
be:81:99:53:03:36:86:79:cb:78:8e:fd:66:2b:fe:
11:e9:84:2f:db:f1:1e:25:cf:f9:33:78:af:87:e8:
61:ef:29:1f:3d:da:c1:49:90:cc:3f:e7:1a:dc:57:
e1:41:dc:18:4f:68:e2:1c:45:cd:0a:3c:22:4e:8f:
d4:c7:1d:77:77:c6:83:9a:c6:b2:9a:b2:8a:b5:54:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7C:53:09:58:76:B3:32:3F:9F:A9:8D:08:0A:93:06:B1:A2:03:35
X509v3 Authority Key Identifier:
keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a4:1f:bd:78:ff:ba:a3:42:5b:07:3f:58:25:a6:d6:3f:17:
83:03:d6:c2:22:3b:d3:cd:5d:d2:67:38:0f:e1:f7:20:f4:e8:
60:3e:81:ae:05:94:d6:b8:2c:ac:55:80:df:0b:87:49:39:74:
52:9c:72:ed:78:00:7e:dd:23:c6:d4:3f:ba:95:5f:8d:a8:c5:
d6:ae:32:d5:d3:a2:29:94:33:98:52:ed:10:ca:d3:e5:87:b0:
7f:b4:76:69:56:83:cf:09:55:22:75:7b:ae:cb:3f:b3:62:e0:
5d:57:86:6f:0f:ce:df:56:d4:38:e7:ec:03:7e:65:52:b4:3f:
28:2b:67:62:6a:21:88:c8:25:6a:a7:83:0a:45:36:d5:f0:ce:
c5:2f:31:ba:ce:50:36:79:40:a4:42:ad:94:bd:8d:b2:b2:4e:
be:9c:c2:92:bb:cf:a8:57:95:cb:46:1a:7e:a1:70:56:6a:39:
2f:cd:81:80:f7:e5:14:73:d1:7d:07:d6:be:d0:25:06:f3:6f:
cf:2c:25:9d:85:62:cc:be:06:6e:ef:13:f3:58:7e:ad:84:e0:
24:8f:74:34:34:2e:9c:6e:91:a0:2d:8e:f4:4d:bf:f7:26:92:
ea:8b:f2:5a:9b:0f:60:96:71:66:ab:f5:73:c2:7d:19:db:57:
e3:4d:18:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:27:37 2025 by rpki-client