Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.mft
File: bSID7B5abCZsyjm5rxq-LLILGVo.mft (raw, json)
Hash identifier: mh/8PeORwPSqBRs+qAePNAl1zcxerp5Hd/LuTVGy9xI=
Subject key identifier: F1:4C:84:25:BF:59:58:0C:EE:2C:89:86:7F:2E:E0:15:0B:16:EA:42
Authority key identifier: 6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A
Certificate issuer: /CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a
Certificate serial: 0194BD853B0841BE3210DD914720FE908B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: bSID7B5abCZsyjm5rxq-LLILGVo.crl (hash: n7JaW7lBc4fGRZz/kl2oEtZZyjLYzE2oBvyFXmu/e54=)
2: h9zvvPI2dBY4jNWQKpPxUoE047A.roa (hash: PkWglafHXDxF9KIzM61BgLg1omYPGots3ZThAKgjHP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3b:08:41:be:32:10:dd:91:47:20:fe:90:8b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=f14c8425bf59580cee2c89867f2ee0150b16ea42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:1c:00:5a:a1:0a:2e:58:1b:7e:78:f7:4d:
d5:9f:24:a3:b8:e6:cc:93:49:d0:a1:7d:aa:12:2c:
48:9c:f3:16:4f:26:5f:14:12:f7:fc:82:b7:77:dd:
3f:10:cc:c7:b9:e5:d4:2e:c9:72:e8:f2:b9:ac:86:
e0:69:12:62:2b:46:4e:12:04:79:0e:53:3e:18:e1:
82:3a:ca:7a:f8:a4:f3:8f:91:02:dc:f4:7d:27:fc:
6d:3f:27:4d:37:16:14:a3:48:4a:e9:ec:8a:8e:7a:
16:47:21:f3:1a:12:4c:05:4a:e3:a1:8c:1f:a1:64:
a6:84:44:dc:3f:31:2a:56:09:cd:cb:b8:62:68:38:
c7:be:bc:b4:3c:b0:61:b6:79:79:4f:2a:8c:96:99:
01:fb:18:8d:78:38:bb:b6:b2:df:ff:e1:8f:8b:e8:
75:07:3e:b8:7f:63:c0:e5:a9:cf:de:69:b3:df:2d:
fd:80:78:06:52:dc:05:4f:84:fb:82:92:78:9d:24:
a3:61:f5:04:6e:84:a8:e2:3d:65:b5:b2:9d:ff:a3:
bc:d2:15:66:26:cd:bc:f5:52:be:a7:ad:df:fc:97:
93:02:ce:55:b8:c2:66:1b:68:2e:20:15:25:97:68:
d0:80:0f:90:ca:9f:b0:64:a0:8e:a1:6f:4c:ae:32:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4C:84:25:BF:59:58:0C:EE:2C:89:86:7F:2E:E0:15:0B:16:EA:42
X509v3 Authority Key Identifier:
keyid:6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f9:34:ec:ad:b8:bb:b6:cf:a7:b3:b9:70:01:b7:d9:0f:d1:
ec:9f:f9:95:2b:ac:72:4a:e4:fc:7c:65:6f:d3:ec:b0:84:95:
fa:8d:38:b5:a5:cb:24:49:14:1c:bb:90:5d:cf:2a:71:ed:28:
a2:60:75:1a:e3:37:af:cf:d1:db:09:0c:40:74:dd:04:2f:a6:
48:24:ad:a3:48:7d:67:7b:3c:06:4e:f3:e7:f8:10:15:a7:c4:
69:9c:cb:c1:6a:55:de:a9:d2:20:18:70:3a:05:28:51:1c:f5:
84:ab:61:aa:a0:7c:f5:b1:60:32:6b:f4:80:87:fc:04:cc:f7:
d5:f8:6d:8e:1c:6f:8f:bc:9b:8e:1e:cb:73:62:9c:fc:ca:ea:
ea:a0:3f:bb:1f:73:38:b9:2d:7d:b0:74:27:3b:78:5d:35:d8:
e7:1a:42:99:58:62:a3:77:5f:82:16:76:2a:8a:85:61:c3:80:
90:6c:36:1f:15:fe:eb:bc:d3:f6:7e:f9:16:63:65:7e:ba:c2:
d3:41:3f:eb:90:d3:5f:e4:02:90:44:46:b0:ab:20:63:6d:3a:
c6:b4:98:8c:87:d4:9b:66:89:9d:6c:3d:32:f7:b0:4e:60:9c:
66:f5:08:3e:1b:5d:c2:a1:37:0c:40:85:fe:38:b6:25:27:b5:
c3:46:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:29 2025 by rpki-client