Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
File: Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json)
Hash identifier: qj/wLQJA3yAbosXy1TSHvlcKL2qWeps1azozpNoyIho=
Subject key identifier: 79:F7:4F:23:83:1E:3F:C0:5B:0A:29:E1:49:67:B0:76:CA:18:F8:F6
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Certificate issuer: /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial: 0194BD4E5F257ACBF8E769DD16BD71538654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: p94nuLdMv1i4labS1G//bHfu4x1b4uQi64v2tCyxMCs=)
2: psfbhPGIR9OS3HR7S3qur-oF2Wg.roa (hash: FlkCUGKA6sKM5xnwOPU8XOcnUGbtF79h6pPDmcgLJm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5f:25:7a:cb:f8:e7:69:dd:16:bd:71:53:86:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=79f74f23831e3fc05b0a29e14967b076ca18f8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:53:97:5b:6e:a6:ee:d5:a7:1c:9f:8a:c7:
1c:ca:9b:41:c0:8b:69:3d:3a:9d:50:c4:47:c8:eb:
50:c4:7d:ba:68:88:e6:b9:bb:05:dd:4c:fb:bd:88:
b2:8c:60:a7:18:89:b9:41:64:6a:cd:84:3d:be:cb:
40:06:f8:b6:80:de:e7:72:83:8f:46:fc:66:85:79:
c0:24:c5:5d:cb:bc:ee:b0:07:28:d3:78:c9:14:38:
82:a9:3f:af:2d:e0:6f:97:70:a3:7c:57:5c:15:f4:
e9:57:1d:a7:2b:c1:a0:1f:a1:bc:06:bb:61:33:fd:
ac:60:9f:79:d9:cc:16:42:06:df:75:70:f2:02:11:
a5:32:dd:0e:90:ac:74:ed:01:6b:ef:4b:39:01:e2:
13:a2:5f:b4:6d:dd:f2:99:08:66:d5:7c:0b:27:98:
04:c0:b2:65:8e:17:15:0f:08:9b:83:a5:ed:bc:75:
41:99:f5:4f:07:3c:5b:75:29:03:af:d0:f5:fe:c9:
09:57:83:b3:51:0e:55:a7:4a:22:9f:e3:d3:d4:bd:
92:70:9a:22:c7:bd:d3:98:4a:b4:5a:48:e0:65:24:
a3:5b:3c:17:50:4c:ac:d9:e1:a0:02:bb:24:20:b0:
56:27:b4:cf:12:3f:b9:96:82:d8:1a:e2:8e:09:15:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F7:4F:23:83:1E:3F:C0:5B:0A:29:E1:49:67:B0:76:CA:18:F8:F6
X509v3 Authority Key Identifier:
keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3a:c6:d4:c8:58:d9:70:fe:ed:53:08:7e:56:b4:b6:81:dd:
80:9d:1f:91:80:73:fd:63:72:39:24:20:cd:7f:5e:86:35:69:
51:14:8e:5e:b7:14:a1:33:59:4f:93:67:bc:ba:6a:40:9a:5f:
b4:b9:33:c2:e8:51:fc:3e:17:cc:4b:75:b2:4f:dc:f5:58:d2:
d4:be:5e:3e:f7:5c:46:ec:34:76:f2:41:25:ca:a7:6d:8d:0a:
ca:ae:43:e2:ee:ac:3f:ac:12:d3:9f:f7:00:76:a6:56:f3:cf:
d2:d5:dc:ea:86:03:85:2f:9d:67:24:24:e3:20:f2:fb:ae:38:
2e:4b:99:e1:df:0c:16:9a:91:f6:65:06:44:c5:db:5c:77:03:
0a:c7:08:b2:97:97:c2:07:55:4a:3f:50:06:b4:44:de:86:94:
b4:61:8f:22:e1:84:51:86:0c:7d:3f:11:72:0c:fb:c4:2c:3e:
77:2a:f0:81:8a:9b:c5:84:14:c6:f6:4f:c9:5e:8d:15:09:75:
73:6c:78:c2:d0:41:4e:90:68:8d:d5:e6:37:33:e6:84:43:a9:
44:89:2a:16:48:4b:fc:01:8a:02:fc:51:19:82:d4:8a:41:d2:
f1:e3:73:11:f7:4f:1c:f6:5a:56:a5:4d:ad:11:0d:67:9f:57:
24:78:56:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:48 2025 by rpki-client