Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json)
Hash identifier: itIUv38SFQftQ/EGcvlI8VeDsGp3PV8O92lOGmZwKKg=
Subject key identifier: 1E:F8:2D:94:B1:D6:1C:FD:02:43:55:FB:6A:C0:6F:11:64:F2:20:2D
Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468
Certificate serial: 0194BD4EAC336FC8FBA786E47F8CE5A668FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
Manifest number: 7E
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: EH31K6AeAlTxuZgsWC0CP6nqgCw.roa (hash: 5F10SKVR7MZweS+vgHdYbBmQMLKWeQTvpJE6zRYHQ8A=)
2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: 7n06OI1+/R7MRDz7RKyvVhAOSzUjRfXFIDwJGXEw8pg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ac:33:6f:c8:fb:a7:86:e4:7f:8c:e5:a6:68:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=1ef82d94b1d61cfd024355fb6ac06f1164f2202d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:92:e4:0d:3a:91:9c:24:8d:a7:6c:a6:dd:43:
18:ae:a8:83:76:76:29:3a:95:b2:ec:59:ce:71:de:
ba:1f:a3:14:52:67:70:e3:1d:26:de:59:82:13:e7:
a1:0d:97:97:06:31:b7:36:ac:77:61:32:f4:8c:f5:
1c:39:2a:35:79:79:f4:8f:1c:a4:0d:0e:f8:73:eb:
5f:43:e8:5e:5d:94:bc:6e:6f:c6:ed:fa:db:bf:35:
f2:8a:90:8e:cf:36:13:48:81:f1:d4:da:4e:c5:f8:
8f:c7:46:93:41:db:30:35:52:b1:7e:13:f8:ae:07:
19:be:77:8c:c6:9a:5d:aa:93:22:94:db:c8:ee:11:
c2:49:af:cc:b7:e7:c7:67:39:2e:de:39:13:e7:27:
08:1d:4a:c3:50:ab:2a:bb:43:fb:87:c2:a6:c1:53:
f4:fc:ff:20:65:cc:79:f9:48:a3:e8:8d:14:6c:f5:
ac:45:2a:49:6d:a3:63:70:6d:33:f2:cf:f0:03:18:
db:b5:1e:e8:e3:2c:37:df:7d:ea:29:96:65:7e:d1:
ed:2d:20:8c:a9:a8:75:66:7b:40:00:c6:93:d1:e4:
ad:32:5e:45:57:22:1b:2e:4e:8f:4e:9a:73:37:7c:
fa:cc:c2:ca:e7:da:67:8e:cd:1b:2a:e3:79:6c:9b:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F8:2D:94:B1:D6:1C:FD:02:43:55:FB:6A:C0:6F:11:64:F2:20:2D
X509v3 Authority Key Identifier:
keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d1:2a:32:90:86:aa:dc:c6:4d:c4:34:c8:71:2f:a5:48:c9:
22:76:87:f5:b1:d7:8c:de:f9:a1:66:89:24:a8:5b:34:0f:a3:
ff:27:a1:5e:b2:61:61:d1:8a:ae:e8:bf:04:2a:4d:46:5b:46:
f9:e9:9d:0b:91:ac:08:f4:8f:e0:91:1a:5f:3a:43:f1:b7:c5:
0f:4b:db:3b:94:8a:06:8d:17:d3:37:90:de:27:d6:8b:32:94:
2e:0b:a6:94:ba:07:b4:b2:b0:92:96:5e:9b:32:a4:ab:fc:f5:
75:97:fc:c5:49:ba:df:e7:2b:ce:69:fd:24:6b:9a:5b:ce:c6:
dc:38:7d:a3:43:cf:47:2c:b3:f6:83:dd:90:b3:65:d6:0a:0d:
11:ca:80:be:1f:ff:06:9f:c9:49:6e:64:5f:c4:42:74:8c:66:
a6:bd:85:82:0d:a3:c1:85:af:43:04:8d:90:c1:ba:45:88:4b:
5f:22:68:73:f6:61:dd:9e:1e:5a:91:d0:b8:a8:e7:96:c8:73:
95:e3:50:da:37:ca:34:6f:fb:1f:b0:9a:a4:ba:93:ca:89:eb:
1f:7c:21:3b:68:e7:88:12:bb:cd:01:68:49:03:19:52:1a:7e:
0c:4c:72:42:91:32:c5:2f:9c:e2:00:aa:b7:c0:13:90:63:30:
72:c3:ef:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:16 2025 by rpki-client