Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
File: bzipg89Dc6pJdJhasi1RTA9IHS4.mft (raw, json)
Hash identifier: Qq90TnpbIYzqY8ZxQ6rtrolR5VhxMwyYLdlQsEcbiSE=
Subject key identifier: 30:F4:F7:BE:6B:46:2A:6C:61:68:6D:F0:39:1A:87:9F:EA:47:EE:85
Authority key identifier: 6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E
Certificate issuer: /CN=6f38a983cf4373aa4974985ab22d514c0f481d2e
Certificate serial: 0194BBCEBD00BED53FFF5174A588BC845794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
Manifest number: 77
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: HZb4ypfyyLknrNflDGCKDQospm0.roa (hash: DJb41fbhgLGXN4Umv3DyaNZTQa8ZY7nKkJ22hR0xLS4=)
2: bzipg89Dc6pJdJhasi1RTA9IHS4.crl (hash: Nem8gqOQ9l9lHLbwy2uQyvV2rMOXaOKIkgs3TK15y4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bd:00:be:d5:3f:ff:51:74:a5:88:bc:84:57:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f38a983cf4373aa4974985ab22d514c0f481d2e
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=30f4f7be6b462a6c61686df0391a879fea47ee85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:33:0b:a1:6a:14:39:64:9f:81:d7:01:78:
ad:66:d1:77:1b:c4:9e:f5:71:4c:da:8b:6a:a2:20:
0d:79:8f:e1:44:53:e4:84:8c:93:36:38:f5:74:43:
a4:b5:6a:a7:31:7d:09:59:2e:0e:f2:30:1c:6a:14:
0a:22:53:f5:e4:4a:92:d8:37:c2:74:97:33:a7:b5:
ee:f6:c8:9e:8a:8d:91:44:0e:e7:d9:b0:4d:12:71:
42:e2:fa:fa:3d:e7:af:87:d4:c7:c2:7e:85:a8:d7:
dd:e6:6e:f7:1f:9d:bb:b6:60:11:92:ce:a9:08:f7:
82:28:5b:37:66:78:04:c7:74:18:f9:cc:f2:4d:2b:
c5:92:15:fe:31:70:4c:10:dc:ed:85:11:47:3a:34:
90:c6:56:8c:24:0e:a2:f0:50:dc:8e:a7:1c:35:75:
77:c4:3e:29:e3:2d:91:91:21:e7:20:b4:a4:09:2a:
dd:78:10:c2:66:09:c5:db:1f:69:05:ac:b8:33:fa:
01:e6:c8:8e:fc:7d:cc:7a:8d:43:68:78:0b:f6:d1:
62:1a:26:d9:c1:2f:dd:40:68:0a:7f:17:35:b5:49:
80:20:44:46:a8:5d:46:84:11:c1:17:86:0b:e5:5e:
07:8c:ee:59:ff:0a:07:c2:12:be:d4:cc:6e:83:16:
df:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F4:F7:BE:6B:46:2A:6C:61:68:6D:F0:39:1A:87:9F:EA:47:EE:85
X509v3 Authority Key Identifier:
keyid:6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a9:36:ab:16:3a:59:bf:61:90:ef:09:62:be:24:45:8e:4f:
1f:dd:ce:01:8f:16:23:93:1a:e9:c0:c4:00:b4:48:63:af:43:
c8:a4:60:85:20:20:6c:7d:38:13:ca:71:89:98:c9:50:35:3c:
54:81:43:d3:f8:d6:1c:51:b3:3d:38:7b:df:d4:1d:2c:c9:fb:
b7:ba:ff:97:2a:70:cd:28:ba:ba:83:fc:d6:76:00:31:92:02:
3f:ea:77:c2:00:97:4b:8b:0c:f6:19:a1:6e:c2:a2:be:72:43:
c0:98:94:7b:d8:2f:36:a7:33:d4:f8:c1:d4:92:96:4c:96:b5:
88:78:aa:fa:78:ee:89:66:98:f1:0e:e4:82:7f:ef:61:a7:2e:
30:9c:f8:fe:a2:f4:1d:b5:75:5a:0f:07:20:ca:02:93:68:d6:
d3:ef:87:12:db:7e:43:20:d6:1e:da:0f:a2:51:ee:50:6c:ae:
9b:01:1d:fd:40:48:45:a8:59:3a:0d:f9:fb:41:e1:35:c3:f5:
98:27:ef:40:a9:fe:40:bc:6e:b3:ee:36:39:37:e0:6a:7f:2a:
0a:08:f8:2b:04:15:b6:52:b7:37:67:03:b3:bf:a9:c9:f9:44:
4a:0f:61:0b:65:a8:2d:8c:0e:b2:c4:a5:d6:51:4e:8e:d2:58:
10:e6:57:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:11 2025 by rpki-client