Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier: TVp406qLGUUD9xMOWkYtutELBG2oUIAlhWpYNCsNVuM=
Subject key identifier: DD:73:77:1D:FC:8C:8C:3F:77:C4:5D:5C:72:C9:BE:65:09:2C:FC:D1
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 0194BD859E9CCE91712310C703B1234579B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number: 0D97
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: pDDPr/iMllV8DHijiRpPg+cQyDZK0Ovjg0bpmgY4His=)
2: pikr-Z1yZ7UUvvrmXqwotfJAjto.roa (hash: 68icAI19296YoC6/CDoRbYMVtIlmqXzI+o0fkE9+Wfc=)
3: qQqCuUJCewbsZNg09v9PamhTS90.roa (hash: OGwgmYMhdJtP2TfXi19zj/Lo5JjlQ5q60mMpyZb+YXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9e:9c:ce:91:71:23:10:c7:03:b1:23:45:79:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=dd73771dfc8c8c3f77c45d5c72c9be65092cfcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:ba:10:00:8b:1f:30:bb:4e:00:9d:94:00:
aa:e7:3e:52:29:b1:95:8a:ad:e3:d4:9f:da:a6:f1:
ea:5e:78:ca:3f:ed:46:72:1c:a2:54:f5:f5:66:63:
01:30:f4:29:f3:83:b3:d0:c8:53:c8:a8:d7:54:97:
a9:ae:07:ce:5f:bc:66:75:5c:bf:9d:15:c8:8b:9e:
91:e0:a9:34:26:c1:56:8b:43:96:54:d4:a1:66:51:
c5:04:f7:76:c6:17:1c:a9:d2:22:69:fb:c3:d1:b4:
29:28:e8:0d:52:cf:71:3d:29:da:af:3d:bd:3b:a7:
e3:94:99:bc:d3:0b:36:e5:29:6e:d6:05:85:0c:99:
91:cb:fb:1f:70:5e:01:de:dd:75:4e:cc:0a:94:f1:
e4:3d:c7:ed:c3:84:ca:e7:e8:87:e0:f1:9d:4b:bd:
b1:8a:9c:be:33:ca:15:fa:68:45:22:0e:dc:29:d7:
ad:e9:52:77:eb:0c:be:d9:27:f5:95:bf:67:54:20:
55:08:37:39:50:83:3d:3f:b7:6a:8b:87:b5:ec:b6:
42:3b:e9:14:b2:db:7c:23:bc:8c:96:07:b5:5f:96:
cf:ba:e5:19:f2:b1:32:69:69:0a:07:86:c4:5a:94:
0f:35:ff:30:2b:3c:c1:9e:ac:37:57:ff:b3:73:b9:
c8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:73:77:1D:FC:8C:8C:3F:77:C4:5D:5C:72:C9:BE:65:09:2C:FC:D1
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5c:c5:fc:67:bd:41:91:b4:5f:2a:7f:1a:95:bb:2e:6c:c5:
50:a7:5d:aa:e9:6b:1b:64:66:f0:d6:48:8a:37:d2:6d:e0:db:
bc:69:08:eb:a2:26:22:6a:d4:07:06:6a:14:f8:bb:df:52:65:
4e:7e:17:57:01:db:25:de:16:0e:71:50:ea:38:76:65:f7:3d:
f6:c1:55:cc:ec:94:bb:c5:12:22:2e:d5:fc:80:e7:0c:dd:2b:
1f:63:93:67:ab:f0:98:05:02:3a:e9:b7:77:4d:ea:4a:05:c4:
c9:f2:95:60:ed:dc:26:fe:63:c7:2b:7c:ba:96:3e:26:d6:00:
52:ee:c4:f4:27:20:35:cb:5d:7a:e4:d5:59:1f:85:65:e6:98:
8f:e8:81:38:ad:51:c7:5a:e0:b1:9d:06:f0:ee:8a:2e:4f:a9:
a3:c6:96:9d:50:8b:06:3f:9a:8f:88:93:68:a4:b1:8e:92:b2:
d4:5b:1c:23:ba:e8:b2:bd:d1:4e:38:b6:30:c6:98:40:6c:1b:
50:be:17:1b:f8:32:d6:10:a9:79:2e:2f:a1:d9:8e:05:4e:bb:
c7:cb:33:a6:aa:dd:81:d4:9c:a8:2c:fb:3d:26:0f:c6:92:42:
6d:3a:41:f2:48:9d:31:c3:32:e0:32:15:cd:6a:ef:70:26:28:
4b:48:3f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:19:46 2025 by rpki-client