Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
File: b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json)
Hash identifier: HYhPh3Zs+Os+7VVOpbPw/ogkqAu0UBqrjC9+xemYRr8=
Subject key identifier: 25:48:F4:2A:FD:C5:9A:49:3C:A6:C5:DB:E7:8B:B2:AF:D8:2D:98:A3
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial: 0194BD17D471FFB6A00170E553D0823D5C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
Manifest number: 0E3B
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (hash: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=)
2: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: 1cIe/x7MCMqQZ+QYro6sijYcJz3kd2YrEr9RyrDxfk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d4:71:ff:b6:a0:01:70:e5:53:d0:82:3d:5c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=2548f42afdc59a493ca6c5dbe78bb2afd82d98a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6d:26:0d:81:2d:24:a7:99:dc:d4:d5:9f:be:
92:f5:f2:45:f5:da:dd:5b:cd:de:b5:bc:e2:47:3d:
40:d7:3f:73:12:99:12:c2:ad:f0:d9:8f:47:bf:6c:
64:cd:b2:8b:41:9d:e6:dc:cd:3b:c2:5b:e7:b6:aa:
c0:e8:a0:58:ed:78:de:8d:8c:e0:69:43:08:b6:52:
c6:cf:60:93:ea:9b:99:79:97:c3:8a:4c:80:d0:12:
8c:79:19:9a:7f:82:59:fc:af:53:b6:5f:15:23:00:
51:e0:0e:f2:46:66:bc:06:1e:40:b4:3e:0a:0d:d6:
41:68:3a:55:21:8e:08:31:94:42:52:a0:df:48:46:
5c:2e:ba:73:a9:44:56:3f:0a:c4:91:f2:d7:47:a9:
4b:47:55:3a:d6:39:6d:b1:ee:1f:20:2b:48:9c:32:
58:b0:16:78:ab:61:09:79:35:0e:5d:f8:b9:3f:8d:
47:e7:59:f4:81:86:a3:0e:90:99:86:0c:38:d8:4a:
0b:14:7e:79:04:21:d0:64:44:e9:6a:37:d1:43:ff:
eb:6b:5f:9c:d1:fc:91:5b:56:0a:24:4c:13:e5:19:
79:86:67:77:b1:a9:83:b7:cf:3a:d6:02:f6:45:ae:
14:01:fe:4a:4b:4d:eb:81:75:1d:22:02:75:d2:b8:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:48:F4:2A:FD:C5:9A:49:3C:A6:C5:DB:E7:8B:B2:AF:D8:2D:98:A3
X509v3 Authority Key Identifier:
keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:02:df:4d:41:4e:df:57:d4:8c:a5:43:17:3c:3d:ab:32:ba:
c0:ab:bf:ca:08:47:12:7b:d0:1c:d6:7b:c2:a9:0d:96:be:7c:
41:24:3c:61:e0:bb:93:27:45:03:68:c0:77:e9:38:eb:11:8a:
40:fe:fe:42:6d:a7:c6:07:8c:49:ae:81:8f:4f:5b:af:2a:4c:
1b:ff:ff:05:38:ce:1f:45:5a:f9:66:d2:01:1f:52:5c:69:4e:
ae:af:5b:94:de:40:3d:06:51:72:90:cf:c4:c6:91:ad:e8:dd:
c7:ba:6c:fe:d5:7e:d7:17:ba:14:c0:da:64:8e:0c:18:f5:cf:
df:39:6a:ae:fc:1c:9a:81:84:0e:b1:32:44:46:81:ca:6b:ff:
ee:38:70:b1:da:78:a7:0d:1b:7c:80:90:01:15:bc:66:a2:de:
f4:bc:b5:f8:c5:84:70:c6:0e:20:13:ac:45:4d:82:35:93:b2:
12:af:35:d1:5f:7b:d1:d6:31:ae:a4:42:18:61:f4:c6:3b:7e:
84:32:f6:3e:37:e3:1e:2c:9e:04:f2:a9:34:68:1f:83:21:36:
12:64:a5:66:15:b9:3a:f8:4d:c9:b6:32:7b:15:4b:8b:76:e0:
e2:73:ab:80:4c:ef:3d:10:d2:66:bd:4f:33:4f:f2:20:98:4c:
d2:39:96:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:40:15 2025 by rpki-client