Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: 4IHVr8GrxRmG/fBPtig3mFDbBovb0WJgo1qOrJ0gTKo=
Subject key identifier: 5F:90:29:A2:58:0B:5A:01:A5:65:40:CF:9E:D7:5D:E1:51:54:1A:56
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 0194BCE08BA6B4570486E81EBA53620B2B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 1116
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa (hash: rW6xgGR1vzj/wyImvrzrumKsIhFoGNfZPJbpPmbWZ1U=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: 8d3ySQXJ2yaQb+FMj+lbv/Xwb8bg50CRBYcK3akcPB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8b:a6:b4:57:04:86:e8:1e:ba:53:62:0b:2b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=5f9029a2580b5a01a56540cf9ed75de151541a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:a3:68:6e:17:2f:8a:6a:af:7c:d6:2b:17:
77:50:9c:84:e0:fc:27:75:d4:17:f0:e5:50:80:63:
2d:66:34:a4:20:53:1d:18:ee:c1:d0:59:db:7d:7f:
01:28:47:e6:8e:d8:96:a3:93:b2:50:d2:88:7b:5d:
01:44:ba:cd:c6:26:64:55:d9:38:b5:ba:ba:a3:df:
77:9e:b5:da:d8:d8:41:5a:01:c3:77:22:d2:5f:59:
83:a3:fa:d6:97:99:ca:23:3a:60:9d:69:7a:05:24:
1b:e1:a7:c8:be:ec:a5:7e:e3:9e:99:96:16:2a:97:
74:eb:c9:5f:21:92:70:e0:4b:c2:38:0f:65:d4:c5:
3b:c9:37:18:cc:7b:82:ff:e4:0e:06:f9:b9:f8:4d:
43:ab:dd:f8:99:3b:88:1b:f5:dc:ee:74:0d:ca:49:
a0:3b:b3:99:54:45:b5:30:ab:3d:6e:be:e6:28:d1:
cb:ec:c6:43:76:95:7c:21:bf:d8:6b:0e:83:93:26:
da:1d:32:f7:85:37:20:c0:e3:53:79:23:7a:d0:8a:
15:2c:b7:b8:5b:0d:7c:f0:0e:46:0d:ab:50:09:3d:
ce:5d:9f:6d:e9:17:fa:08:0e:82:5c:4b:1f:d3:f1:
31:77:02:7a:57:83:01:c2:39:0c:ef:e2:6f:c5:9e:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:90:29:A2:58:0B:5A:01:A5:65:40:CF:9E:D7:5D:E1:51:54:1A:56
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:16:5f:45:aa:63:b5:7e:91:3e:3e:b5:08:a3:3a:45:8d:9b:
6d:3c:a0:61:6c:8a:a3:b1:a6:2c:11:93:e7:bd:e0:d7:a8:10:
33:28:72:23:62:47:51:ac:e5:fc:df:16:e0:85:23:b3:a1:02:
f2:a5:72:7d:e0:15:99:a0:11:d7:0d:d8:f3:4c:cb:2d:83:dd:
ee:2a:44:37:89:0d:cd:f3:6d:13:e3:73:eb:e9:92:f3:49:bc:
a2:18:a5:98:de:3e:b5:be:1f:5a:eb:9b:3a:45:98:49:2c:27:
e2:cf:15:db:a1:ca:18:80:13:d5:d4:53:19:76:45:6e:d9:6f:
74:d3:0a:ca:8f:43:66:50:db:15:78:5e:d8:34:90:89:e7:30:
55:9d:e6:9f:62:bf:97:32:c6:de:72:75:b7:5d:3b:bc:07:5f:
89:f6:a8:c1:f7:7a:ab:61:3c:be:8e:ee:a5:f7:77:94:c4:36:
c7:e5:5f:cb:d3:e7:32:a3:27:33:42:40:ff:11:3a:90:27:e2:
48:bf:31:b3:af:d6:2a:38:98:1e:f1:62:99:fa:3a:ca:32:5d:
25:e6:06:64:92:2f:e4:a5:7c:e4:8d:4f:b9:28:8e:76:c6:be:
bb:c7:3e:15:2f:9c:b3:c2:ca:6a:85:c6:6b:30:b8:c5:7d:d1:
67:1d:fb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:45:06 2025 by rpki-client