Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
File: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft (raw, json)
Hash identifier: 7KKaaHJiC3xSTcc9zA1zRBQC9rL1BJSPtv3jQSwx8Ws=
Subject key identifier: 0B:86:A3:E3:E8:30:89:87:E4:25:94:C6:C9:1E:BD:17:7F:9C:5C:70
Authority key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
Certificate issuer: /CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Certificate serial: 0194BCE0DBFA72FB97131CC1FFAC5CCFF7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
Manifest number: 0ABC
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: _MMRM5gPmnbq2reAxzdSDLSF69Y.roa (hash: cjqAj6GsWqy7BzMKUAnCFHbn8leWiofU15doogJDNHE=)
2: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl (hash: T9Pz22g1sVIwIu6SbOXd6jecNMuX8kE8pPeo5nZlEaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:db:fa:72:fb:97:13:1c:c1:ff:ac:5c:cf:f7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=0b86a3e3e8308987e42594c6c91ebd177f9c5c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:6a:43:db:ef:4b:23:51:be:2f:e4:e4:df:
ec:89:6f:3e:fe:e2:9a:28:d9:10:da:68:30:41:a9:
58:cd:04:37:b3:8d:48:b9:19:bf:f1:f6:8c:9c:82:
2e:d3:6f:29:d7:dd:f0:ad:fe:f3:b7:1e:2c:6e:24:
1d:85:d3:8a:4f:5f:fa:f9:bc:82:29:58:b7:0f:04:
27:eb:72:08:f3:ae:26:50:2f:26:c7:db:b7:16:b2:
3e:33:97:0a:88:1d:90:78:a8:22:d9:de:22:15:1a:
93:96:fb:e5:f9:64:7b:8b:a9:5e:bb:60:d7:04:c3:
08:31:8b:70:10:6b:8a:9b:8f:42:53:67:47:95:8d:
0e:5b:07:02:8a:3b:3d:7f:80:0a:72:b5:0b:95:cf:
53:22:f1:65:8e:ff:a1:fa:d9:53:39:0e:99:d7:c4:
d6:25:64:99:d8:7d:f7:45:0e:46:f1:4e:2b:e7:a6:
5e:a4:54:f6:82:71:2f:d0:79:49:e0:dc:3a:52:38:
11:7c:18:3f:84:84:c0:14:65:78:05:fd:d0:d6:c3:
48:38:db:d2:aa:a3:ba:6e:3c:b1:f6:b2:7d:5b:7b:
fd:94:09:46:d4:d2:c3:d8:2d:45:50:a5:88:5a:02:
a2:c8:bf:19:f1:5e:93:c4:d1:83:79:04:5d:2b:95:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:86:A3:E3:E8:30:89:87:E4:25:94:C6:C9:1E:BD:17:7F:9C:5C:70
X509v3 Authority Key Identifier:
keyid:6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2b:5c:79:81:fe:13:66:28:ca:89:8f:e6:53:3f:d2:1a:9f:
0e:30:82:d6:31:35:9a:4b:33:23:37:b9:b6:d4:4a:49:93:1c:
9c:39:83:6d:b1:56:bc:d2:5b:d0:71:c1:5e:6b:77:78:df:98:
29:f0:a1:8b:12:3a:4e:71:01:ea:43:70:f4:82:1f:07:b6:aa:
b7:67:3d:35:5f:a4:c9:7f:9e:d7:17:01:51:2c:45:d3:c4:74:
f8:91:fc:e0:6b:50:9e:7e:62:2e:e7:0d:55:03:60:d8:b5:e9:
c7:9c:c1:40:ee:60:db:1c:de:42:ad:93:09:96:00:c5:c6:2d:
9e:b4:a4:55:56:db:03:d1:f7:03:bd:e7:77:70:f4:5e:c1:c9:
4e:c2:5b:e9:ff:7b:21:10:5b:4e:ce:19:51:1d:0d:a9:40:07:
0f:1c:35:26:71:75:3b:be:51:82:ea:e0:a8:9e:bb:b3:00:e1:
ad:a9:a4:22:f3:41:5c:09:52:f4:90:e0:77:f2:04:70:10:ce:
96:39:0f:1a:1e:4a:6c:7a:2a:b7:65:54:39:6e:d4:1e:3a:a1:
0e:ac:5f:f3:1e:3b:38:67:15:ee:e8:c2:9d:39:45:82:76:5c:
f3:f5:48:f8:16:9c:c9:31:b6:10:a6:94:90:8b:8c:03:f2:2c:
bd:6a:24:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:55 2025 by rpki-client