Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
File: bIkO9qiKsz-logZ2B2jdMlHCOK8.mft (raw, json)
Hash identifier: AZx5D8DcXaaet9XlBF6gDSKzKAS4IcLIZbNd1de0Yrk=
Subject key identifier: A2:28:C0:5D:7F:3D:B7:12:F4:E2:93:12:E6:CD:4D:19:1A:42:4A:43
Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Certificate serial: 0194BCE09907634710739357F2317F5C5D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: Jg3tAly607eUyr5ul8qsb9iYCbk.roa (hash: E+on8KClaRu9XGuipMYBlTB9A2oc11upYWwt1aQCGuI=)
2: bIkO9qiKsz-logZ2B2jdMlHCOK8.crl (hash: 97kpFM7dkcIi60t1jGCiAV1ucAeLfoN2oTdJ93UOrD4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:99:07:63:47:10:73:93:57:f2:31:7f:5c:5d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=a228c05d7f3db712f4e29312e6cd4d191a424a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ec:d1:3d:54:4b:da:1b:1f:44:42:74:d4:82:
0e:8d:82:8a:94:36:ec:b7:d3:92:f3:8e:ae:8d:ae:
e9:e7:2f:88:13:9c:c0:6b:2f:09:15:e3:62:75:5b:
9a:36:ec:6e:35:ad:24:12:bf:0d:e6:db:17:d3:f0:
12:67:fe:33:bb:6b:29:d5:54:84:c1:6f:2c:2c:2f:
c4:89:1e:32:09:23:17:27:de:11:7e:3a:bf:72:c7:
e7:bf:3d:14:13:0c:b5:9f:f2:65:86:ea:57:f4:41:
f3:02:db:61:06:6c:5a:1c:4c:23:bc:91:38:d5:81:
6c:27:cd:54:47:e5:48:77:da:6e:1f:ff:e2:fb:9c:
21:48:15:46:80:45:f6:0e:5d:0f:12:88:0a:10:ff:
41:06:cb:fe:71:8d:a5:7f:12:d3:e8:3c:f4:b1:10:
a2:30:60:bc:f2:35:90:e8:f4:44:7a:a6:1c:e5:91:
c8:f0:43:60:6a:9a:6f:1e:04:f4:44:bc:dd:7d:ac:
c6:82:9e:46:4d:e3:84:6c:16:9e:d1:9e:36:47:62:
8d:e5:8f:2b:68:c5:d6:cf:c4:a5:1d:84:3e:dc:61:
3a:82:59:9b:af:f3:f0:37:97:e7:52:9e:41:19:a1:
b1:a0:86:15:e7:c9:4d:64:17:ea:d9:3e:21:a9:c1:
ea:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:28:C0:5D:7F:3D:B7:12:F4:E2:93:12:E6:CD:4D:19:1A:42:4A:43
X509v3 Authority Key Identifier:
keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:51:ff:96:e6:d3:6f:a1:14:b2:5b:e0:ee:a2:9c:70:36:41:
97:c8:09:58:f3:ef:2b:86:7d:30:28:99:51:a0:21:72:39:3b:
f0:07:83:4d:02:e1:da:81:19:c8:99:62:04:d9:5c:b2:3a:aa:
f5:df:a7:03:bf:3a:07:8a:b4:8f:5e:c1:1f:d5:e7:6a:43:9d:
4d:9a:95:71:37:68:a8:90:ea:db:ed:01:f1:eb:b4:04:bf:b2:
68:b7:83:1a:ff:c1:8e:4d:60:f8:35:9d:d6:8e:67:db:23:10:
06:d7:82:9f:4a:d9:75:6b:e7:1d:7d:99:c7:2c:5d:6b:ce:be:
e9:24:ee:c7:81:c8:22:8e:e7:9f:aa:dc:91:41:f7:cb:90:2b:
dc:99:1e:82:9d:e1:70:5c:2f:93:62:13:30:16:77:05:72:48:
ae:47:fa:ca:f9:e9:75:f0:e2:ea:62:b0:b7:ba:98:ce:ea:ca:
dd:f6:6b:93:0f:9b:ce:25:55:a4:f7:74:cc:3c:20:c2:0c:c2:
c5:39:c2:db:bb:fa:93:d0:81:df:45:bb:20:5a:82:f3:c1:48:
7c:ac:12:14:64:6d:ec:1b:b5:a5:ea:2c:d5:a4:0b:0c:cc:f0:
99:fe:62:27:7a:49:ce:60:34:74:b1:75:9e:4a:7c:22:a6:61:
29:da:07:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:14 2025 by rpki-client