Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier: YOcPkc2ZhtQ4GxI8KE7nVPwPSkQfB/Niv0nEqSRe5Zg=
Subject key identifier: 06:E5:C5:7A:00:3D:7E:FD:37:AF:33:6A:9C:DE:90:AF:9E:C3:DD:23
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial: 0194BD1794BE857AD1088E8C4A9FDA32F23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: LQcm0nhQTgxfcAEHFSpSeQFsVHo.roa (hash: ScQNvXtsK5w/Wj3QzlqfHMAUcdIYUpFbtGKhSGmn1FI=)
2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: SAS0ddQZI45Hhj1RkdCIXK1mcxqOM+ZGvICKv8tkuI0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:94:be:85:7a:d1:08:8e:8c:4a:9f:da:32:f2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=06e5c57a003d7efd37af336a9cde90af9ec3dd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1d:ac:e2:df:ef:9e:0f:cf:0f:56:d4:bb:66:
91:77:7e:bf:90:e4:dd:77:fb:a7:37:f3:76:0a:c8:
1a:6d:c7:e9:a9:ce:b4:75:db:21:5e:46:39:70:cf:
5a:30:22:1a:bb:32:7d:37:d8:f1:cd:54:26:6d:8f:
cf:49:a0:06:d6:92:49:b5:97:69:4c:22:80:02:2b:
d5:fa:b2:2b:f0:1b:4a:e6:50:49:57:0b:0a:31:d7:
6f:73:19:95:89:d6:2d:74:d8:39:b8:c7:66:e4:fd:
b6:19:e9:d1:ab:7d:6c:62:d2:4e:fc:10:7a:8e:b9:
37:8f:1a:dc:97:12:f6:69:4a:7e:b2:a7:76:81:c1:
31:1f:bf:cf:c8:7e:2a:49:1c:20:2a:0e:4d:45:03:
d0:18:16:81:55:8b:62:25:71:8d:4e:dc:05:0f:68:
85:71:2e:ab:65:bf:4d:44:33:23:8a:87:a0:c1:e3:
80:db:a6:2b:85:fa:98:1e:39:e0:4b:73:22:6f:5e:
f4:50:09:d6:04:0f:ba:73:2d:57:46:99:e5:a5:48:
05:d3:8b:3a:3e:ec:2e:4b:b2:ad:51:bc:4f:dc:78:
92:7b:05:53:d6:41:0c:a8:a5:4c:e6:1b:69:1a:8c:
74:4b:0b:e4:53:0d:01:81:bc:7c:3b:7b:f3:70:dd:
79:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E5:C5:7A:00:3D:7E:FD:37:AF:33:6A:9C:DE:90:AF:9E:C3:DD:23
X509v3 Authority Key Identifier:
keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:49:c5:2d:a5:87:a3:34:91:15:8c:8a:97:fd:a4:cb:b0:7e:
a3:0b:e1:28:24:d7:9e:b0:c1:cb:d5:aa:c5:10:23:38:90:10:
8c:98:50:20:77:80:a3:3c:64:98:42:3f:60:b1:44:70:d0:f4:
0e:77:b2:bc:72:1e:82:9c:0d:ee:5d:c0:cb:d7:db:7a:32:e1:
28:fb:db:db:c2:e0:61:fc:51:57:15:07:8b:2c:9f:bf:cb:25:
24:0c:e0:8f:fb:20:70:3e:35:79:b1:20:28:36:49:e9:54:3e:
23:54:4e:db:81:68:8f:c0:05:e2:6e:8d:7f:a4:f1:c8:3b:00:
e3:e4:80:21:3e:ab:35:bf:bd:fa:6c:39:3e:7e:ed:dc:8b:df:
da:6f:1f:99:50:ec:9a:9f:77:7a:f0:85:79:4b:a0:d1:9c:f7:
ff:40:81:8a:01:cc:fd:8f:d8:0d:ce:04:4c:d0:ea:2f:8c:e6:
96:43:25:c7:dd:df:99:03:80:a3:1e:af:f3:e1:04:bf:4c:c2:
0c:4e:90:d1:77:f8:c1:8e:81:1f:ed:54:e7:00:00:ec:71:e9:
4b:d0:ea:f2:dd:de:43:f2:00:68:af:c9:14:0a:0a:7a:e0:70:
d4:0e:45:84:02:bf:d0:95:1d:0e:0a:1b:f7:59:a1:41:e8:37:
68:7f:0f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:38:59 2025 by rpki-client