Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
File: bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json)
Hash identifier: fFOr4D2saiWOvGVEzNQ/DUvtvj/4rBqFHs7PF6ngaTQ=
Subject key identifier: 52:34:18:3D:0D:E9:7E:EC:6F:50:86:89:13:8F:9B:92:FA:02:D5:85
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial: 0194BCE0B7352F3B8E4A91C8B630608567AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
Manifest number: 0621
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: 1-fz70-nHPXSfvd6j7EvNqcn6YTI.roa (hash: juZSjJ70K6GnMKFKUOOOA9dMssogTKU5XKqImeihFWA=)
2: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: 62PlPlMEIaVBwdlzApLsmYUO/7QFii29JBbuEkmTYTs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b7:35:2f:3b:8e:4a:91:c8:b6:30:60:85:67:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=5234183d0de97eec6f508689138f9b92fa02d585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:e5:2b:90:e4:53:2a:85:3b:5f:91:7b:94:
ca:8c:ff:c2:f7:7e:75:ed:87:f8:37:8d:9a:fb:54:
c9:b1:01:a0:e8:5e:c6:1c:95:f4:20:b8:4b:5f:af:
02:e5:41:f7:52:7b:27:cb:e2:ea:8e:15:af:c4:23:
05:ad:69:fe:6d:83:65:04:4e:9a:7d:1c:4f:e9:b4:
c6:64:ee:7d:4d:1f:ed:e9:dd:2c:8d:c3:c6:24:87:
f1:6b:46:d6:40:3a:02:2f:7a:5e:94:ea:db:2d:f5:
7e:36:8b:a2:ae:10:d9:1c:6c:da:29:51:dc:df:42:
df:58:4d:d3:36:67:4d:e5:6d:ff:49:e0:59:57:80:
67:b2:0a:5f:91:7c:27:88:c4:8b:bf:fa:fe:e0:1b:
15:51:d5:78:d3:31:b1:84:45:15:27:fb:20:4b:1e:
28:45:b7:16:28:aa:2a:c7:d8:e3:07:f4:6b:6e:56:
78:75:b6:79:72:4c:60:48:36:20:8d:9a:6d:ee:9b:
e4:74:4f:32:13:e2:a0:93:c6:12:74:c7:77:d1:0d:
e8:9c:44:73:2a:ff:ad:2d:da:6b:25:1b:58:4f:02:
24:ac:30:7c:37:04:6f:62:fe:cf:17:f4:d9:c6:73:
a7:e4:80:69:de:27:94:42:05:f3:e4:a3:0d:55:48:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:34:18:3D:0D:E9:7E:EC:6F:50:86:89:13:8F:9B:92:FA:02:D5:85
X509v3 Authority Key Identifier:
keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:47:01:67:c6:11:60:1a:c0:9d:3d:1f:32:ac:22:63:97:a3:
26:ef:7d:e2:5d:90:ac:b9:e8:3a:8c:a0:d7:ff:67:68:f0:a8:
e1:18:5c:5e:7f:cd:8e:0a:30:fe:e6:8a:45:84:db:00:34:f5:
a7:c2:77:8d:28:85:e6:94:25:81:8e:9c:c8:73:ff:c1:c3:a9:
79:ca:16:7d:03:c1:b9:a9:ed:ac:75:d4:c2:80:8c:26:c4:e7:
90:9d:b0:b3:04:9e:7e:b2:92:88:01:d7:d0:c2:c2:2f:1b:15:
dd:47:b8:93:6f:8e:ef:98:f4:80:76:38:23:12:be:00:e6:4b:
8a:8b:62:69:ba:eb:39:2d:44:a8:21:aa:48:63:de:a9:05:00:
5a:a1:9d:6d:8b:9b:73:52:fe:28:ef:70:62:8c:80:a7:9b:af:
91:f9:13:ea:a0:15:80:c1:33:82:c0:66:ca:8a:b0:1a:8c:db:
a9:3f:25:b2:9c:d3:7e:a5:06:90:a9:5a:67:c4:25:3a:f9:09:
84:12:a5:75:3a:9a:a7:f2:c1:00:8a:24:ac:29:a4:1e:7d:e6:
2a:d3:b5:b1:83:41:c2:88:fa:39:5d:de:71:f8:7b:1e:a1:54:
5d:ee:a5:b3:04:86:b3:19:97:7e:f2:4c:50:d1:88:16:c1:ad:
2a:59:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:28 2025 by rpki-client