Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: Jb+01SOafSBC2R0mb1t1/fhbfkuea4q6afOQCh7PwsQ=
Subject key identifier: BA:23:40:63:2B:6B:C3:08:2D:DA:DE:57:9E:1E:2A:D6:8E:28:88:08
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 0194BC72EAA1ABAF7A970AB18EC7B146CEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 08AA
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (hash: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: wNeNQ39Gf0lEGDqwln10lx9U+pEknM0qIK7+VXhOQY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ea:a1:ab:af:7a:97:0a:b1:8e:c7:b1:46:ce:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=ba2340632b6bc3082ddade579e1e2ad68e288808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:61:70:a6:0e:34:15:0a:0e:b8:32:ed:54:
c9:f3:84:2e:60:87:81:2f:d4:0d:6b:3b:e0:ce:d7:
2c:c8:a2:30:36:06:20:c2:12:39:fb:d6:da:98:df:
d5:fa:77:e7:d7:8e:f7:c5:7e:56:e6:8a:06:76:1a:
c8:1c:8f:e1:63:3d:8c:16:2a:f6:4f:e9:6c:24:ac:
6e:23:25:b0:d4:a5:45:f1:69:3f:64:b8:e9:db:42:
27:60:8b:b9:f3:4b:bd:82:df:d2:95:b1:13:5d:99:
f6:df:fd:92:ab:75:4f:5e:74:a7:8c:14:c3:bb:ce:
bb:5a:8d:ab:99:b0:a3:e5:56:f1:0c:14:76:c2:3d:
23:f4:35:62:35:ec:06:00:a6:bf:1f:f5:5c:57:03:
9c:2e:9d:3e:5d:1f:fa:b5:f5:42:0f:e3:b8:bc:70:
81:45:e7:fe:58:ff:4b:72:4d:6a:6e:9b:d6:1f:0b:
ba:ca:f0:27:39:f4:d6:25:79:8f:44:23:97:8e:d4:
ac:6e:4c:f7:68:52:e2:ca:54:cb:5b:2e:0e:0d:3e:
f1:d6:f8:3a:16:fd:c0:6a:69:63:13:91:a7:41:86:
8a:f6:99:10:81:df:28:8d:7d:41:f5:9a:65:1d:a4:
4d:76:5e:cd:cc:91:cf:8d:d5:ee:9c:da:d3:ee:c6:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:23:40:63:2B:6B:C3:08:2D:DA:DE:57:9E:1E:2A:D6:8E:28:88:08
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:47:84:cc:f2:55:73:af:6f:e0:86:2b:cc:82:49:3b:50:e8:
7d:9a:53:6b:44:cf:33:63:e5:98:f8:1e:85:f5:9a:ef:9f:a7:
ca:c4:32:df:d8:eb:35:1c:40:dc:d6:bb:aa:88:0f:9c:a7:44:
78:e6:74:99:88:0a:d2:02:1b:af:cf:ee:12:8f:cf:c4:84:e3:
9d:25:0e:88:c7:30:b5:e1:c9:37:90:54:5c:f3:ba:7d:32:68:
fd:99:28:c4:12:17:90:22:e9:ab:c6:16:bd:17:0e:4a:1a:9e:
d9:02:e8:53:96:ec:7a:6f:06:17:56:62:59:bb:a1:a2:69:0f:
13:fc:9d:d5:21:31:4c:e5:5b:c4:83:56:11:24:4c:c9:ba:e5:
4e:d5:6e:5d:18:e6:3e:a2:05:5d:b3:0e:4b:bd:d6:35:e7:4f:
32:c2:69:76:fb:6c:d1:36:d6:cd:5f:ee:ff:0d:fe:76:2c:ff:
3a:9f:c7:67:34:c8:9d:51:a2:b0:e0:1d:9a:30:0d:59:a8:12:
c4:a2:03:e8:7f:4a:99:c2:d3:22:99:74:23:37:d5:8b:9a:9a:
be:31:47:98:a1:c6:11:e3:25:64:35:59:ad:49:94:8d:4f:25:
e5:7c:e3:db:eb:aa:b3:29:46:f4:1c:2b:ff:1a:ab:d4:c5:70:
84:22:04:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:56 2025 by rpki-client