Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: lbuJv8qetrHPqeco9glAWMj88EQ/WDJgrEMGHjuIsCQ=
Subject key identifier: 67:A4:A7:8B:D8:61:A3:77:83:A3:63:B1:82:12:92:89:87:16:5A:8A
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 0194BC3BC9C90058F539AAEA966E6F78BA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 0C1F
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: NIgOOsWZ_RoxFFT9vJCbwFnZsCM.roa (hash: SGzY87pmisE8wFs6+QKFsJ0hsKTEdW5d6naw7a4I9fY=)
2: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: hhgSMjL6bz9L8g6h2FNs+isTiKfYlkUcSFa2ONvYXE0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c9:c9:00:58:f5:39:aa:ea:96:6e:6f:78:ba:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=67a4a78bd861a37783a363b18212928987165a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:2d:80:f0:5b:ef:c4:8b:c2:2d:f3:ad:4b:
bd:f2:72:c8:1d:c5:ce:49:07:a8:3d:f8:ad:6e:63:
90:63:8b:48:0d:b7:57:bf:d9:3f:3d:5e:69:9e:a6:
45:bb:8d:cb:86:f2:06:fb:20:f5:70:2b:d5:2e:10:
a9:eb:80:a2:b7:3a:b4:e8:6a:d9:bd:de:86:34:10:
e9:32:02:d2:e5:f5:65:02:c5:93:7b:2b:0c:a2:be:
e1:e7:dc:ed:87:b5:aa:e5:4d:50:ac:16:08:2a:83:
a6:c0:f5:89:61:65:30:12:4e:c7:fa:51:4c:a7:91:
aa:a0:d9:cc:0e:dd:7b:11:94:46:21:9a:3c:3b:b9:
53:d1:7c:da:9c:d2:99:7a:1b:07:7c:ff:05:23:58:
d6:4b:8c:62:72:19:d0:24:a7:9c:a6:cb:b7:d9:45:
02:b1:88:59:b0:00:c5:64:5b:ad:b7:75:4c:d7:e8:
46:be:da:ba:87:b3:17:83:98:7e:57:7b:34:d4:5c:
88:29:8e:26:59:2b:13:e4:71:4a:44:d5:c2:c5:3d:
2a:7d:f9:03:7f:35:a0:47:a3:f4:46:08:37:7b:bd:
b1:46:84:b6:aa:bb:e2:65:03:4b:96:a9:8c:83:93:
84:98:32:f8:39:58:52:8c:bc:03:fc:64:ad:61:42:
db:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A4:A7:8B:D8:61:A3:77:83:A3:63:B1:82:12:92:89:87:16:5A:8A
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:42:ee:6c:6c:57:da:b5:80:ad:b7:8e:55:fa:bc:12:56:70:
57:12:19:a7:59:79:90:9e:d0:46:98:af:d0:fb:f8:7e:55:ca:
20:7a:62:a4:17:2d:b5:4b:d2:7c:48:07:23:cb:c7:b0:b3:37:
5e:ec:ec:b1:a9:79:3e:50:af:96:19:ca:2a:af:a5:1b:5d:3a:
bd:e0:46:2a:e3:ef:eb:1e:47:16:79:a8:03:db:6f:e0:a6:01:
ca:8c:3e:77:f9:7c:76:c4:af:f5:b7:02:25:15:ee:ad:94:a2:
b4:9d:47:a2:09:9d:ce:ee:96:68:62:51:87:27:b4:68:7b:9d:
d7:30:6f:e8:eb:68:39:c8:af:80:13:98:5b:ba:74:53:e4:1d:
eb:3c:98:8d:74:e8:c4:88:52:81:53:92:bc:12:1e:8b:c9:4b:
09:08:0f:bf:67:d4:3c:a6:48:22:c1:7d:a6:94:29:2e:86:bd:
69:95:06:2c:bb:5e:87:f5:76:b2:a5:23:b0:95:0b:26:50:41:
da:33:80:b9:2a:63:1a:f1:1e:a8:09:4e:23:60:6e:12:68:30:
bf:9a:f9:6a:fe:9a:c0:a6:0a:7e:4d:56:0a:2c:04:fc:9f:11:
c1:56:c7:b9:22:69:47:98:ca:17:35:c4:cd:ec:be:15:35:59:
67:a2:e8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:29 2025 by rpki-client