Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6add35-a983-4011-af8a-7aac2d847955/1/bfhqH1cK4xUpAiqk9h79nsK5fQU.mft
File: bfhqH1cK4xUpAiqk9h79nsK5fQU.mft (raw, json)
Hash identifier: cWsdU7GgB5RjWyb4QCkZmv76LRTf6MJm0vJtquvp7Mg=
Subject key identifier: DD:C6:AE:A3:73:C9:CA:B1:4F:A0:0B:84:69:78:6E:4B:1B:0C:91:05
Authority key identifier: 6D:F8:6A:1F:57:0A:E3:15:29:02:2A:A4:F6:1E:FD:9E:C2:B9:7D:05
Certificate issuer: /CN=6df86a1f570ae31529022aa4f61efd9ec2b97d05
Certificate serial: 0194BD8557CE086D489EEC49C40E4C7E0016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfhqH1cK4xUpAiqk9h79nsK5fQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6add35-a983-4011-af8a-7aac2d847955/1/bfhqH1cK4xUpAiqk9h79nsK5fQU.mft
Manifest number: 12A6
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: BpLbGApyHXLB4qqgJyw3nGH9lH0.roa (hash: 4AoUx/2M994KEwtEdAKInOt11G1446xmTonI1qJPrOg=)
2: bfhqH1cK4xUpAiqk9h79nsK5fQU.crl (hash: Q8Iyc39t8GqMQspq1JH5GnbOLQ3erK1wKO2J/hFz76M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:57:ce:08:6d:48:9e:ec:49:c4:0e:4c:7e:00:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df86a1f570ae31529022aa4f61efd9ec2b97d05
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=ddc6aea373c9cab14fa00b8469786e4b1b0c9105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:d9:79:f0:95:e4:c7:2f:23:be:a3:3e:e4:
bc:8d:e3:0f:73:81:6b:6b:e8:25:96:d4:d4:c9:28:
9d:b0:66:50:9e:bb:e8:4d:0e:ca:4c:fc:6c:cd:e9:
29:31:d3:4f:18:81:1f:63:5a:b9:ba:f5:5a:a6:0f:
25:fa:9b:99:9c:ef:bb:a5:fa:66:7b:28:88:db:e2:
f2:63:59:8f:3b:82:90:b6:3b:8e:83:62:54:87:4c:
49:0f:0c:4f:4b:1b:9e:68:0e:db:b9:7b:44:df:d8:
8f:bd:e6:2a:78:7d:f4:27:32:1f:8f:8e:2e:90:fb:
ca:1f:4f:02:2c:dd:25:80:ce:a4:8c:3f:f2:cd:bd:
ec:f8:cd:7b:86:62:c9:72:f5:33:6f:99:48:88:57:
0f:02:1f:ac:d7:bb:d0:8a:d5:38:bc:3d:97:e3:7e:
e1:11:1c:7b:dc:57:c4:50:59:f9:43:e3:f2:a2:3b:
ea:9c:7c:35:37:14:33:8e:f2:26:84:a1:41:b1:42:
ba:0f:e2:3d:d0:c2:95:a5:43:82:6b:45:41:bd:62:
99:e1:b0:5c:b5:8a:ea:f0:a7:1c:60:4c:17:ef:9e:
0b:28:a2:9c:72:0f:da:6b:94:7e:10:70:21:9e:f6:
38:f0:04:34:36:04:06:cb:9e:5c:6a:a9:73:f0:40:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C6:AE:A3:73:C9:CA:B1:4F:A0:0B:84:69:78:6E:4B:1B:0C:91:05
X509v3 Authority Key Identifier:
keyid:6D:F8:6A:1F:57:0A:E3:15:29:02:2A:A4:F6:1E:FD:9E:C2:B9:7D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfhqH1cK4xUpAiqk9h79nsK5fQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6add35-a983-4011-af8a-7aac2d847955/1/bfhqH1cK4xUpAiqk9h79nsK5fQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6add35-a983-4011-af8a-7aac2d847955/1/bfhqH1cK4xUpAiqk9h79nsK5fQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ec:18:33:76:a3:dd:af:a1:03:d9:20:9b:d6:c8:84:1a:60:
c5:ff:ab:3b:15:e5:e9:24:c7:dc:e3:27:ea:4e:c5:d5:1a:15:
de:f7:09:c0:42:6f:18:f4:d0:1b:04:78:7a:d3:b1:0a:fe:64:
32:97:95:90:58:ba:cb:9a:3c:fe:5e:ea:f4:06:b0:79:f0:c1:
0f:f9:9d:29:28:5a:b2:a3:a6:f7:51:3c:20:fc:e8:4b:7a:68:
32:93:e6:6b:eb:e6:52:9f:8d:d7:10:35:73:46:74:be:ec:4c:
3f:93:d6:84:ff:d3:8b:d0:ef:03:71:36:61:26:85:fd:50:78:
df:e0:3a:40:fa:1c:aa:eb:2a:c9:96:ce:8a:8b:21:df:3b:22:
a3:c6:61:14:75:7d:63:59:a4:9b:1d:32:fe:6a:8b:a2:78:b0:
77:0a:46:30:19:83:d2:7d:69:6c:17:67:95:b2:f5:80:6b:bf:
a1:40:19:6a:94:06:5a:4f:4a:c0:33:50:9b:f2:3e:c4:12:5b:
33:5e:88:52:7c:30:78:17:8a:62:55:29:a7:9a:46:00:af:62:
b8:6c:4b:6e:6c:79:80:56:0d:a5:1f:7d:37:bf:d5:d5:fc:60:
98:b9:41:3e:35:e1:ed:de:70:2f:4f:85:73:83:23:5d:61:44:
30:8e:8f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:07 2025 by rpki-client