Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json)
Hash identifier: /3zGMNMBA6MtYDGXdaXjbK8OOno+D3foTU+zzNqJE5c=
Subject key identifier: 30:37:5F:DC:53:CE:86:34:62:EA:64:34:5B:7E:51:33:E9:3C:22:65
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 0194BBCDE874E3FF3F93D6318CB6E236064F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: 0RNJuYPZiDcf2gUUOnUhuhAYCyY.roa (hash: irV2LB0+bLUg11vqg/MlCRmvMKCWuhoKie4EXXhcIPY=)
2: KD5CcVWdpeUY7OWEYsk8lC6D2hk.roa (hash: H95zFft64npjWC1JHZ2t6hhvs8iKIUW0H9YWRNoYrAc=)
3: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: XGKvIXlrGEi2gCIWNb9DIukRdgQDmS8BLwsZpgiCo+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e8:74:e3:ff:3f:93:d6:31:8c:b6:e2:36:06:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=30375fdc53ce863462ea64345b7e5133e93c2265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:e1:f1:f4:5a:44:ce:31:15:ff:10:5f:84:
0d:fb:cf:f0:be:08:2e:7d:cc:91:eb:5d:b7:3a:4d:
c4:9d:4f:82:0c:db:82:31:e0:59:b7:af:eb:36:1f:
02:89:c6:9a:07:61:48:fd:b1:f4:88:93:af:5c:0e:
be:56:87:40:42:82:e2:03:b4:e7:bf:a3:d8:3d:bd:
ad:d7:1c:ab:be:49:ee:6d:c9:f6:2d:38:95:82:0b:
93:32:30:39:c4:71:a3:9d:f4:c1:1f:d5:68:35:8a:
0f:aa:43:01:f6:48:13:f3:85:32:6a:48:33:21:55:
c6:17:5c:39:d5:9f:81:09:91:cb:8a:4d:83:b0:05:
14:0a:e4:f1:19:60:3f:f4:59:f5:20:8b:c7:77:2d:
96:7b:ad:97:c7:10:77:c9:ea:aa:f7:ce:24:0d:6b:
fa:2d:18:a6:6b:f7:e3:75:ea:ef:48:c5:c4:f6:9f:
8c:34:36:89:b2:a9:d5:71:c6:a9:2f:c6:2a:7f:28:
36:7a:f9:0d:e1:8a:52:b2:f9:db:32:69:3f:f3:29:
a6:28:1d:8f:5e:26:8a:a9:30:59:2e:35:3b:2a:3c:
50:ed:c5:d7:5b:27:6e:e7:ed:7b:98:6e:a3:39:db:
a0:17:b0:eb:87:f3:ef:76:ab:2c:98:8e:d7:ba:da:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:37:5F:DC:53:CE:86:34:62:EA:64:34:5B:7E:51:33:E9:3C:22:65
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:60:c5:3c:1a:f9:11:12:b8:91:7c:43:01:8a:f8:75:f1:fb:
35:57:7e:7e:d3:79:3c:8a:c5:9f:a4:a2:3e:3d:bd:99:2b:53:
31:66:48:f1:ab:7e:d0:53:cd:5d:ec:3d:dc:35:b1:db:50:16:
27:26:25:b7:30:d6:23:d8:e9:a8:71:1a:b2:5b:19:1e:4a:cd:
04:3f:64:7e:5e:d8:77:5c:53:98:59:94:f6:e1:2d:64:92:57:
66:a4:7c:ed:a4:9e:a9:71:a8:b8:68:f4:20:64:9f:a4:83:db:
53:ff:a4:d5:d0:eb:6a:92:0a:71:c0:89:3b:74:ff:71:c3:86:
03:63:83:af:b0:68:fb:6e:c4:98:95:79:d5:d5:0f:32:cf:4e:
67:fb:aa:3a:93:c4:89:fc:4c:94:da:10:6c:fc:14:51:65:4f:
0b:b9:2d:a7:dc:e7:06:bc:91:10:82:08:9f:58:8d:19:c4:bf:
3c:6b:6a:89:d9:49:44:f0:6d:a0:a1:ec:a8:1c:b8:f3:52:ac:
3a:b6:ed:03:89:92:53:57:34:71:8c:90:1c:41:7f:82:0a:d7:
3b:b9:4f:cd:a5:d3:a3:56:32:8f:4f:3d:6f:0c:df:d9:4d:dd:
59:4e:34:1b:55:e5:11:aa:6e:ce:cc:e6:a5:81:ed:22:41:48:
4f:c0:da:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:53 2025 by rpki-client