
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
File: BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft (raw, json)
Hash identifier: vcI0hgRqxxxOeaW4F0Iu97z8lUn0Oj3e+L9pcM3ISxA=
Subject key identifier: 7A:69:DC:1A:85:E9:5D:2A:2A:52:91:B9:67:0F:34:75:7B:44:4B:E3
Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
Certificate issuer: /CN=06a757442e47f82608bef423dac344c25358dbf9
Certificate serial: 0194BCA9A7920051D6ED5E9EAA9DAE120EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
Manifest number: 0984
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl (hash: 7nc6X8XsNpnmQ6OLQQfLVl+4lhEKuJOgp4Hkrhf9DP4=)
2: cnQVrWDhW0BxCfHysaIfdn7x84A.roa (hash: QGeaUhczDONIP6VJTksO3RkYcdOxpExDTeoK1S4rtLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a7:92:00:51:d6:ed:5e:9e:aa:9d:ae:12:0e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=7a69dc1a85e95d2a2a5291b9670f34757b444be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:89:17:49:58:98:51:df:71:d4:3e:9b:e4:01:
2e:15:84:da:be:d3:f8:ab:28:19:d7:8a:7f:07:b3:
de:bc:57:f6:f3:b9:de:86:77:3b:c2:3a:7d:83:0f:
14:91:54:87:b8:df:3d:11:5a:bc:29:ed:b6:a0:da:
02:b0:7c:75:b9:3c:70:b3:7f:f1:98:ee:81:b3:fd:
00:96:1b:da:e0:62:12:d2:68:5d:b1:ed:19:e3:3b:
c8:2f:b7:92:43:a3:97:dd:fd:d1:a7:94:95:e7:38:
3e:25:86:c2:24:c0:53:12:17:bd:8e:21:ac:cc:45:
39:6f:88:c9:73:ac:4e:23:dc:8d:d3:30:c3:41:4f:
a0:dd:68:0e:ab:e8:d2:a5:6d:8e:4d:d5:6f:ec:6b:
fe:91:09:79:16:fd:1e:27:25:3b:26:f0:54:48:d6:
88:17:9d:c8:64:83:a4:65:b5:23:5d:a4:cd:f2:36:
e6:3b:b1:2a:c8:82:fb:a1:6a:9a:dc:43:97:6a:c7:
e9:7a:fc:b5:1c:49:35:2a:a0:62:e5:5f:d0:d9:16:
31:fd:3e:09:7b:2d:e7:c8:82:cb:89:49:8e:98:ab:
25:a2:d5:16:b8:8d:c0:59:38:d3:52:83:0e:bf:c0:
f3:49:a7:2d:21:f7:66:e5:f0:a1:e6:f0:fc:00:0f:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:69:DC:1A:85:E9:5D:2A:2A:52:91:B9:67:0F:34:75:7B:44:4B:E3
X509v3 Authority Key Identifier:
keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3d:8b:79:da:31:be:9e:24:52:4a:49:1f:32:9d:b2:3d:0d:
ba:b7:b9:52:94:1b:33:07:8a:91:c7:4c:e6:c0:43:8f:a0:04:
63:4a:1c:a4:81:4e:12:11:92:87:ae:59:e0:bb:a8:5b:31:9c:
3b:d2:64:17:31:9e:3e:8e:a2:ef:c9:fc:d7:9a:39:04:6c:95:
14:00:36:b3:08:85:75:33:55:d0:b8:2f:af:76:a1:f3:fa:8d:
07:98:22:1d:d2:ed:82:83:10:9e:ef:1b:bc:b3:57:2c:e4:08:
84:9c:e1:4f:28:45:66:dc:8c:ad:2d:63:64:0f:ff:a5:5c:84:
70:11:50:d3:13:d8:49:4f:1f:e0:ae:a6:1f:c8:8f:b4:79:01:
9d:7b:af:bd:23:6a:5d:c3:dd:42:13:28:37:15:e3:fa:7a:62:
c1:41:26:c3:e5:68:71:d1:48:10:6f:94:6d:3b:ed:b4:cc:32:
b8:19:c4:22:76:7a:28:58:47:4b:24:c1:0b:c9:36:33:e8:a5:
7f:dd:15:13:8e:46:80:a6:c3:e0:e4:57:00:a3:0f:17:55:94:
2a:46:1d:55:3d:a9:73:80:3d:55:28:85:36:d1:dd:06:7f:81:
cd:71:0b:e8:7b:66:0e:2e:f7:61:93:77:a9:65:7a:8b:94:fb:
e4:bc:e1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:58 2025 by rpki-client