Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
File: bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft (raw, json)
Hash identifier: 1YqHa6TR1eHcSj4RZDuUEZCJEcyXnxMEUHdTTtJFK0s=
Subject key identifier: 70:36:FD:BB:E0:E5:47:2B:92:D4:95:A2:1D:A1:63:E9:14:B9:18:B6
Authority key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
Certificate issuer: /CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Certificate serial: 0194BBCF05BEB56F7AF6EB351C2B17EC52E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
Manifest number: 02A1
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: KNlHZhzvj3c5evx_WYZ3PPymDMg.roa (hash: VIooQbblCXzCvlc89EdzqvODc1G/is8eypm36M8wtX0=)
2: bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl (hash: snvANPMrzU7kP6cIhd2N4KmuhC8mH7iGqVP3sRBizA0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:05:be:b5:6f:7a:f6:eb:35:1c:2b:17:ec:52:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=7036fdbbe0e5472b92d495a21da163e914b918b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:5c:00:7d:01:51:94:7f:f7:a2:4c:2f:cf:
0f:f7:a9:6b:e1:5a:9d:56:31:00:bd:02:66:41:f8:
d6:27:f1:6c:22:d7:8a:f1:8e:8c:b9:5c:4d:d2:de:
e2:40:2f:7c:ea:1b:1b:4e:58:bd:0c:0a:4c:52:b8:
60:88:1e:0b:b8:5c:63:e2:cc:00:4b:d1:8b:ee:c5:
37:5e:a2:b9:74:f1:ba:fb:9f:2e:a7:f3:9e:5c:ad:
82:fa:b6:57:d1:45:06:9f:10:39:77:1f:c9:c7:c7:
a2:23:6f:1b:cc:24:49:56:83:e7:ea:d0:24:29:a8:
ed:a6:67:f2:de:e9:59:8d:9c:28:67:65:f7:25:6f:
ae:38:9d:5d:10:d1:0e:8f:b2:c0:f5:10:4e:b5:dd:
76:43:d7:7d:06:93:a4:f8:96:ca:c4:6e:ed:27:ad:
89:15:dd:dc:fb:69:44:a3:c5:89:60:09:76:6f:b7:
b6:4e:5c:08:56:8b:cf:bd:01:1f:a5:d0:07:f8:18:
7a:5b:c5:74:a3:bf:26:70:05:94:35:fd:2e:ce:f4:
b7:d0:b7:2e:bd:3c:46:1f:b4:13:07:75:49:28:fb:
28:f0:66:3a:fb:36:b1:c7:8b:df:8c:03:38:17:53:
ba:26:c6:3e:8f:34:37:fb:c9:c1:32:f0:56:4d:fc:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:36:FD:BB:E0:E5:47:2B:92:D4:95:A2:1D:A1:63:E9:14:B9:18:B6
X509v3 Authority Key Identifier:
keyid:6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:99:54:11:dd:f6:0f:3a:7b:0d:e2:df:a6:1b:86:20:d4:7a:
a6:ef:bb:24:ef:ab:aa:05:cf:57:8e:8c:56:22:6d:f1:91:10:
6c:0b:b5:f5:98:82:e2:f5:16:33:a5:ec:9c:b8:94:ee:70:83:
29:57:b2:b7:89:1a:69:64:f1:b1:fb:db:23:3a:5e:2c:ec:54:
6e:f7:16:f3:6c:66:f7:59:62:d1:5f:89:27:20:0a:a0:15:76:
c8:16:43:67:d6:e4:f2:28:d0:6d:ce:ec:90:e2:24:a5:92:18:
44:85:40:dd:22:a6:ba:b6:15:96:32:d8:f9:9b:e0:06:7c:be:
ea:14:21:34:88:fa:4d:00:e8:c1:68:a4:33:9e:2d:38:a1:9c:
cc:cc:10:0e:67:1b:62:8b:5a:07:93:46:52:56:6f:ee:bc:22:
f4:e4:c9:04:26:b0:67:68:1e:8f:8c:f2:93:ee:fc:ce:01:69:
1f:f5:ab:00:e8:94:84:4d:9a:72:b9:9e:03:1b:26:11:97:e4:
3e:b8:e7:92:54:3d:96:f1:50:49:3c:b0:1e:ec:52:31:32:78:
cc:5b:66:8b:d6:ca:7c:ed:16:c1:04:2b:71:96:5f:28:8e:5b:
c3:a7:09:cf:f3:57:24:ba:de:58:dd:9a:98:06:96:03:f3:ed:
bd:81:d8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:55 2025 by rpki-client