Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File: bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier: YicQQmHhX5E1sfe/IG3MJPSf3tzgHhW8QikUHe6Wpu8=
Subject key identifier: 0F:94:5C:55:EF:FD:11:70:EF:04:1C:ED:DB:5A:BE:A8:AE:CE:63:68
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial: 0194BBCE24FBB8A970D0D4BE1C3CC4F7292B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number: 077A
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: D9a5tzSXaB3YCXB51ESBfxmocyM.roa (hash: PgS49lglth99HhTvLssigXqfh7TfLNAP1ou+sfSqOKE=)
2: UBhFR3OZMj_R8VlXXyVrvKRDJfU.roa (hash: rvFp0ktgwJ1/3eTonU7/7v6UyJ5UYW+gGNm92KfeHQY=)
3: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: GxEsnt7ETADKNOsy5OUXAHRcTZ3FUXf0U0GWF+X3e2g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:24:fb:b8:a9:70:d0:d4:be:1c:3c:c4:f7:29:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=0f945c55effd1170ef041ceddb5abea8aece6368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:6e:12:f9:05:60:09:61:f1:7d:27:7b:76:
8d:47:55:51:e2:ff:d9:0d:85:59:11:ce:34:2b:de:
78:5a:50:0f:bd:77:d8:80:d7:e2:15:92:08:9d:b3:
13:df:af:df:d5:3a:ea:a9:17:1e:30:89:52:d2:8c:
5e:1b:81:c5:31:70:e1:1d:e1:fd:15:30:9f:e4:02:
1c:c9:6d:3b:0a:e5:45:09:3d:b3:7e:52:a5:e0:d7:
c0:88:11:a5:78:9d:31:67:aa:b7:1f:67:db:27:53:
28:e2:94:72:de:ad:22:01:88:17:6b:dc:7e:16:d9:
aa:ad:60:2b:38:44:95:09:a8:2c:80:da:84:1f:0b:
32:b2:64:d5:3e:b6:38:0f:8d:23:8e:49:41:0c:fd:
a6:02:ee:a2:40:14:b1:25:5c:4d:de:79:e1:cf:b2:
a6:75:30:da:22:85:77:41:12:ec:36:18:4f:f4:8f:
34:e4:43:1b:68:47:16:05:7a:d8:4c:c4:11:74:28:
64:6a:19:a2:88:61:58:c6:52:c7:c7:74:0f:5e:17:
d5:ef:1e:95:e1:f2:c0:99:9c:a5:30:6a:96:38:dc:
ca:14:95:30:d6:3d:1d:6b:b3:f6:7f:10:37:0a:d8:
49:4c:30:c1:84:b7:c4:03:2a:4f:91:33:63:71:11:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:94:5C:55:EF:FD:11:70:EF:04:1C:ED:DB:5A:BE:A8:AE:CE:63:68
X509v3 Authority Key Identifier:
keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:34:e2:e5:4e:32:cd:54:3c:b1:c0:e1:f9:a6:33:eb:fd:be:
3b:d0:42:59:ac:52:cf:ff:fd:aa:87:54:3b:be:b5:50:7f:3c:
d6:f2:ef:38:8f:c2:33:53:fd:bf:c0:e2:da:10:55:dd:8f:41:
b2:fa:26:9b:f1:0a:49:6d:92:58:97:a6:54:9d:18:a6:59:59:
64:b6:14:49:1f:42:c6:f7:e7:fe:15:f4:77:18:06:d5:06:e9:
7c:2a:bc:15:c7:92:0c:a6:18:58:9a:73:0d:a0:b6:fc:f3:7f:
c8:ab:6e:41:aa:38:8e:e0:42:7e:96:c0:f8:42:6b:fd:6f:2f:
6b:db:5a:ca:89:5f:be:d1:da:ca:ba:71:90:45:b0:7f:9b:49:
86:ea:71:0e:e5:cb:7a:5f:f2:fa:c3:ad:3e:c5:e1:02:7c:7c:
a1:9b:3c:59:59:ca:01:91:36:c1:a1:30:0b:a0:95:8b:ce:df:
20:68:f4:29:35:d8:2f:28:28:67:85:cd:19:a8:6a:d1:9c:23:
97:91:b5:f0:9c:8d:ba:8d:e0:a3:20:3b:df:44:b5:b7:6e:c1:
19:46:41:b1:ec:28:b3:c3:35:27:12:3e:4d:96:ef:ae:b9:b2:
01:e6:ad:ef:a6:53:4f:f4:4d:42:d7:95:05:b7:49:56:04:12:
43:fd:07:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:23 2025 by rpki-client