Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
File: bkCd70qKicqI9XGCxS7W1w-5GXY.mft (raw, json)
Hash identifier: JYBVPA6G6gnYaaoFxy3rJmsvkgYRVrOa26AxrJa1DQE=
Subject key identifier: C8:01:1F:CF:12:8B:25:40:67:AA:A9:C8:3F:52:CD:29:C4:D9:8B:1E
Authority key identifier: 6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
Certificate issuer: /CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Certificate serial: 0194BD8566AB22AEC61B642085CCE031EBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: 1-OsNCAIB8BtnJpCmSk5vs9AfqRw.roa (hash: rov7VSnSSae/bJ4kPmKmJWJ9MKvyKBsrk/qcPi6/iFE=)
2: 9J9PrXmCNB--oR4MRGOzZcKbWlw.roa (hash: 8ukYcG1/HqvKX0B3kiFSlIN1cfw+XxyIB9UHL+2qKP8=)
3: bkCd70qKicqI9XGCxS7W1w-5GXY.crl (hash: jWIwzjtSG0jzwafaw9sZiLbH+QN4Ws29hUWGNLELlZo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:66:ab:22:ae:c6:1b:64:20:85:cc:e0:31:eb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=c8011fcf128b254067aaa9c83f52cd29c4d98b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:d5:87:b9:29:5d:64:17:0a:f3:fa:34:9b:
87:9b:bb:76:06:de:9e:6b:58:60:cf:86:89:ed:47:
b0:1a:b4:68:29:17:71:de:2f:b0:b8:2f:57:02:4e:
67:6a:14:b5:2a:0c:f9:5a:fb:03:87:d3:6a:67:b9:
48:64:ae:d2:94:8c:e5:3d:f4:b0:83:36:bf:bd:a7:
69:e1:f9:a0:2f:8f:4f:8d:c3:c9:30:cd:62:ad:37:
e0:9b:07:e1:9b:61:76:10:8d:cc:ca:6d:b0:1e:9c:
3a:26:ae:23:e1:83:57:b9:72:c7:1a:77:de:e8:5f:
2b:cc:d5:1c:b7:64:4d:47:aa:d7:c5:4f:7c:23:33:
b4:89:50:ae:31:d2:a5:95:50:5f:aa:e7:b5:a8:f4:
68:3f:5e:7f:bb:b2:82:23:c1:45:c6:e7:ae:1b:f1:
f8:99:9b:2b:78:c2:99:21:40:81:44:5f:37:09:7b:
41:3a:fd:e3:58:23:b9:27:f4:57:d0:c1:24:0b:bb:
28:8a:bd:92:00:31:a6:0f:e1:64:8b:e9:60:21:98:
7f:6b:84:f5:b9:07:d8:bb:96:ab:b1:2c:ed:18:0a:
41:5d:c0:f5:1f:a0:24:7d:ac:66:fb:9a:82:af:b7:
8b:08:5f:b3:eb:f4:f5:66:7a:79:9a:6c:1e:15:5b:
da:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:01:1F:CF:12:8B:25:40:67:AA:A9:C8:3F:52:CD:29:C4:D9:8B:1E
X509v3 Authority Key Identifier:
keyid:6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:54:88:aa:1b:9c:18:83:00:8f:78:88:24:0b:93:de:e7:0b:
5a:41:4a:94:14:f3:ef:7e:14:7b:c6:a5:d7:76:b8:6f:09:14:
24:8d:23:cd:71:dd:44:c4:af:10:24:06:b9:89:de:f2:51:cb:
60:76:f8:8d:dd:67:4e:cf:90:ac:64:9b:cc:5c:36:74:1e:db:
21:0e:9c:10:83:47:a4:9f:25:44:e0:47:3f:d7:08:35:d5:2c:
d6:30:1a:34:e2:bd:d2:e8:6f:aa:37:a5:71:58:c0:4d:74:c0:
ef:79:1b:a5:3e:af:9a:ba:d4:aa:08:0d:e1:b0:6d:ef:60:af:
f6:45:fa:fa:2c:e6:2f:d0:f8:d6:ca:53:42:28:75:0e:be:54:
4c:a7:9d:92:ff:b2:cc:93:1e:2f:c4:ab:37:2a:3c:ef:2d:30:
fd:91:bf:50:72:52:97:6c:16:93:0e:99:ed:06:40:3e:71:10:
e2:25:0d:0e:97:e7:c3:c5:17:3e:88:76:05:85:6c:8c:24:1a:
ee:e1:a5:fa:f2:6f:64:5c:39:00:2c:da:d4:56:b4:df:53:06:
c2:6c:e6:d9:55:78:04:75:4e:e9:2d:8b:ff:f1:ec:8f:d9:e7:
c7:d9:a5:8e:2c:54:86:34:0c:c9:c5:10:89:43:1d:85:3d:f0:
0f:c8:b0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:33 2025 by rpki-client