Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
File: bzycduKvxzzO28ngKS_7mfZec1I.mft (raw, json)
Hash identifier: v2Yk9zOvndZUyMkSMXgt60s8OLGABWgbUW8r4e0aNFo=
Subject key identifier: 6F:4C:D1:AA:52:9A:F0:1A:56:2E:52:12:87:B2:30:C1:D3:53:CF:43
Authority key identifier: 6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52
Certificate issuer: /CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
Certificate serial: 0194BCA97CF77ED27ED8CE0C62DEC3623FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
Manifest number: 0B87
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: 0uWLA5mOdiy3OLJeZ1Ov94IOtqs.roa (hash: buxeJp/x66aw9yBb+1kLLqoKDBL9w3efxSEQZ/YnH08=)
2: bzycduKvxzzO28ngKS_7mfZec1I.crl (hash: Zv6+cerNC1RHcv3bmdNAAEamck74PsLIF+UXOb/OT/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7c:f7:7e:d2:7e:d8:ce:0c:62:de:c3:62:3f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=6f4cd1aa529af01a562e521287b230c1d353cf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:8a:a4:3a:41:4f:83:90:53:a4:50:46:23:
68:c2:a4:bc:4c:d5:42:a2:29:06:5f:71:5e:1f:b7:
a6:bb:5a:f3:07:bf:60:89:d4:a3:ba:73:0c:e2:33:
c9:a8:cd:92:e4:b5:14:f5:83:ff:96:73:d2:ea:28:
25:dc:8c:58:d1:be:94:99:01:70:56:d4:64:f5:7d:
16:f1:2c:49:14:97:e1:76:9c:97:0f:ff:b9:bc:d3:
03:fc:d7:71:24:45:ae:a7:6e:33:f4:20:ea:50:e1:
65:a1:7f:99:dc:74:4d:a2:f9:a8:9a:f0:96:28:cf:
c4:ee:f8:fa:f5:41:5b:1c:26:10:a5:9d:57:57:2a:
44:d8:46:d2:0f:8a:af:fe:79:3c:de:87:3a:f9:f4:
ff:16:0b:d0:37:a7:df:d9:52:b0:9d:00:8f:33:36:
b6:d0:57:96:58:c1:a8:33:e9:fd:ba:02:1a:14:21:
43:84:09:37:a7:89:9a:e8:5a:f4:e7:b8:61:c3:a9:
63:39:2a:ae:9d:e4:9e:13:26:7c:e4:8b:b5:4b:c5:
b7:e8:5e:f5:81:6d:88:e0:5b:a9:9b:2a:08:47:29:
fb:d0:c1:1b:62:9d:dc:2f:04:fb:bf:1f:ef:af:78:
fd:de:38:b0:6a:e4:2b:1d:63:9c:b0:98:fd:14:f1:
3d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4C:D1:AA:52:9A:F0:1A:56:2E:52:12:87:B2:30:C1:D3:53:CF:43
X509v3 Authority Key Identifier:
keyid:6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d6:be:77:ad:71:02:da:ae:a8:55:5e:69:7c:73:95:d5:70:
39:28:d9:dc:39:65:c1:45:a0:de:e7:f1:b5:06:2f:4b:40:fc:
b0:b4:59:5c:04:26:2c:6e:76:71:79:d5:2a:48:83:bb:2f:33:
21:12:87:d0:b8:f7:ff:eb:4d:bf:f4:b4:d4:9e:2c:59:d1:38:
98:28:22:2c:7d:bc:50:d0:25:78:73:7f:47:6c:f8:cb:6f:e3:
88:ea:56:31:f1:26:b3:9e:09:9a:2e:8c:6f:a8:3f:c4:ca:ff:
b2:eb:48:1d:82:58:46:a8:6f:02:7a:17:a9:33:46:5b:94:e9:
bc:50:1d:d8:ec:4a:57:69:4a:e5:a1:3c:9e:fb:a1:48:0f:4e:
20:4e:2a:02:1f:30:93:1b:57:92:6f:38:21:f5:16:1b:bc:c9:
92:1a:c1:d3:e2:85:5e:35:6c:72:2e:70:4e:2e:80:f6:aa:d7:
60:1e:eb:b8:7e:ce:6e:50:65:21:40:ce:ad:00:fa:0a:2e:0d:
6c:16:c9:66:22:f2:53:31:18:b1:6b:b7:db:b9:c6:1e:31:0a:
17:2c:2c:5b:1f:8d:d7:ff:e5:e0:0c:9b:4e:6b:6f:0a:ef:e9:
66:0c:aa:c8:c5:3f:0e:b0:dc:5a:9f:aa:5a:18:6c:1b:2c:20:
13:a5:b9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:38 2025 by rpki-client