Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
File: bBAkoL37rZXwEGTVGM9uqWa0SIo.mft (raw, json)
Hash identifier: aW1T6GBRP8922JcqBWBq22EXoMBzPbagk0akdafjeLo=
Subject key identifier: 87:43:72:C2:B2:70:3F:CD:45:63:0E:71:D2:29:F8:A6:10:67:9F:92
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial: 0194BC04F067FEAC5FF048172C6CCA490B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 2jz_GVg3tc2PAmVfZM229I9y7DM.roa (hash: a4U4fdO6/HHzhz/D1fQJsN+9NOOESB95lRB1mTGoD/4=)
2: bBAkoL37rZXwEGTVGM9uqWa0SIo.crl (hash: aFn7jyGcHv+rJPnPA/UDUnSs/Gi16F4gQMibGhv+DS0=)
3: qjQqwaE98pw-Tsc3qccVON2SJQg.roa (hash: y4z4CZUi94ZRWjv9y7p8MUe6n4UJbAQ8c5NqooIEDx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f0:67:fe:ac:5f:f0:48:17:2c:6c:ca:49:0b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=874372c2b2703fcd45630e71d229f8a610679f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:0d:56:1d:b7:3e:f6:6a:92:6e:26:12:fc:
a2:d1:ae:dc:c3:50:10:83:06:a3:d9:72:23:0d:f0:
84:3e:bd:4f:ac:5c:eb:42:00:42:04:5c:4c:cc:9d:
2d:9e:52:c2:fa:81:a2:da:15:c0:5d:7c:73:94:a5:
6f:c3:fa:f0:80:46:07:ff:e9:61:f1:88:0b:75:89:
1e:4e:bc:1d:9c:ab:8b:6b:77:94:06:2d:c8:ec:e6:
69:19:f9:6f:bc:d5:fe:b0:73:46:84:01:5b:f4:2e:
8c:5e:e5:7c:ce:b6:c3:d8:09:6d:17:d1:45:31:db:
35:57:91:b5:64:77:92:6f:77:b6:17:67:bd:67:5a:
ab:15:16:8a:7c:6c:24:ec:ae:2b:fe:39:0f:14:44:
46:c6:dd:4e:f7:89:66:50:aa:c3:fa:bb:50:37:4d:
7e:0a:da:95:2a:99:9d:62:90:01:c6:40:3c:7c:49:
c0:84:9f:47:de:63:59:5a:34:5c:5a:14:74:67:4e:
56:81:aa:82:7b:b1:9f:10:6b:0f:81:23:f7:fb:f2:
7f:6b:68:5f:25:a1:d4:e6:8a:71:d2:84:c4:6d:d4:
6c:03:53:bb:c5:de:6b:8b:cb:d7:f3:ab:f2:be:a2:
6d:ed:0a:67:82:dc:14:06:f0:6a:c6:9d:76:84:61:
4f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:43:72:C2:B2:70:3F:CD:45:63:0E:71:D2:29:F8:A6:10:67:9F:92
X509v3 Authority Key Identifier:
keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:75:45:9b:47:40:22:da:b1:8b:4d:73:30:8a:a6:79:1d:cc:
d7:59:c0:b7:d8:51:51:be:c9:8b:20:ab:a1:16:d6:d0:28:13:
60:b2:ca:84:9b:df:dc:3c:e0:15:a8:0b:1f:02:f5:b7:b2:5e:
af:9c:d4:a4:cf:ea:1b:1c:89:b0:c0:29:71:69:7b:97:96:04:
de:33:a4:9f:d8:a4:d3:6a:f6:1b:28:1e:70:28:36:f2:23:a8:
03:63:1a:c5:ee:5f:b8:1b:6f:4f:c8:5b:25:8a:ab:2d:3b:f7:
d8:db:b0:7e:63:14:9e:11:8d:1c:bf:31:c7:46:96:70:73:ee:
e6:15:bd:04:bb:c0:25:71:9e:b7:50:1e:bc:20:4d:5d:01:ca:
39:db:5b:76:81:3a:19:5d:2c:a3:ba:3f:cb:01:f9:0e:63:0a:
ac:9f:0a:d0:c7:31:46:91:39:00:86:38:bb:65:db:32:59:c3:
76:59:6e:eb:89:e6:aa:c2:e9:34:0e:4b:1a:4f:1a:f0:07:9e:
3b:ee:e4:58:77:33:8d:fb:74:6c:8c:1e:ea:6c:5d:63:68:c3:
9c:16:88:de:12:ea:43:6d:91:e7:4f:5c:23:ad:ba:f3:f9:42:
11:f4:12:74:54:00:4b:55:4e:71:3d:6f:3a:2d:bc:d4:f1:a5:
bc:13:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:42 2025 by rpki-client