Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File: bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier: BotlzP6a1A/vuf/Y02UyV9Lcx5b0jsRVijrOEy0ca68=
Subject key identifier: D9:F9:A7:40:77:35:17:02:9A:99:06:EE:FF:0A:90:4B:81:20:DA:38
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 0194BCE06F4DB6034D4286E4651041A1317D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number: 0525
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: LRy1Su2fWLwjRlXSpxKiN2HsmOE.roa (hash: VbIoxvhdv4Kz4zlYMs8a+1GTnDDa2PQSnpokMmTeNJI=)
2: MbTvipFbe-Fro7yGscX94j34OpQ.roa (hash: lGgg0U/FzBropaPivoqmUVqyNKPQ65NR2i0gu4fF2i0=)
3: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: DnDlebYPxQsnXoru/QIwE5myovGoajzae1GnjWsILBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6f:4d:b6:03:4d:42:86:e4:65:10:41:a1:31:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=d9f9a740773517029a9906eeff0a904b8120da38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:44:28:1e:02:c4:7c:47:03:5b:77:df:ca:
8c:6b:44:14:05:ff:f5:13:fb:8f:40:54:57:81:c4:
85:6f:8c:5a:59:66:ad:af:1b:7d:90:61:6e:b8:c5:
0d:0f:e9:f0:8e:f1:28:7e:63:ff:79:56:eb:8b:ef:
51:27:1e:40:20:c6:12:63:ee:b5:f4:25:7f:d2:2a:
44:2e:bb:61:0f:4c:08:dc:51:4f:b2:84:d7:50:cc:
bb:39:97:86:fc:09:9a:64:ba:bd:7f:3e:96:7c:76:
ba:65:2a:28:5e:5e:3f:64:31:ad:3c:4e:e1:36:14:
88:8d:5a:da:6f:88:c6:35:24:21:95:50:11:aa:ef:
5f:2c:95:1d:df:46:aa:ae:ad:c2:12:92:74:45:11:
0b:1c:1c:cd:bd:6b:9c:5e:2e:4f:fc:7e:54:85:1e:
34:d5:9d:bf:07:ad:aa:cf:0b:d2:bd:a2:76:1b:23:
b5:c0:1c:ca:b1:9d:ee:f4:ba:f0:45:88:0f:8d:21:
bc:14:28:16:02:aa:ac:4f:de:f2:6a:16:a1:5c:b6:
79:c3:e2:f5:0d:aa:a0:f2:ba:2d:f7:29:e7:f3:58:
bd:08:50:4e:81:fd:26:c7:d1:fe:1e:83:55:39:7f:
a9:f2:26:89:48:65:55:71:37:6d:e2:83:0e:c6:63:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F9:A7:40:77:35:17:02:9A:99:06:EE:FF:0A:90:4B:81:20:DA:38
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2e:22:bd:41:02:2a:c8:f7:2d:32:66:3e:2a:66:07:a9:91:
76:a4:58:b9:a0:ab:ec:77:9d:5e:31:5b:97:be:95:2e:8f:68:
d3:d1:69:fe:89:42:d1:87:d4:7d:82:94:df:0f:ed:3c:f7:37:
39:fe:5c:cf:ba:c5:9f:da:15:f1:8f:5d:f9:b2:e3:3f:44:dd:
c7:77:af:ae:82:f7:57:9e:6d:5b:26:1e:22:ce:66:8e:e8:7a:
ec:8e:49:bd:68:ad:13:2c:f8:cb:06:4d:c4:e3:cb:29:ba:ea:
7d:51:00:44:68:e2:23:d1:70:05:48:14:b6:d8:5e:0a:3c:b9:
41:22:9a:45:af:47:76:da:1a:bc:4f:ca:75:02:06:33:11:67:
26:44:a8:0c:b4:10:4b:cf:97:08:bb:a1:21:5f:86:82:6c:cc:
ab:69:76:cd:87:c9:0b:a3:d6:07:e2:f2:95:bb:8a:c0:52:dc:
fe:48:f3:b2:a1:32:c5:5a:1f:25:72:37:10:f2:6e:e6:df:58:
f4:19:40:a0:39:37:7a:ba:2d:d6:19:0f:b7:f3:58:67:37:57:
63:b8:24:e1:c5:b9:fb:68:54:07:54:a5:0f:51:ad:a1:94:c1:
01:22:3b:e6:4a:ea:c9:70:f7:b7:d3:83:f0:24:60:af:05:9d:
c9:e7:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:02 2025 by rpki-client