Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
File: bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft (raw, json)
Hash identifier: NSTLXwqfZoR/LmWp867wu8ThGIFYCZKpGRkLXKy4uq4=
Subject key identifier: 30:36:44:64:0F:46:89:04:4C:D9:BA:AC:11:DC:33:84:3F:9A:38:1C
Authority key identifier: 6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
Certificate issuer: /CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
Certificate serial: 0194BD852E7101F853BF2EDBE8B11D3967F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
Manifest number: 076F
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl (hash: 3LxPqodx3roNp7IBZxi5ZCy52yTfWnqmYtBwE4O1ATY=)
2: xfilALq9xVm7LJX_uaRRDqm1ZX0.roa (hash: o3xsXXS0G1bR6xk5CmXK470ksv+YeZHYJ06DDMgu6J0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2e:71:01:f8:53:bf:2e:db:e8:b1:1d:39:67:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=303644640f4689044cd9baac11dc33843f9a381c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:56:94:da:6d:45:9f:0a:cf:ba:eb:5d:bc:
d9:73:3c:72:ae:86:44:90:5f:f3:74:42:f2:ec:99:
7b:c5:b9:49:4e:67:09:2b:c7:93:9b:a6:a1:85:dc:
e3:92:8d:77:8d:0a:12:6d:4d:a6:23:a5:92:86:41:
59:4a:20:ec:b4:63:ac:17:b5:70:5a:da:41:0e:ad:
31:0f:9c:99:02:06:f5:7c:95:10:c8:f5:9c:51:63:
6c:f4:9e:14:70:e1:0f:67:2f:23:dd:16:e8:8f:75:
20:12:3a:00:19:38:39:2a:18:6e:5f:49:da:1a:e4:
03:2d:7f:b2:ea:5c:47:2e:5b:81:14:61:d7:38:61:
8a:27:18:1c:ff:5f:1a:98:73:03:da:5d:9b:79:dc:
46:b7:c6:ee:1f:ce:81:09:58:70:10:c3:24:e9:89:
5e:30:3c:bb:5b:1c:cd:cc:e0:c3:54:b9:97:d1:5f:
94:4a:73:44:ec:a1:74:40:28:ae:17:06:3d:93:46:
19:08:59:15:02:d3:03:09:e7:d3:7d:ef:97:f2:e2:
a4:9d:f4:c0:7e:28:bc:17:7a:ac:9a:cc:2b:d4:f8:
70:a9:c1:fc:c1:53:a9:6f:61:2a:78:45:b6:46:bd:
67:c5:29:df:ea:29:8f:93:f1:c1:51:6b:d2:10:7d:
5d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:36:44:64:0F:46:89:04:4C:D9:BA:AC:11:DC:33:84:3F:9A:38:1C
X509v3 Authority Key Identifier:
keyid:6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:8f:50:2a:e8:a6:65:81:4e:70:1e:e8:4d:a2:08:c0:8f:89:
48:34:ac:aa:32:3a:85:87:a1:5b:a8:91:09:a7:d5:d7:de:28:
60:c7:bd:19:cc:93:f6:98:96:71:e1:e5:43:7f:d1:9f:9a:7e:
67:80:40:37:e1:0e:e2:60:2a:81:a3:1e:e0:e3:0b:fc:36:0d:
46:38:80:8c:b9:9f:8e:e4:e5:ec:21:b9:8d:44:c1:4c:7e:66:
6d:78:ec:63:d8:a2:1e:ca:e8:f4:19:f2:16:26:fb:68:20:b8:
9f:d0:4c:1b:29:64:f6:59:49:97:94:93:c1:fb:56:71:8b:0c:
71:35:6c:db:f4:2e:41:8e:d4:21:08:b3:39:e4:9b:29:e6:9a:
08:7a:36:46:da:75:c4:c3:95:d3:06:49:90:08:26:58:9c:05:
a0:a4:cf:9e:2a:4d:b2:28:db:ec:97:33:27:8b:10:f7:50:a7:
2c:50:f6:f1:ef:69:50:71:38:bf:86:ca:53:84:24:13:ce:f7:
ae:55:6b:50:67:1b:02:5f:ed:1b:5c:81:39:03:b1:a7:78:06:
e6:cc:79:22:b1:46:7a:48:d7:a8:5d:00:c3:3f:30:fa:cc:2e:
3f:52:ee:7a:1d:13:47:9b:30:30:36:cc:f2:67:51:fb:5c:b3:
a0:9a:8e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:37 2025 by rpki-client