Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier: i1mnNzHvhuEkFlWyduo/KpZy4JDtHszRxe8fiWIHWSE=
Subject key identifier: 5F:39:E3:5A:6C:6C:16:E2:52:C6:3E:61:D8:04:D0:CB:7B:88:90:A8
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 0194BD17B322AC3B0B01E101C4952C237D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: F67gDfZc4Jx2LCZVEE2FihPJzHw.roa (hash: yPyUtL/skPgjKLNjvoKJs7SdqhdnCeGN7LFhVgvBzCk=)
2: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: XeOUv8eE9NVx0J+jqI/yGMwEQ9v1/zMDr+NGJ70leSo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b3:22:ac:3b:0b:01:e1:01:c4:95:2c:23:7d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=5f39e35a6c6c16e252c63e61d804d0cb7b8890a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:44:b0:20:02:84:37:25:3e:49:23:87:72:
cd:7d:64:ca:d2:43:41:4b:71:0d:f7:d4:07:4b:c8:
c8:2c:8a:fb:28:dd:05:01:dc:f3:db:75:c2:24:5c:
7c:dd:ca:25:40:eb:d4:02:dd:ee:92:ec:42:c3:6f:
35:79:29:67:c7:c4:aa:cf:bb:12:3d:3f:73:a2:e8:
08:bb:21:b2:7a:0b:e7:d2:92:8c:c6:16:f3:74:48:
8e:03:b3:af:cf:91:28:e9:3d:6d:53:23:e5:ca:ee:
46:da:0e:11:91:55:ad:3f:59:15:e5:02:2e:49:83:
23:6e:96:22:c7:e5:92:d5:11:be:cd:d2:ef:a8:53:
26:8e:96:2f:6a:41:3f:71:3a:b6:33:d7:d8:73:8c:
c2:c7:c9:44:52:7f:45:c2:29:72:57:1a:f8:6a:16:
3d:48:b7:d4:04:53:5b:87:0e:96:bb:53:cb:05:d2:
fe:8d:9d:89:89:a6:ff:81:c5:2a:22:0d:b7:60:ec:
06:e5:f6:cf:ce:ac:c6:c6:1d:3a:4f:18:5c:25:b0:
24:5f:b1:5a:b1:69:58:55:83:6f:59:10:b2:6d:de:
8d:ff:20:b0:e4:b6:08:ee:01:8e:e4:e3:6d:1e:0a:
05:8d:e5:0e:c2:9b:c4:24:80:2f:fd:ae:d2:fb:ac:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:39:E3:5A:6C:6C:16:E2:52:C6:3E:61:D8:04:D0:CB:7B:88:90:A8
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c8:4e:c0:88:a7:8c:e1:04:6c:59:a3:8e:0b:26:cb:e6:21:
3a:d5:96:a8:31:8c:78:56:f8:cf:f4:9a:57:5e:c0:05:c2:d8:
bc:e1:7d:45:5f:31:db:a6:44:7d:77:90:c4:bb:1d:53:16:51:
ce:26:80:01:8e:c4:ae:1c:ec:c1:b5:32:ff:c7:25:7d:c6:14:
0a:cd:89:36:d6:cc:ca:dd:ca:36:0c:e5:92:6c:e8:f1:b9:1d:
0d:1b:e1:97:5c:38:76:a7:a7:63:ca:52:3f:b9:75:62:42:7d:
ab:04:63:c5:9b:98:d6:5a:f0:2f:42:c5:76:2c:cf:15:62:f1:
eb:a7:d9:42:b4:95:f7:df:c8:3e:67:65:92:9e:e4:e8:65:88:
c8:3d:e5:54:bd:40:94:59:13:d6:8e:74:ca:6e:28:d3:c6:46:
d9:4d:81:95:24:c5:1a:15:cc:98:b8:37:23:ed:93:d0:84:55:
bc:e3:1d:f9:28:03:89:ad:f5:73:6f:a8:8a:d2:93:07:61:ad:
2f:67:bf:02:6f:b2:d0:9d:a0:3a:f3:8f:70:d0:f2:81:41:31:
af:cd:90:8a:8e:f8:00:59:6b:7a:3d:67:12:92:56:7d:21:80:
f9:05:53:df:fd:93:4e:ce:e2:eb:b6:bc:c9:11:db:5b:58:44:
29:ef:98:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:40 2025 by rpki-client