Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
File: u76WEtFEC8bHBOBGXw711spzl6Y.mft (raw, json)
Hash identifier: fem5laQy4g5xb3SwKdG3oYb1o0G9EIbLgadTwmSes20=
Subject key identifier: 92:9F:8A:85:9C:09:1A:A9:CD:A3:4F:FF:EA:10:26:67:D4:C3:63:BA
Authority key identifier: BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
Certificate issuer: /CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Certificate serial: 0194BCE06D4BA52DA9579D21BA3FA6554EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: D46VMQb05uTNgl5dbNVDFYzDjzE.roa (hash: V0B6OmfcULHphu50p4sAuyLvveC3GQAGdFvTao1f9Y8=)
2: u76WEtFEC8bHBOBGXw711spzl6Y.crl (hash: 0g4DuRqACZwWZccNdxd5uIRVSQpmtDDGhXlgS9+syUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6d:4b:a5:2d:a9:57:9d:21:ba:3f:a6:55:4e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=929f8a859c091aa9cda34fffea102667d4c363ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:4c:84:90:51:4e:dd:11:3f:c3:b3:56:cb:
e8:61:5b:92:15:17:b2:61:ed:53:6d:40:d3:45:b4:
f9:a9:1a:6d:f7:a4:6d:52:a2:6e:9f:61:ee:e9:aa:
9d:17:a0:3a:1a:6b:b2:ae:f0:c4:26:cb:ea:7d:94:
05:19:ee:fc:d6:29:10:93:25:6c:a1:f0:9e:1f:96:
29:48:9e:5e:33:bf:cc:64:53:01:fe:d4:03:cd:b4:
4a:3a:8c:b7:ba:46:57:7b:85:a7:3c:f5:e6:cb:34:
25:cf:3b:83:d7:22:f7:25:e3:8b:5a:e6:9f:48:b9:
de:77:b0:d4:52:9c:de:12:b8:81:45:c3:5a:22:c1:
13:41:aa:ae:c2:5f:9b:83:9c:45:75:61:b2:07:5f:
43:12:81:9c:2a:77:f2:88:da:e8:cf:f3:4e:05:9d:
dd:3c:1e:d8:84:61:ec:53:9f:87:de:e0:08:ae:64:
a0:be:6f:a2:83:89:58:01:c5:7c:fa:9a:32:b7:83:
46:cd:00:13:36:18:46:0c:47:41:2e:32:5f:c8:54:
3f:41:f6:50:92:fc:5a:13:3a:ec:7b:05:bf:d5:8d:
cf:69:0d:6d:2c:90:ea:7f:11:50:a3:21:94:15:a4:
c7:17:ab:46:5f:7b:9d:80:af:95:2d:b5:b4:a7:4e:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9F:8A:85:9C:09:1A:A9:CD:A3:4F:FF:EA:10:26:67:D4:C3:63:BA
X509v3 Authority Key Identifier:
keyid:BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0e:0b:4e:57:ee:d2:e4:21:24:39:3c:f1:2f:d4:c8:14:e2:
a1:2e:a6:c8:2c:eb:04:b0:e3:ec:0f:65:e2:90:e1:c0:46:68:
8d:9f:0c:21:07:63:b2:64:81:8e:eb:ee:4e:b9:71:fd:f0:69:
1e:12:a3:c0:01:ff:72:48:bf:8c:b5:5c:cf:3f:63:d2:43:a5:
29:fb:06:70:40:96:70:15:3f:3d:61:a2:58:9f:c5:8c:c3:5e:
44:e6:a7:a1:0a:ca:c3:3e:d9:bd:8c:1b:46:ae:25:16:df:f0:
02:36:9f:dc:0f:d7:ed:13:65:05:d8:72:cd:f8:1a:27:db:5c:
33:4f:0d:3b:b9:83:d0:96:ba:30:99:28:68:31:a4:13:e2:fd:
8d:e4:83:63:6b:f0:82:55:f7:3f:20:ca:cc:d5:57:9b:56:35:
b2:3d:27:8b:af:a8:a6:93:06:b0:8d:2e:b4:3e:fb:ec:14:dc:
d5:a3:72:37:57:ba:0f:b1:58:98:98:f0:4b:ab:fa:05:24:31:
f5:b4:8e:55:25:45:8e:cf:a4:fe:6d:94:db:87:9e:a3:53:e1:
de:3d:c1:2b:5d:f6:ef:ba:5c:17:c2:dc:4f:fb:b8:e6:41:a0:
e7:60:4c:9f:b6:b5:e8:37:36:e8:47:a9:5c:32:40:29:63:29:
16:7d:e8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:16:22 2025 by rpki-client