Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: yPOOpyvKwTo/HXSzdKpMDJ4IQAa2giN0Op9/SKkrBEU=
Subject key identifier: A3:AF:3B:1F:FF:A7:2F:DB:54:A5:D5:C8:F7:EA:41:F3:31:F2:79:D7
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 0194BBCEE16BCD5383C9BCF565036059B63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 1297
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=)
2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=)
3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: j1KfSSVabi5I5T2hXac9wKTwdD+uJAyu9rXbAFGF+7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e1:6b:cd:53:83:c9:bc:f5:65:03:60:59:b6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=a3af3b1fffa72fdb54a5d5c8f7ea41f331f279d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:a3:bf:69:14:27:a3:a2:4b:6f:9f:40:1f:
13:8c:8a:b9:db:e9:f7:e7:c4:e7:11:3b:a9:fe:82:
dc:9d:d6:04:4d:2c:2c:d6:d5:12:f0:9c:ed:2c:62:
b1:21:35:1d:ea:a5:cf:5e:d0:9f:99:a8:fc:79:af:
81:29:e5:e9:3a:fc:71:65:ec:3a:8b:a5:f2:5b:9d:
23:0e:c8:20:e5:fd:ad:aa:d8:19:ae:8b:a0:58:59:
d9:d8:64:c6:15:bf:70:e1:9e:9a:59:46:e1:c0:6c:
44:10:d2:99:9e:fa:ca:0e:dd:52:58:dc:e8:f7:08:
0f:34:dc:e8:7f:20:70:10:f4:5e:25:c6:1c:66:6f:
bc:f6:2e:76:b8:47:b5:22:4f:f2:59:b7:5f:73:bb:
75:d8:0f:62:df:35:0f:30:88:b8:4e:ed:03:b1:13:
70:81:01:cd:cc:33:5b:37:6e:9f:3b:64:30:c4:f9:
ca:4b:b6:ca:c7:d4:2c:33:1c:de:5c:0f:56:8e:8b:
cd:e6:bb:59:f5:97:d7:53:8c:80:a9:30:2a:c0:f9:
e2:93:20:63:1e:47:89:0b:2e:79:00:3a:b7:16:8f:
a8:a1:91:43:eb:ec:1f:b9:92:de:d9:ee:c8:40:2f:
b7:26:e9:df:11:2a:0f:15:02:b6:d7:19:b2:2e:2b:
8d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AF:3B:1F:FF:A7:2F:DB:54:A5:D5:C8:F7:EA:41:F3:31:F2:79:D7
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:47:c6:48:1a:e3:7e:43:d0:f0:ad:b7:06:71:8c:a4:dd:4e:
ce:03:7c:d4:79:7d:44:7d:bd:12:7e:fa:85:04:6e:87:64:4f:
de:15:4f:46:b0:5a:d5:12:ca:9d:c2:6b:7c:67:d6:d1:0b:12:
ec:a6:70:5b:e5:e2:38:fa:3a:58:3e:a2:87:2c:79:77:1c:cd:
4a:4d:45:e0:e1:61:40:2d:58:e1:2f:89:25:83:15:a9:9a:a6:
43:43:71:34:88:0c:13:f2:98:d6:cf:2f:73:bd:e8:db:cc:dc:
1d:ec:27:41:04:39:b0:75:f9:09:6a:46:67:35:f4:00:ae:53:
7a:2d:d8:69:cf:87:1a:5a:fd:28:f5:7b:6f:9d:21:0c:f1:83:
d2:59:89:87:f9:a8:eb:7b:9d:ad:dd:8e:c3:0f:38:2a:bc:ba:
d0:e7:df:48:37:62:1c:e5:00:f5:fd:93:10:42:84:fd:9f:b2:
43:ad:78:fe:a8:79:47:4e:32:1c:0d:22:7b:c8:37:12:db:af:
b6:05:59:60:49:71:f7:d4:51:1b:95:84:8b:93:7e:e0:22:a3:
d0:c8:e6:1b:8d:2f:8f:50:10:ff:fa:d9:14:61:b2:3e:82:97:
bf:6f:b0:4e:db:b3:47:00:cf:3f:5f:1f:b9:20:4a:93:08:0a:
3c:5d:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:26:33 2025 by rpki-client