Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: T5chey/4BaI/G29yPqgXEida2s6L3MdZ/EvV8DRmafs=
Subject key identifier: D2:C9:F1:11:30:E4:28:36:CB:78:D3:12:07:D8:98:58:3E:A3:91:D1
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 0194BCE0DD0A124674D9B3540608D50E2F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 07A9
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: 1uAuKLt072-ZQlDEaEvJ4cVZt0U.roa (hash: VxasM346e46c28SKyluMBsYSF6rJX7VQBKo0/PUfiM8=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: ofOPguIC4eSSyPl0caPxeF78v4BJQ2f13PDzqn4fOKQ=)
3: FOTPh9BPoJbjEvO_XqYw0Ecj8wo.roa (hash: Tk8RIwgbHfyEByRiqFBz9C7JpjarILl3F0YIF0cWF/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:dd:0a:12:46:74:d9:b3:54:06:08:d5:0e:2f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=d2c9f11130e42836cb78d31207d898583ea391d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:d8:7d:1c:c2:21:ee:8f:84:34:92:2e:fb:
07:fe:99:f6:63:34:ca:33:72:0f:6d:4f:29:55:f8:
b4:6d:77:47:7d:b1:8b:71:35:27:2a:82:24:b8:09:
06:e1:b1:3e:46:ab:6f:d9:ba:91:52:65:92:c0:04:
92:db:e3:85:c2:70:70:20:d5:5d:49:35:27:e4:2e:
4c:ae:c9:60:72:b4:c2:8f:18:c2:a4:28:f0:21:6b:
a3:9e:13:a0:ad:b7:27:46:a5:16:96:93:dd:d1:3b:
9d:6a:03:55:aa:fe:c9:5d:cb:d3:d7:9d:79:2a:67:
4f:18:92:a4:09:f9:81:ce:56:ae:8e:1a:c6:3a:7d:
04:94:15:71:7c:f7:21:b5:2c:53:cd:57:e4:31:20:
fc:22:be:3e:3b:76:ad:bf:73:00:a2:c0:5e:b1:5e:
2d:8a:0a:0c:41:d4:c5:92:6c:95:7d:e9:76:57:ea:
00:e5:ce:aa:50:07:f1:6b:f5:45:0b:13:2f:65:dc:
65:a0:17:18:65:45:6a:5c:44:32:99:e2:8c:49:be:
63:8d:77:da:e6:f9:b2:3d:f7:58:19:69:73:8d:ab:
04:de:14:c5:7d:5f:fd:0b:57:60:f1:f8:d2:ef:d1:
74:6d:94:c6:4e:4f:7a:51:a9:93:39:71:7f:91:03:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C9:F1:11:30:E4:28:36:CB:78:D3:12:07:D8:98:58:3E:A3:91:D1
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:16:76:b0:3d:52:a9:70:18:d3:d5:ba:ad:2d:20:88:01:4c:
0d:85:d4:d9:5e:5d:58:69:37:77:f4:52:0f:9f:82:fd:88:ad:
1c:76:b3:05:50:37:1d:19:e4:46:4e:01:d2:f1:39:1a:c1:76:
dc:bb:0e:eb:f3:06:8e:41:ba:2b:13:7c:b6:be:c1:e1:bc:54:
47:8f:74:45:17:1d:0e:55:c9:83:ee:63:d7:fd:2f:26:2d:a7:
ee:42:05:4c:f3:85:1f:5d:a5:dd:5b:c2:33:91:9f:d9:19:52:
1e:0f:5c:16:0f:3f:36:55:b4:c6:67:ef:a1:8d:26:25:28:92:
35:61:31:4e:e0:de:21:82:90:f5:96:14:0f:7a:73:8f:44:f3:
1e:47:47:78:77:94:17:96:00:79:a0:e8:5e:da:74:d7:a3:17:
74:59:b9:9c:ea:a0:c6:99:75:2d:da:58:23:d2:53:d2:2c:7e:
d2:b2:42:76:1e:4f:a9:39:a7:1d:65:93:f6:52:f5:cd:fb:4f:
23:2f:d1:3c:2d:9d:f7:34:b6:88:7a:ac:83:8d:c1:33:ea:ed:
90:41:c2:fe:17:a7:fb:de:0a:32:5b:b5:4b:4d:14:66:20:6a:
c9:3b:61:93:91:aa:1a:cd:7e:20:11:f4:94:58:4c:fd:a9:b0:
eb:4b:36:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:52 2025 by rpki-client