Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
File: bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft (raw, json)
Hash identifier: 6tC1gNQuZ+/QzvJZhMDt4JAKKgjveLmtpkOpkP0BL2w=
Subject key identifier: 79:93:9B:8D:1B:40:81:17:CD:92:6F:0E:D2:67:5A:C9:E4:EA:79:38
Authority key identifier: 6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C
Certificate issuer: /CN=6d3756d540e5c17f194c45ca4738665d51accb6c
Certificate serial: 0194BC04FD58804794800F20AAC7C13DFA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
Manifest number: 0A1A
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: WnnNCSNbQcMr5ycrnf-3odrRamo.roa (hash: CNZwx9BS6io+5OwCBW8g3opemfIgF6eCFyUvWkBYWDU=)
2: bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl (hash: 2upuM//YhXqCzEmoLZC7+0IfEm00wRID+4X4/sg0jw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fd:58:80:47:94:80:0f:20:aa:c7:c1:3d:fa:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3756d540e5c17f194c45ca4738665d51accb6c
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=79939b8d1b408117cd926f0ed2675ac9e4ea7938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:5e:63:64:39:b8:ca:57:13:f8:e8:03:7c:
1f:c6:62:23:01:c8:5d:6b:20:7c:17:85:9f:48:03:
93:81:f5:a2:bc:90:4c:8b:0a:98:1d:aa:dc:bf:bb:
64:08:d2:a4:f1:72:f2:4f:eb:79:1a:cf:23:b8:9a:
3a:c1:78:8b:dd:39:cd:03:25:c2:fb:b3:3c:e8:8e:
bd:0e:3e:42:d9:a0:76:00:43:42:a2:af:da:b5:ef:
d3:d1:e9:ce:ad:95:07:31:fa:9f:56:0c:06:8d:d3:
1c:e0:6e:59:8c:0a:f4:64:3e:24:11:d6:28:82:6b:
e8:79:1e:24:c2:bf:93:1a:39:56:02:2f:57:44:b4:
53:81:1f:e1:bb:3e:79:d7:82:b8:c8:15:5d:74:9a:
26:80:20:cc:d7:08:37:c2:53:44:7e:c7:bd:de:63:
2c:1d:f1:36:e6:ea:46:a4:07:69:44:6a:49:a5:39:
60:50:bc:32:06:b9:e9:2b:34:8e:dd:95:08:f5:3b:
94:e5:5d:f3:a8:d8:99:47:d5:4a:ff:82:98:d7:ca:
72:96:14:d6:94:d6:0f:c9:2d:ec:8b:9d:33:05:13:
28:02:55:32:f7:23:13:49:1d:e0:c7:27:f5:f4:72:
1b:be:b7:1f:fa:63:38:f5:61:c2:05:6a:b4:1e:fb:
e2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:93:9B:8D:1B:40:81:17:CD:92:6F:0E:D2:67:5A:C9:E4:EA:79:38
X509v3 Authority Key Identifier:
keyid:6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ef:fb:03:ec:04:9b:f5:2b:76:83:04:c5:2f:b3:42:ab:6d:
21:20:6c:0d:bf:d0:63:7c:95:ae:e4:98:a7:55:1c:c4:b2:32:
5c:c0:35:9a:de:3b:4b:16:b0:97:23:46:b2:21:8c:a7:32:e1:
2c:4e:6a:37:df:30:4d:70:94:92:da:ad:96:e2:4c:02:2b:cb:
1c:9e:f1:d6:88:4f:ff:fc:05:ff:16:81:34:17:4c:0a:29:c1:
aa:25:43:c6:75:25:3d:1c:eb:d1:26:6a:b2:94:5e:59:e0:66:
bc:a1:0e:8d:ae:40:6c:76:c6:c8:95:19:fc:ee:70:ca:0b:6e:
9a:33:a1:a4:4b:e4:e0:47:b5:93:06:d6:95:4e:aa:52:d7:9d:
92:31:fa:1d:88:b9:0e:92:f0:1f:35:81:3a:4a:d3:25:ff:dd:
c8:59:70:6c:09:f8:d0:8c:6e:44:ee:af:2d:64:be:7f:88:4d:
b5:45:f2:66:cc:e0:f1:a5:6b:4c:35:c3:a7:34:ad:07:d8:09:
8e:4f:47:2c:4e:0e:31:79:39:4d:7f:8b:36:17:bd:30:0a:e3:
d6:06:d7:30:39:33:36:2a:3b:0e:14:e1:25:fd:8b:76:d0:6a:
da:c1:93:d4:82:1f:58:79:02:93:30:fd:9e:37:b1:bb:c5:78:
8c:12:ed:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:24 2025 by rpki-client