Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
File: bFMRpXzPy1E1Jh_zm9GaEV7z588.mft (raw, json)
Hash identifier: XIxtDm01r2YhBnMar5z9ugyIV4jZpIaaISpzRLVDscU=
Subject key identifier: 16:8D:09:91:D7:60:6A:7D:AE:32:BE:C4:88:03:41:60:71:7E:8F:85
Authority key identifier: 6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
Certificate issuer: /CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Certificate serial: 0194BC728FBEC512A007B9C6AF4F8286EEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: YJycfGdeJ164QrjQ89Pquxal_pc.roa (hash: fDEXe9y2Vppryd4ojiqVG2aN2es1Vh/q/2xftzkXWbQ=)
2: bFMRpXzPy1E1Jh_zm9GaEV7z588.crl (hash: 4V7QvfBcGVYGFMbm0x/fYEbKTyxaqKK6ALeto8+b6KI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8f:be:c5:12:a0:07:b9:c6:af:4f:82:86:ee:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=168d0991d7606a7dae32bec488034160717e8f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:d1:79:87:8e:b4:88:ea:ae:81:c3:6a:3b:
56:d4:bc:5c:20:63:7f:86:e7:41:34:73:ae:19:5c:
90:32:d6:41:01:ec:06:7d:e2:e9:bd:50:07:af:32:
82:10:b8:da:c9:0f:48:8a:55:4b:4d:90:aa:db:ec:
62:02:90:34:f4:ba:93:0c:20:01:06:7a:fe:cd:af:
8f:2b:1e:a0:83:06:f6:69:49:0a:7b:87:4b:bf:e6:
ef:40:2d:9d:b3:04:eb:d2:c7:77:4d:e4:20:ef:58:
f2:e2:ab:b4:c7:d6:be:27:f4:79:d7:46:7b:5c:8b:
93:da:35:e0:d8:67:28:61:b5:2c:fc:4d:0a:0c:b0:
cc:15:53:c0:69:1f:49:81:75:af:08:f1:bf:f6:e2:
68:13:14:f4:53:45:6e:68:cf:4e:f9:5d:95:92:a2:
cd:f5:ac:3d:ae:f8:67:64:ef:7a:ef:b7:6f:cc:80:
fd:b0:73:25:42:a7:d3:72:de:07:9d:ee:fe:ff:fa:
d8:bf:34:2b:f0:0a:e0:93:df:cf:f5:b6:96:89:d1:
21:06:b2:4a:94:7f:42:00:59:36:46:66:7b:33:4b:
15:65:ce:8a:0e:09:96:1a:b1:fd:a5:88:02:3c:ed:
59:19:42:eb:4a:49:73:a1:14:31:96:cb:e8:29:27:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8D:09:91:D7:60:6A:7D:AE:32:BE:C4:88:03:41:60:71:7E:8F:85
X509v3 Authority Key Identifier:
keyid:6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fc:db:e7:e4:1d:d9:2e:58:af:01:f4:7a:90:ab:50:53:3b:
a7:50:3e:01:1d:f7:d3:bc:f4:7d:6a:1a:e0:c2:42:8b:cb:14:
33:94:6b:c9:8f:06:f0:94:b9:29:80:f0:0a:5b:20:cd:ef:e9:
ac:1f:5c:ed:53:67:bb:13:f9:12:e8:2e:9c:61:89:ad:39:02:
27:df:08:e3:23:39:b0:76:2b:11:e6:87:69:26:47:8f:16:0e:
5a:a2:ad:6c:d1:48:f3:22:26:21:a5:d7:21:b6:e7:41:38:ee:
2a:59:ce:7b:96:ca:c2:e4:65:7d:44:cc:64:e3:45:f0:85:26:
d3:a0:d0:b2:af:e1:25:8e:a8:d3:9c:1b:9a:21:04:6f:3e:a8:
ed:e3:6a:ff:9f:39:73:16:28:61:6e:8c:b7:61:5b:a8:ac:cb:
92:6a:96:f6:1c:ac:1c:e8:a4:f3:3b:44:3b:9e:d8:92:f6:55:
c9:11:d1:93:1f:8e:69:9b:02:c3:b2:41:bf:02:6b:be:3a:6b:
ff:ff:09:6a:6c:1e:9d:8d:e2:86:e7:90:1a:65:7e:af:1c:7f:
0d:ba:f4:be:e5:5c:ed:c5:05:93:a1:d1:85:2f:f8:3c:cb:df:
3e:c2:06:46:db:47:ba:52:c9:1a:56:ed:b7:ee:f3:b7:c7:86:
bc:91:f3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:19 2025 by rpki-client