Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File: bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier: 2l/LwNgVjpBWb8m4S/ifknbu0zDZQxKMp6eaMJmc4VI=
Subject key identifier: 29:64:01:6E:31:0C:75:D7:F4:29:D8:76:CA:50:AA:A4:94:85:3D:04
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 0194BD85735DEB966BFCEFB1275F25685BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: 4ZrViR6MQ2LLwx-EpgYcmNOkhLU.roa (hash: CcPs0/7vgqCna/xx+mVGMJUsG3faAZo8Ob5SJoRyZWw=)
2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: mfBw8N+vNiKayvIxq+17ZFNGKxGWzvIcpExRtM3YYkg=)
3: rUMFzM_6Km-2DqJ2YTtdSrWtUek.roa (hash: abXfjUUyhIhLutP9c/7/Y4Znd/9ps5Twdqn7uTEich0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:73:5d:eb:96:6b:fc:ef:b1:27:5f:25:68:5b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=2964016e310c75d7f429d876ca50aaa494853d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:7a:f6:87:77:31:f7:71:8a:95:48:45:8f:
f3:de:8b:c2:98:09:87:2e:5c:9d:1e:1d:48:d8:02:
91:4a:b8:be:9c:86:20:69:1e:23:2a:f9:d1:e7:f6:
eb:81:9e:01:98:c9:2c:da:7b:d1:0b:bb:0f:18:6e:
2d:08:4a:6a:46:c4:e9:e7:b0:f1:67:b3:1d:da:1f:
8d:34:14:db:b9:f9:08:b4:a9:8a:30:08:26:ea:14:
e3:c6:c2:36:e0:1e:9b:05:63:44:98:1d:f6:f9:78:
05:b2:64:29:a6:37:c5:2e:70:81:79:4e:8d:50:a2:
dd:da:33:be:c3:ac:53:12:77:7f:ac:79:70:af:6c:
8e:04:2a:63:09:68:11:11:fc:3c:1b:a4:3e:ea:76:
fa:8a:e9:92:a9:8c:9d:fa:8c:64:e2:e8:3e:67:e0:
fd:03:ce:86:01:fa:a7:41:ed:c6:74:09:00:59:2c:
68:55:73:89:98:38:c9:f1:f5:39:c7:df:55:04:78:
f0:88:3e:73:93:bb:d1:37:8e:f5:aa:e8:0e:1e:e1:
7e:68:67:ca:8f:b4:b2:21:15:86:97:73:09:98:5d:
49:2d:2c:3f:0f:b0:f1:b7:33:ce:be:e1:fb:36:41:
68:a6:51:83:36:4c:20:e7:a2:ef:b0:8a:d8:36:e2:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:64:01:6E:31:0C:75:D7:F4:29:D8:76:CA:50:AA:A4:94:85:3D:04
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a5:83:c9:0a:d0:07:8e:5f:db:f1:bc:f0:f6:10:c6:b9:5b:
f1:5b:8e:b4:7c:6f:80:84:73:81:c3:37:c4:c8:49:e7:fe:73:
1f:44:ba:cc:e2:69:dd:e9:bb:f1:ba:63:35:8c:49:82:8c:67:
95:bf:b6:e9:57:76:e5:22:2c:6f:f5:7a:0b:89:cc:02:63:53:
11:7b:08:f2:1e:1e:be:d2:ad:7c:d5:58:d8:17:cf:6e:72:2b:
9a:58:3f:e7:c7:f6:9c:6f:4a:fc:26:46:df:5a:d3:5d:6d:c4:
76:0d:ab:86:13:5f:6a:ae:54:3e:a7:60:93:60:60:7f:11:0f:
2f:4f:dd:d1:30:e9:10:90:20:60:07:4b:a9:c1:17:ed:73:8e:
fa:8f:eb:a5:dc:da:71:2a:03:f1:64:fb:a8:3f:4b:73:0c:96:
3d:e0:31:63:12:ab:cd:15:81:d7:53:c9:e3:ed:3c:5c:32:da:
c9:2d:bf:10:cd:58:65:05:22:e0:e1:d8:a0:a3:23:6a:db:d0:
a7:a9:4e:49:ef:38:bc:db:9e:f8:f8:6c:4e:3c:99:b1:5d:28:
c5:6b:ae:d0:00:b0:a3:0d:f5:f4:02:6b:2d:c6:a2:38:3b:e9:
14:e9:bb:c5:90:34:dd:08:98:2a:27:7c:cc:20:29:00:e2:eb:
b1:a6:3d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:33 2025 by rpki-client