Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
File: byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json)
Hash identifier: c2x5XsP0S9imeGICzk7IUA5hbH7OxUI47zzGjkG2aQ4=
Subject key identifier: A5:C4:2C:93:6B:73:81:8E:12:19:3F:C5:F4:B5:C4:1F:C5:5D:03:BC
Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
Certificate issuer: /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Certificate serial: 0194BC3C49F6BD758A9182FD4A30A8555C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
Manifest number: 040D
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: /9mUs/6sibbsNahUZoCwQXnKFVLr14cATMnG2hDunLk=)
2: jcl3DEDvFDbe2n1OkuP9O1mNtE4.roa (hash: zm9D2SdmmGYoULIl+hQH6eijqdwsjK8xxtq2NuIqYhs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:49:f6:bd:75:8a:91:82:fd:4a:30:a8:55:5c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=a5c42c936b73818e12193fc5f4b5c41fc55d03bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:98:1b:f6:e2:8c:9a:ec:56:48:de:7a:0c:
2c:1b:6b:e9:f6:a1:5c:81:a1:21:c1:47:2d:a2:b1:
e0:9a:18:a5:06:a7:70:2a:f6:3e:e7:f2:1c:80:ce:
2e:53:b3:cf:56:46:00:3a:97:a8:47:16:c6:c8:a7:
21:4c:30:86:4a:6c:06:f2:cb:ed:e4:a2:4f:98:98:
e7:f0:26:1e:4c:2c:dc:23:56:db:b0:7c:67:d3:b1:
64:e5:38:01:cd:92:a0:ed:d5:e7:b4:01:d0:c0:18:
e5:35:2c:e2:72:de:41:b2:d0:a0:9b:e2:c2:fd:ed:
f1:7a:55:5a:a0:d6:26:13:d5:20:48:1e:2b:02:03:
a4:d7:7f:3d:c9:a7:35:89:fa:36:5b:da:af:a0:2c:
54:1b:9d:fb:5d:93:a8:dd:e8:09:8e:21:d9:2c:b5:
a9:db:0e:2f:4b:72:41:81:37:e9:2d:a9:c8:3d:64:
ae:df:c8:b8:c8:de:98:4b:7a:d6:b5:47:5a:58:ca:
83:95:af:41:79:84:1a:fa:e4:4a:a4:0b:91:13:c3:
50:35:b5:8e:7c:3d:cd:c9:0d:b8:68:67:d4:14:34:
ea:a3:79:1e:ff:bb:97:b0:0d:d3:9a:36:ca:c0:a2:
16:46:d2:1e:83:37:99:44:69:50:8b:21:e6:00:fb:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C4:2C:93:6B:73:81:8E:12:19:3F:C5:F4:B5:C4:1F:C5:5D:03:BC
X509v3 Authority Key Identifier:
keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c0:90:b5:48:f3:1b:ed:f8:a0:c8:e2:c3:69:34:0d:b4:24:
5d:9b:c8:8a:23:3d:70:cb:52:c0:45:9b:c0:a0:ca:12:69:14:
dd:65:4c:b4:21:79:f5:35:7f:b8:2d:41:a3:43:85:02:6a:46:
a6:47:38:6a:ad:06:26:2e:b1:a2:80:ef:14:6c:6d:57:5f:75:
bb:1c:b9:f5:18:bd:19:0c:80:f7:f1:91:87:b9:a0:f5:9f:ff:
43:ca:19:23:6b:c8:35:91:75:e7:ca:5a:e6:07:42:5e:12:37:
62:bc:53:87:a7:5c:dc:12:b2:e1:83:0c:31:a6:b3:18:c2:46:
73:c7:31:71:4f:cc:f4:5b:ba:46:8b:38:dc:33:2d:4c:1f:9f:
38:59:d5:03:8f:0d:22:d0:40:60:c0:c5:23:a0:43:a4:dd:e0:
2e:07:fc:28:a8:5c:da:ac:9e:86:17:25:78:52:bc:d7:82:58:
41:94:af:4c:ce:0d:43:0a:dc:50:ef:68:d7:d8:4a:aa:b5:bc:
b4:02:8a:3d:ef:55:92:a9:00:a2:2c:89:02:08:fe:ee:9f:d0:
c3:a6:08:a0:67:6f:41:a9:37:70:d8:09:f0:ef:9f:fc:e3:e1:
21:a3:43:fc:e4:1a:cb:b7:1e:44:35:18:95:1c:a9:28:89:8a:
54:d2:0a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:10 2025 by rpki-client