Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier: XHNu0spjDVqwhgoaWuAKqzJq6ZG/DOr3kUlXueg0gFg=
Subject key identifier: 49:F9:95:F1:3F:BD:21:9E:38:7C:B3:0A:FA:76:E3:25:81:B2:A6:8A
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 0194BD855486A79F97CB7D541411F035FFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number: 1124
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: HlthH4j3pMmbo-FQP8AAkjQIPT4.roa (hash: 6d+RLZMl6NuFQdB3HSTDyU49VQw+vA1/721iQn3fpGo=)
2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: ot7oIS4FqgcZtmNHWspfxnQ9zEDUwjGwa37EMzqVZRI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:54:86:a7:9f:97:cb:7d:54:14:11:f0:35:ff:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=49f995f13fbd219e387cb30afa76e32581b2a68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:50:98:0e:bb:e0:76:22:d2:1f:45:1d:fc:
50:64:78:64:09:27:89:95:40:05:0a:ed:d3:bb:85:
3b:12:07:fb:96:c1:10:ee:c3:f5:8b:f3:af:b0:ec:
a1:29:62:3d:55:16:5a:83:44:65:a8:42:e5:24:59:
8f:47:95:4a:5a:77:55:a7:57:25:54:42:66:9b:66:
d3:6f:be:19:61:02:fe:89:20:aa:70:1b:ec:de:2d:
47:b4:8e:ea:ea:91:17:bf:63:da:2f:2f:bc:c5:a9:
a3:a0:65:cf:02:3a:14:a9:58:34:5d:cb:cc:60:e2:
31:57:f3:33:80:07:4d:61:cd:96:c6:6a:49:31:d9:
26:4d:8c:89:4e:00:6f:aa:f4:b5:6e:9b:30:f4:08:
11:29:05:fe:d0:03:35:8e:3b:dc:a9:6a:cc:70:e0:
3a:63:66:d0:9f:80:bf:a8:28:dc:ab:85:47:a0:73:
f9:3f:94:13:14:fc:f3:0b:c7:9f:d9:a7:7c:b1:65:
89:6e:be:ed:bb:7b:8a:f5:39:22:9a:63:08:7e:82:
7c:23:9e:b2:b0:5a:6b:52:62:e0:81:f7:10:02:d0:
2e:3f:0a:ba:49:96:61:b9:3d:a4:88:22:94:eb:9e:
51:d3:4d:ca:b8:8c:28:03:c7:09:12:27:aa:98:e2:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:95:F1:3F:BD:21:9E:38:7C:B3:0A:FA:76:E3:25:81:B2:A6:8A
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d0:26:e6:82:f5:f5:b8:3d:4c:42:fa:9d:22:ab:d6:fd:c3:
78:a0:26:6c:ca:e8:90:ef:8d:a1:f3:14:bc:d0:ab:9f:af:86:
bf:35:a1:a8:4c:37:79:3a:ac:82:94:32:f5:60:b8:4d:b8:78:
11:2a:04:e7:9f:36:40:4d:25:19:d7:63:93:68:0e:b4:bf:f5:
a1:bf:9d:56:aa:43:65:b2:26:e6:1e:0b:a8:12:1e:4a:c6:70:
4a:9b:36:ba:fe:78:a4:32:bd:66:be:bc:53:68:5e:b2:b1:f9:
d3:c9:74:04:8a:1e:64:00:a3:a3:2d:69:f0:73:a2:3f:14:5c:
d7:23:d9:41:dd:82:f1:1b:98:e2:51:57:6e:8c:92:03:62:b7:
02:ed:98:62:6f:84:20:8c:6c:01:e1:a5:84:e2:a6:ae:a0:3d:
9d:55:c1:0f:99:2c:8d:af:90:57:67:d9:94:76:94:77:fb:07:
c5:d8:f9:77:05:63:4c:fc:54:81:54:fe:fe:8e:77:55:30:a4:
36:05:86:b9:17:68:be:e0:1a:20:4e:15:9f:24:d1:3d:3d:88:
e8:81:37:3b:e2:0b:ad:3f:6b:23:9a:90:0e:8b:55:fe:f0:ba:
df:15:d3:ad:74:32:33:07:05:aa:46:0e:d2:8b:55:9b:11:51:
b2:27:15:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:26 2025 by rpki-client