Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
File: bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json)
Hash identifier: 6ICOWl4DYV8K+9OPCnLJcXDDt//4OvdNEB52LhUlcaI=
Subject key identifier: 52:0E:93:6A:2D:4C:55:0B:DE:F7:EB:F4:9E:28:5B:2D:93:BE:C4:9B
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial: 0194BD8566DD392E650E4F7C8D213FF2F831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: BKts92Cgp762t7JNofBM7L5uftM.roa (hash: WTNLkBIvgvxJFEXIWZr47BOElViaMRJym9HooD5Dr3Q=)
2: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: kbXMbGFeU1h2I83TvRZi0YilwUm1x4zJ+ebwWDf6omw=)
3: jypSqMvt2NprsB0DoEFG-cYXk3g.roa (hash: 20GE86V+BpBjF8cWsWZrxYRlzb0k0GNnTKWyu1nZsto=)
4: z53iYrx_shu0WdCaV4v6ZXfJyfA.roa (hash: ySckjx3fnBbjiCnJf7c10h+wH/jcKQr5e8Rmhk0EXE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:66:dd:39:2e:65:0e:4f:7c:8d:21:3f:f2:f8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=520e936a2d4c550bdef7ebf49e285b2d93bec49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:35:b0:7d:64:2c:1d:c7:1e:84:6c:1d:58:
57:6b:75:d5:ff:59:e9:9c:23:44:75:e0:05:e7:61:
c3:38:88:ac:06:d6:cd:cb:c6:8c:47:89:58:20:34:
71:5d:08:b9:93:30:a2:50:88:86:f7:b0:5b:45:54:
51:68:0a:49:2b:4e:5b:74:c0:2f:99:9c:12:f7:92:
22:9f:11:d6:b7:c8:74:ae:b6:50:f6:09:99:ed:84:
f1:30:d2:77:0f:9c:a9:03:b4:27:ca:03:3e:29:47:
fb:0a:83:59:f2:08:a1:0c:a1:57:7e:19:44:fb:62:
0e:54:1a:04:e7:0c:2f:93:16:71:e8:aa:9e:c2:16:
48:54:40:ea:d1:b6:08:0c:be:14:cd:3e:24:3f:82:
4e:6b:53:01:b0:05:c8:ab:7e:d8:0f:08:48:54:39:
51:4c:b7:dc:cc:9e:59:87:2c:59:db:c8:6d:7b:ae:
68:2d:4d:57:e1:4a:ee:9d:32:90:37:e7:c4:f8:ea:
30:d4:ec:42:e8:df:aa:ca:86:f4:ec:f0:c2:ea:75:
ae:e2:25:ac:66:56:2d:40:66:e2:42:e5:d6:7a:4b:
94:07:4f:1e:b2:49:e0:0e:78:dc:5b:ef:8c:b7:e2:
7f:bd:f4:e8:2e:29:dc:47:53:08:e1:b7:5a:8a:68:
96:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0E:93:6A:2D:4C:55:0B:DE:F7:EB:F4:9E:28:5B:2D:93:BE:C4:9B
X509v3 Authority Key Identifier:
keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e5:c1:4a:63:0e:67:c1:aa:94:0d:7f:52:ad:b7:b8:92:08:
16:cb:76:6e:f2:17:30:2b:3f:76:50:86:5e:87:7c:6b:4f:d5:
05:f3:c4:d5:5e:90:e4:5a:a8:6c:77:6c:50:69:df:0a:94:22:
a7:a8:6a:16:e8:11:15:aa:98:56:71:90:eb:9b:92:27:09:65:
be:09:14:70:a7:75:b1:d7:92:8e:a1:2e:42:da:4c:61:c5:81:
01:5a:22:c5:da:12:8b:82:90:8e:fc:7c:ae:87:cb:59:82:f3:
75:ce:2d:96:4b:2e:55:a2:87:b1:3f:f6:47:94:70:e0:58:27:
ba:07:07:be:bd:11:83:16:a3:0e:f9:5c:7d:fe:71:ac:42:50:
67:24:31:45:96:5e:93:1f:b4:c7:2f:86:2d:b9:17:12:eb:53:
b2:76:3e:b5:88:8c:74:d6:2f:8b:c7:14:cd:43:e0:14:c5:7b:
bb:ec:12:71:65:a2:65:f0:e3:09:12:f7:31:8c:2b:68:45:b9:
7c:7e:ac:bf:d0:0e:6f:d0:eb:5c:e1:9c:78:c4:ac:5a:b5:f8:
66:eb:1a:7c:08:ad:19:b5:17:9d:4d:4f:31:c7:59:e0:68:fb:
9d:53:ed:1c:d0:bb:17:af:f9:8b:90:4f:70:18:01:f5:64:24:
91:80:22:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:02 2025 by rpki-client