Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
File: bHOgSn0Ost9H2vDDn7p142XIhT0.mft (raw, json)
Hash identifier: aONNYaMCfHQ5gK++mrga5waWxACtAfSq+zJCx6vX878=
Subject key identifier: 5C:87:DE:27:46:D6:A8:79:73:10:44:79:6D:EC:E1:05:FE:EA:49:2F
Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
Certificate issuer: /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Certificate serial: 0194BC729548055B7360320F08DDDB55E990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
Manifest number: 0DFC
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: 1g8u0Gir8yCyVBvzcuA27ZsMTcA.roa (hash: hLEqWjYzmOf232eRZFufaSm1niRcj5QeYBzcD6/dycc=)
2: bHOgSn0Ost9H2vDDn7p142XIhT0.crl (hash: vxkCEFEA00/fOI/khH/QCZ+cDHaon6qklqkMgvEbivY=)
3: uSLH-6azWyM6_toWim6PNb4arp4.roa (hash: imwU+Zb8TWocoYkIF0ZGoxJDK+doen6jZopoR2zFVWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:95:48:05:5b:73:60:32:0f:08:dd:db:55:e9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=5c87de2746d6a879731044796dece105feea492f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:ea:db:29:f7:42:36:45:3f:83:4d:8d:b8:
70:51:a8:b1:d3:e7:dd:08:f7:31:8e:82:88:40:be:
2e:41:8c:7c:f5:96:62:44:eb:e3:92:15:07:1e:aa:
db:ed:cd:e3:51:08:92:6e:43:87:0d:5c:4a:43:be:
c9:de:4d:81:fa:cc:db:8a:9e:93:f2:9d:6c:d0:f4:
a2:cd:1d:9a:ff:17:5d:b0:0b:d1:c2:28:77:13:b5:
14:84:72:67:0d:b0:77:2b:34:b9:8b:8f:a1:c5:da:
a8:70:32:d1:63:ba:69:26:e0:63:e8:1c:43:9f:bc:
33:01:c8:3f:f1:c1:12:9a:c9:f5:2b:56:2b:2b:ab:
4d:f9:80:df:ca:c0:86:b2:3c:97:65:2f:cb:88:3a:
c4:a3:68:1f:e8:14:24:dc:df:08:a2:ed:ca:94:e3:
7b:a4:5a:05:d2:8c:04:60:15:96:a4:a1:eb:48:71:
ee:d2:b5:75:38:e8:28:43:8b:09:0e:d4:4f:6f:5e:
81:07:25:07:e1:7a:a8:91:a8:05:34:b9:c3:9e:58:
78:c3:9b:8e:3c:a3:74:99:98:cf:45:79:b0:6e:89:
20:58:a9:93:23:99:ca:cd:68:18:3d:fb:ae:be:2a:
14:e0:ed:8a:58:ef:08:e4:60:5f:16:aa:7c:9f:27:
c0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:87:DE:27:46:D6:A8:79:73:10:44:79:6D:EC:E1:05:FE:EA:49:2F
X509v3 Authority Key Identifier:
keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:29:fc:56:10:2f:4c:3a:56:51:ca:b4:a9:b2:06:3d:7c:c9:
f5:bc:2e:a5:0f:b7:dc:6e:da:48:72:3a:bc:ac:11:70:bb:db:
94:21:b9:8c:33:e2:5c:7c:7b:16:d9:f0:d2:cf:4b:c7:ba:4f:
98:5a:cc:34:cc:1b:3d:ba:2a:42:08:9e:a7:ea:c6:71:3a:8f:
43:ec:0b:4c:c7:75:ca:9a:c5:91:8b:88:41:e1:be:33:50:be:
11:20:87:38:06:44:be:e5:30:81:1f:8d:48:13:e8:1c:f6:67:
96:c8:3d:8d:64:04:f6:fa:f6:c3:84:a0:e7:ab:df:ab:a1:bc:
b6:93:d4:2d:d3:74:d2:63:42:61:91:72:53:a1:74:0f:89:c1:
a5:17:b9:4c:0c:55:3c:6e:85:17:e7:e2:a8:cc:4e:4a:d9:18:
0e:90:df:63:27:09:e7:18:ed:f8:ce:d0:9f:0c:91:18:59:b4:
6a:63:1f:eb:9a:a6:e8:a1:21:51:e8:9b:26:28:4c:46:3d:aa:
f6:06:3e:c7:7f:9a:98:53:6e:d3:79:5e:78:b8:aa:36:44:bd:
32:17:1c:b7:28:9a:47:cf:3f:44:ab:e0:f4:28:5f:97:d3:8e:
69:a8:d8:1e:13:38:5f:c3:ff:17:6f:a6:79:23:ff:2e:4e:e8:
97:f8:f8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:10 2025 by rpki-client