Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
File: bx126IK_QQSbWtk9JaHdy6GSJ-4.mft (raw, json)
Hash identifier: n0RVrx39Tbp5TWz2NM2eK3/rRGwCYE9DT+4TgKd8It0=
Subject key identifier: 85:E1:FF:A2:EA:C0:BB:DB:DA:6B:98:2B:CC:E9:FA:64:F2:D5:F9:C4
Authority key identifier: 6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
Certificate issuer: /CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Certificate serial: 0194BBCE236914FA40F25CF8A4A05EB89124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: AkteWvLHK5p1anOKmFa5Bg-ia58.roa (hash: rNC89xwwwWkKAHXjeHo8grW62ngFIUZUHUTYlA1R3rU=)
2: bx126IK_QQSbWtk9JaHdy6GSJ-4.crl (hash: 7O5pT4LTu/BZR/foLhvRJxYyl0JqeYUQ7xpJSmf6Axg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:23:69:14:fa:40:f2:5c:f8:a4:a0:5e:b8:91:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1d76e882bf41049b5ad93d25a1ddcba19227ee
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=85e1ffa2eac0bbdbda6b982bcce9fa64f2d5f9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:35:64:1f:72:6b:4a:c3:44:d6:15:77:a9:e9:
e2:76:8f:0a:85:84:1c:76:6a:3b:df:b1:b8:31:fc:
8f:ee:ce:8f:60:6b:38:6f:7f:1b:33:a5:31:52:00:
f0:ee:ec:88:cc:57:60:76:93:4a:38:74:a9:79:49:
8c:82:29:59:1c:e4:62:a8:2e:1f:66:a7:9e:e7:1a:
f2:c6:68:e5:a6:96:b3:23:29:da:a0:0f:28:58:b8:
c7:17:c3:d2:2a:5f:2a:78:0c:9a:72:91:36:1e:67:
8c:d6:f2:97:0b:9d:78:2b:b5:f5:7b:5b:98:71:8c:
19:9c:88:06:a0:53:fa:4b:35:fc:16:e5:0c:6a:da:
29:2c:59:aa:6e:08:47:45:4a:ec:e7:e5:8c:39:15:
95:38:7e:a5:90:82:55:f6:89:b3:f0:de:1c:7d:10:
8e:69:e0:f7:2d:db:c6:19:9c:7a:b9:36:6a:bd:06:
cc:e0:4f:98:2a:64:e3:06:7c:ae:33:6f:35:21:a0:
55:e2:01:63:62:ea:d3:83:0e:48:33:09:e4:e1:4d:
ef:24:cb:44:31:0a:ad:8a:46:42:4c:8c:cc:98:24:
d7:56:59:57:48:66:e9:46:8f:d6:07:58:c4:6d:3c:
6f:21:dc:e6:6a:09:9b:b8:05:ca:4a:6b:8b:a2:fc:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E1:FF:A2:EA:C0:BB:DB:DA:6B:98:2B:CC:E9:FA:64:F2:D5:F9:C4
X509v3 Authority Key Identifier:
keyid:6F:1D:76:E8:82:BF:41:04:9B:5A:D9:3D:25:A1:DD:CB:A1:92:27:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bx126IK_QQSbWtk9JaHdy6GSJ-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/817982-e0bf-4e90-a979-b18f5f6262ae/1/bx126IK_QQSbWtk9JaHdy6GSJ-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b0:a6:1c:83:fd:56:b8:37:45:8f:fc:ed:0a:f7:62:1b:fc:
a5:61:65:fa:74:68:5b:80:3a:46:81:6f:3e:fe:d4:9c:81:5b:
fa:6f:7f:d0:cf:9c:3c:31:56:35:10:85:4b:fb:ac:44:8c:81:
f1:1d:f3:08:f8:81:bf:a4:7a:1f:31:36:75:c5:59:8b:40:c6:
93:f5:6a:d1:ef:c3:77:ef:4b:f8:a3:3e:a6:41:c3:52:18:7f:
b7:8e:f1:d0:36:cd:1a:91:57:25:63:f5:3a:a6:38:dd:6f:57:
b3:dc:b1:ca:bb:9a:94:65:53:3b:62:8f:01:b7:d2:18:cb:c1:
67:88:c8:04:19:e4:90:4c:4f:0c:6d:01:35:bf:96:ca:5e:b5:
a4:f3:a2:a0:53:b5:ac:32:d9:18:ec:90:1e:94:8d:02:0e:c4:
c7:35:33:fd:99:1d:2f:67:dc:6b:f9:49:95:1e:6f:8c:6a:2b:
1f:19:60:05:0d:8e:30:47:84:09:65:49:ff:aa:be:95:a6:3a:
1f:5b:9f:a2:63:28:7e:72:90:c0:90:b0:50:f1:2f:84:07:00:
d7:7b:02:7e:a4:90:2d:c6:5d:39:1a:4e:62:a3:2c:f1:9e:99:
00:31:53:98:5d:51:9c:08:dd:6b:68:60:0e:a1:50:5e:c1:cb:
d9:f0:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:01 2025 by rpki-client