Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: qT1fL/Uqdx/RwGKySyPbUAoO5ebt1WF49XX9M25TW7Y=
Subject key identifier: 1D:93:40:23:9D:96:95:E1:12:EA:FE:61:0D:17:24:75:B1:06:2B:99
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 0194BC3C7AD4B757E8600345AD37C5A7FB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 0D38
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: SeGdw-NsjMC3xa1HTxnhlgnRFG0.roa (hash: 2DoSSeAY7zRuUc6N/EdrEbSmCJqRqnoNYJZ5rPcfON4=)
2: TlEgVdPwV6Gl0yxcaSKSOXS8BDk.roa (hash: rOzs3FdYqLMRuICzpdxO1YhRALyW7K6gs5XgNJ8pgZU=)
3: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: K+KRZpBsr0kJCH0tsZ9iQYsxB6MdCNp63bZMw8EFkGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7a:d4:b7:57:e8:60:03:45:ad:37:c5:a7:fb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=1d9340239d9695e112eafe610d172475b1062b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:5a:ae:f0:4f:0d:97:86:a4:da:83:b7:f2:
35:77:f9:88:51:15:50:f5:f5:3a:df:c2:e1:8f:aa:
46:ca:91:20:c8:a8:a3:83:0d:ca:bf:ba:50:51:aa:
dc:00:70:57:de:cb:b1:96:f6:1a:47:25:a2:4e:f8:
f0:6f:57:4e:01:58:03:12:71:43:7e:2d:5b:aa:18:
41:eb:24:fd:77:ce:da:b1:c9:91:ab:d7:c9:a7:45:
48:91:62:5d:4a:4e:11:bb:24:93:3b:33:7b:34:50:
dc:e8:f7:6f:70:ab:4c:8a:d7:22:14:c1:5d:85:1b:
51:01:3c:e2:e3:cd:68:51:01:db:c4:b6:d0:f3:a0:
6a:67:9d:e1:d6:e9:31:06:cc:25:43:61:77:68:8d:
08:57:b6:53:54:c7:f7:ce:d0:93:54:6c:58:d2:f3:
ca:d0:b9:da:92:3a:2e:8e:bd:7e:16:10:a7:41:4e:
38:58:1e:c6:d7:a8:6e:99:ed:ff:3e:7c:10:45:b1:
6e:24:8d:73:ed:20:83:75:27:56:bc:eb:49:cc:1b:
7e:c1:da:3a:b3:e0:69:4f:aa:e2:9d:8c:cf:d0:15:
d1:12:6d:46:71:74:0d:75:ad:27:1f:77:45:8b:76:
19:2c:3a:be:a9:c5:52:3e:91:23:dc:4d:f0:27:e6:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:93:40:23:9D:96:95:E1:12:EA:FE:61:0D:17:24:75:B1:06:2B:99
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bf:0e:4f:e0:88:ed:77:44:0c:a9:5c:76:57:03:71:8b:f1:
dc:06:e9:e9:9b:06:11:40:1a:cd:d0:e8:b1:5f:21:33:cf:ec:
5d:c4:9a:c6:61:49:b3:c1:92:02:21:d3:18:4e:f0:9a:0a:7a:
ec:7b:df:c8:97:e8:ec:c9:ae:1e:c7:b9:dd:29:17:d4:94:d3:
56:55:d1:ac:67:cf:88:2d:76:c2:35:14:45:55:a1:d6:e2:ff:
1c:4f:b9:ad:35:33:e0:9f:60:ef:39:a1:47:8b:9c:93:77:9c:
d7:73:ed:d3:80:b3:71:a0:f6:df:93:ec:26:64:f2:87:5c:7a:
5f:54:91:c7:06:67:2a:57:d9:7b:45:9c:2c:cb:4f:05:d6:da:
19:60:10:1d:60:eb:c9:74:0d:57:ae:7a:e4:b9:9b:bc:dc:ff:
0a:9b:a7:c2:85:ae:ab:71:5d:e3:b0:b6:f2:9f:63:c4:99:38:
83:0f:b2:ba:11:a8:dd:6e:a9:ad:53:96:2a:34:94:f4:5c:4b:
46:02:2f:78:e1:39:72:20:db:92:cb:fe:94:a2:6a:30:c3:c9:
e0:23:50:72:4d:96:6d:bf:df:b3:a2:1f:ac:16:8c:e9:c5:02:
81:3b:47:fa:93:63:8d:ee:24:f2:62:75:ad:d4:7f:cb:7b:f9:
cd:10:bc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:54:06 2025 by rpki-client