Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/bM-ITPeOxTGYbkbt4C_GiGGWU4E.mft
File: bM-ITPeOxTGYbkbt4C_GiGGWU4E.mft (raw, json)
Hash identifier: 04lx9gg99DAXAhZOQnNDEx9kZugpWrwGx4byaHGypF0=
Subject key identifier: 8E:71:1F:BF:6E:7E:CE:F7:20:CD:8C:4A:F2:C3:83:B1:FB:35:A6:89
Authority key identifier: 6C:CF:88:4C:F7:8E:C5:31:98:6E:46:ED:E0:2F:C6:88:61:96:53:81
Certificate issuer: /CN=6ccf884cf78ec531986e46ede02fc68861965381
Certificate serial: 0194BD85B82C8C1ACE2884EE0E5567DA0CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM-ITPeOxTGYbkbt4C_GiGGWU4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/bM-ITPeOxTGYbkbt4C_GiGGWU4E.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: bM-ITPeOxTGYbkbt4C_GiGGWU4E.crl (hash: BpnmxaVzuMpOGx1A/hk2QQT8MN4H1leAG5IZvUFAIzQ=)
2: s8NaGjMWfkeloBSw3aUEBPqgwWo.roa (hash: l7guJUvxDOPbJ8VU8wnfUS8Pky0FKoE+ChOFc0y3G3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b8:2c:8c:1a:ce:28:84:ee:0e:55:67:da:0c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf884cf78ec531986e46ede02fc68861965381
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=8e711fbf6e7ecef720cd8c4af2c383b1fb35a689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:85:64:2f:fc:64:d0:d1:28:9f:5a:36:72:
75:4a:c5:3d:14:99:1d:cd:d1:40:66:e6:3b:fe:fa:
a6:07:61:a7:28:d6:af:73:4e:ff:e3:bf:8e:e7:45:
31:dd:96:ee:ea:58:7f:31:a9:02:bc:54:b6:fe:3a:
69:58:b9:4d:5c:fe:30:14:17:12:d9:31:99:4a:6d:
af:13:8d:62:15:81:68:45:a4:69:5a:1c:5d:87:91:
43:82:8d:5f:e3:a7:08:99:ea:2f:28:d1:5c:ea:0a:
e6:b5:73:ec:55:18:62:ca:02:b5:f5:2b:84:79:07:
95:dd:55:4a:52:7e:5f:23:80:cf:79:10:97:bf:45:
6b:b5:ba:14:e7:d8:1c:a3:a7:04:48:6b:f5:16:3e:
f4:f8:26:18:89:f5:41:11:1a:13:cd:2b:0d:80:91:
63:52:61:99:bc:d3:f6:c4:d1:52:80:54:dd:30:74:
f6:4c:54:ad:a7:ea:d7:0a:ce:e7:37:a1:87:15:30:
37:f6:8a:dc:89:bd:41:1f:69:11:16:9a:77:04:0c:
5e:5e:0e:f5:1d:e2:65:6c:26:f3:52:4c:dc:82:21:
56:47:be:6b:30:f8:7d:93:d9:98:1b:ec:29:e9:03:
a5:7a:db:a7:20:51:0d:43:31:e5:0b:a8:9b:16:20:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:71:1F:BF:6E:7E:CE:F7:20:CD:8C:4A:F2:C3:83:B1:FB:35:A6:89
X509v3 Authority Key Identifier:
keyid:6C:CF:88:4C:F7:8E:C5:31:98:6E:46:ED:E0:2F:C6:88:61:96:53:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM-ITPeOxTGYbkbt4C_GiGGWU4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/bM-ITPeOxTGYbkbt4C_GiGGWU4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/bM-ITPeOxTGYbkbt4C_GiGGWU4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d1:56:a1:db:a2:52:a4:37:ff:88:56:80:c5:c0:93:c3:3a:
90:bf:a5:82:99:ff:55:3e:31:06:cc:18:26:94:03:78:e8:26:
88:3b:7c:19:09:c2:9d:c6:d9:93:78:df:55:30:29:f4:29:31:
4e:db:84:1d:22:d9:92:33:46:a6:4a:b0:ab:01:a3:b1:df:31:
33:11:cc:44:d7:da:c4:8b:2d:86:0e:54:4e:65:46:b5:74:53:
e8:5a:12:55:e4:cb:71:7f:7f:1c:ef:78:67:65:5e:5c:f1:63:
bc:ca:8c:7b:0d:bd:0c:b2:98:22:22:d6:b9:86:d8:a0:20:d6:
3b:d3:f2:e8:84:b9:8e:0e:96:64:3a:20:2a:72:3c:93:55:88:
ad:d3:c8:6e:ba:11:08:1f:31:94:56:7f:f4:d7:af:aa:8a:97:
b4:fd:93:7d:dd:bc:9a:0a:63:a7:86:dc:1f:ac:ed:d8:81:fd:
40:32:4c:8c:43:d2:b3:d3:a4:68:80:ae:8e:12:a4:a4:65:92:
a5:fd:dd:b4:0d:65:b1:da:55:c1:26:b2:94:27:b3:f1:ef:b9:
81:9e:4c:0d:a7:4f:cb:36:e2:f1:b6:12:8a:99:95:cd:ba:bb:
4f:ad:e6:87:58:d3:06:7a:1c:b6:9b:06:ed:58:5e:ff:b7:d1:
a7:30:86:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:41 2025 by rpki-client