Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
File: B6BIbcC0unMJA3iP8_P3yCSbkh8.mft (raw, json)
Hash identifier: +kpBzGArHnIa6FjOsH3I97Pl1aE+83IYqgtZVM/tBgA=
Subject key identifier: 36:B3:92:43:76:67:45:E9:F1:CA:AB:F6:6C:F7:C3:A0:0C:AD:65:16
Authority key identifier: 07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F
Certificate issuer: /CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f
Certificate serial: 0194BC3C080706C0FFA69DAFB5E8CABD4309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: B6BIbcC0unMJA3iP8_P3yCSbkh8.crl (hash: WhAuCDr1e/9CUc+3tZQqzkr/NxT+AiID8fHkYS7YX3M=)
2: xJFVozfHmoVSSAuYbjszEZbCInk.roa (hash: Gjo9VUU6W0ie3Sm+l3hGhli3h91M0ZQXuSrdhZEO8P0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:08:07:06:c0:ff:a6:9d:af:b5:e8:ca:bd:43:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=36b39243766745e9f1caabf66cf7c3a00cad6516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:0e:83:e5:78:63:84:40:a7:ef:be:f3:92:
a5:92:9f:87:a2:95:b8:2a:3d:f4:94:e3:2f:75:dd:
c2:d5:c3:54:24:f5:ef:d9:da:0a:99:30:56:32:23:
84:fe:76:97:a3:0b:e0:ef:47:ed:29:dd:e1:38:7a:
be:bb:a5:c5:f8:75:7c:62:8d:d1:9d:7e:d7:f2:9b:
f1:f9:5f:36:25:e8:ba:cd:aa:91:27:cf:40:0d:29:
18:e3:2b:6f:c6:c1:a5:38:92:fb:be:89:62:1a:a3:
de:4f:21:cb:5f:3c:29:d6:bf:31:9d:79:3d:45:6e:
26:ee:c7:c6:6e:f7:e7:5a:69:d2:eb:c9:87:79:6c:
62:cd:7f:3d:34:d2:f9:1c:62:5a:30:bf:18:d9:20:
6e:c8:f7:79:6b:7b:25:c0:15:de:5e:73:9b:ea:fe:
9b:ba:0b:6c:16:72:90:75:7d:5e:cc:63:5a:19:25:
15:68:34:6a:ec:25:8e:11:18:21:b1:95:cf:7c:d4:
34:76:ee:20:4d:a5:e5:d9:7c:7e:9c:e0:43:fd:4f:
be:d4:98:8c:c8:5b:18:cb:86:5e:c2:c8:91:84:c3:
3b:9a:1e:5a:4c:f3:5c:08:c3:8a:9d:37:74:6a:b1:
77:37:7a:04:14:89:ab:bc:ab:65:be:68:50:f5:89:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B3:92:43:76:67:45:E9:F1:CA:AB:F6:6C:F7:C3:A0:0C:AD:65:16
X509v3 Authority Key Identifier:
keyid:07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:42:4c:9c:6a:35:0f:86:26:d6:91:5c:36:04:b8:0e:29:51:
40:ad:c8:05:03:f0:42:80:86:12:1a:fd:8d:4d:a8:32:3e:5c:
d3:de:2f:42:77:b4:3c:64:01:70:74:21:f3:83:79:54:b2:4b:
08:d5:24:7d:23:6d:fa:04:c7:db:f7:c4:f1:25:cd:db:e5:07:
38:52:4e:98:e0:80:89:c6:93:05:16:6d:4c:33:2e:46:d0:84:
3c:36:8a:10:3b:7f:97:9a:43:cd:fd:fb:51:54:8c:05:e1:c8:
0b:3c:86:fe:c7:5d:61:10:fe:3c:44:0d:83:2f:52:13:60:f5:
b1:b3:ee:62:e9:58:6b:c5:f9:3e:31:cc:b0:1c:07:ab:89:13:
82:9e:75:dd:e3:97:03:a7:5e:16:b2:d7:35:e7:5f:cb:07:19:
58:12:81:48:8a:67:d6:13:d3:bd:16:a1:ff:cb:6a:1d:62:12:
41:6a:79:d9:82:fb:dd:78:07:8e:88:1c:86:2b:e1:5c:99:42:
3e:c9:4c:29:74:a4:eb:15:2b:80:59:33:78:cf:c4:bd:8f:c3:
4e:7f:b3:4f:53:bc:0a:08:76:e0:5c:86:37:04:33:73:21:4b:
37:c0:99:d1:61:92:fb:b9:6b:52:c9:3e:e5:94:de:90:3a:73:
a0:98:1d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:04 2025 by rpki-client