Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File: _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier: SdSoBsniRGUWTzGXW1kmmpe2cf2ttv6a7VQTB1BGORM=
Subject key identifier: BD:44:06:08:21:98:74:18:AE:EC:84:18:3D:93:6C:1B:21:BF:53:8E
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer: /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial: 0194BC731182CEA209D954D1147D1B7B290B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: H5zExKsN_X1SPJQSwEakZzqeC2I.roa (hash: FjXiEi3V3MLLSMvrOdppNODHARmQ2b/yPySFztutI1Q=)
2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: XsX63CXn6k4dkn8Ru7nG1Cw72LOGR5yPpRpVCqDRHAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:11:82:ce:a2:09:d9:54:d1:14:7d:1b:7b:29:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=bd44060821987418aeec84183d936c1b21bf538e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:45:47:1b:21:6b:73:69:01:0d:5b:c5:92:
b3:2a:51:6f:70:06:61:14:18:4a:c5:d2:97:0b:ce:
c4:53:84:b7:72:95:f8:10:16:9f:0e:39:83:6b:d0:
12:d7:ed:c6:d8:6a:1b:11:27:dc:9d:d8:57:55:c5:
2c:e3:1f:25:c6:fc:18:81:7a:7f:94:43:ae:8b:81:
84:e7:97:52:c8:f0:7d:45:86:06:24:ad:ba:98:a9:
41:be:be:54:1a:64:7d:a7:c8:cb:0a:54:89:6b:a9:
31:07:da:84:e8:5d:84:d4:e3:90:f3:b3:a2:33:af:
1b:4a:5f:a0:7f:fd:5b:ba:23:0f:90:0e:82:bc:51:
c6:16:62:84:33:9e:6f:e1:48:03:10:d6:81:d1:c6:
a4:62:1e:cc:91:df:8a:a8:2e:ff:fa:b6:7e:f3:65:
61:14:15:9f:f3:d1:9f:cc:99:d0:6f:93:54:3d:7f:
21:c1:37:3b:9e:fb:93:82:ba:bc:40:c9:9f:9c:d2:
04:c3:92:87:c2:ee:47:e1:b3:74:a9:72:8b:44:a4:
68:8e:c0:26:87:6b:60:02:1b:5d:c8:ed:14:1b:99:
28:b0:2f:a3:15:fb:a8:e4:7a:f1:35:8e:23:91:37:
8e:f1:2d:a3:27:38:37:6b:98:90:e7:1d:e5:87:7f:
3b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:44:06:08:21:98:74:18:AE:EC:84:18:3D:93:6C:1B:21:BF:53:8E
X509v3 Authority Key Identifier:
keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b9:24:20:2c:5c:ae:36:c9:d0:d4:49:b8:5c:02:38:3e:fd:
5e:17:84:78:b4:58:df:af:4b:20:20:80:ec:db:56:98:25:3e:
e5:89:0e:58:36:d9:65:57:36:78:d2:5e:05:6b:b3:4d:33:00:
95:c9:c0:2d:d7:ff:c6:07:55:c1:ea:13:27:01:a8:9c:b3:d4:
96:5c:7b:4b:69:0e:a6:83:b4:f1:78:c9:ff:f3:e2:80:60:3d:
b3:f4:db:94:bb:78:7a:42:07:f1:92:bb:b0:e0:36:17:04:25:
b7:d2:fc:74:65:8d:57:e7:ca:12:b4:65:fc:42:13:ac:4c:17:
64:64:87:dd:01:f4:a8:0b:41:76:c1:5a:18:47:aa:93:e5:c4:
37:b3:6d:95:af:d3:e1:dd:e3:29:02:e7:4e:d2:52:fc:01:52:
f2:b1:71:cb:06:49:00:1e:d6:f6:4f:76:5a:2f:95:c1:e4:52:
05:8e:05:69:57:b8:5e:2d:8e:d0:14:3d:4c:c1:d0:5e:2c:82:
f6:12:e8:a1:a7:88:98:be:71:8c:f5:93:7f:09:19:25:79:f4:
58:74:a2:bd:a3:2b:af:9b:93:76:9d:e8:33:9f:22:f2:9a:bf:
26:8f:81:dd:2a:b3:c6:99:c4:d1:53:9e:8a:97:3c:70:15:c1:
81:4a:f3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:22 2025 by rpki-client