Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
File: bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json)
Hash identifier: 2xEFTTjjHnMlChutSRXAXePkrSob4CkrsTRR2CxugQc=
Subject key identifier: 61:EF:C9:98:DB:5B:09:6F:60:78:FE:FD:B5:10:B3:28:66:52:10:F0
Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Certificate serial: 0194BD4EA2C4839E1B1F425ABDEAB5186020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: A15OC13YGMvTmICTCy1AZnVK3To.roa (hash: PwsIGkVItakh2uZVvAdvG2pZjqN/gexEPiOMZusjdcA=)
2: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: Ho3zwA9qAKXaEylefUYSAnICs9OtaUTSlK3rjJY1S5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a2:c4:83:9e:1b:1f:42:5a:bd:ea:b5:18:60:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=61efc998db5b096f6078fefdb510b328665210f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:9e:a8:a9:f2:57:38:4f:2f:c3:cc:af:9d:
08:02:a8:10:97:ad:68:f1:16:89:e1:6d:68:e5:22:
a9:41:46:1c:9c:1c:31:ea:7a:0d:79:13:9a:d2:83:
b1:f5:73:8c:b7:6d:af:86:1c:f1:66:b1:77:a4:2f:
72:5e:f8:9c:64:63:c8:6d:ea:4b:cf:0a:8c:a3:8e:
37:cb:2e:dc:fd:8b:4a:34:8d:23:22:c6:22:81:1b:
b8:2a:41:bf:23:08:d8:37:ec:03:c5:a0:ad:7a:fa:
a7:a4:ac:f7:24:05:17:1b:24:9d:5c:0a:c0:ba:2c:
4b:e4:5b:da:dc:a0:c9:bd:9f:a2:88:46:ed:43:ec:
43:ce:92:5c:f0:7b:a7:d4:ef:cb:26:63:3b:3b:ab:
4c:e9:5d:b3:cf:86:9e:0b:b9:67:2a:97:d3:af:2f:
d5:82:5b:54:d4:ed:81:77:f7:41:b5:0b:7b:52:8d:
c8:d0:ee:a8:73:ac:f1:01:bd:82:e1:63:2e:d4:5a:
d7:b5:66:7c:60:ba:27:07:69:a7:7d:db:16:f8:56:
b5:0f:68:f8:17:14:95:ee:ed:7a:26:f9:49:f3:80:
7a:dd:e5:f1:b0:5d:3e:3b:2c:1a:42:ed:b2:b2:d5:
b1:25:6f:e7:0b:16:db:8f:74:84:3d:ed:47:93:1b:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EF:C9:98:DB:5B:09:6F:60:78:FE:FD:B5:10:B3:28:66:52:10:F0
X509v3 Authority Key Identifier:
keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bb:cf:41:11:6f:9e:6a:5a:03:d3:18:26:52:38:24:1e:dc:
69:2f:b0:d3:6a:aa:f3:06:90:36:45:8c:45:32:e1:02:a0:db:
64:f9:d2:d9:71:5b:a8:77:ab:5c:63:0f:57:04:84:0d:42:ba:
0e:20:2c:f9:c6:d6:78:17:24:2d:ac:86:26:8a:a7:94:d0:9d:
99:3a:18:a8:fe:71:8c:6d:a6:21:f2:f8:da:e6:e4:93:73:23:
eb:c3:9a:b3:6b:8f:f2:8b:a0:d1:dc:65:a0:e7:d5:ac:3e:d9:
20:10:68:3e:18:3e:12:a5:b7:00:da:04:a5:f7:f5:36:d5:6b:
fc:8c:8d:8a:87:8e:7f:bb:cf:60:da:22:a1:3f:19:54:cd:a9:
5b:de:a9:dd:36:ee:7f:69:8a:22:aa:fc:e0:07:b0:5e:f5:d2:
02:dd:ce:cd:b9:cb:2b:b8:2c:d2:90:ed:73:1b:50:5f:6e:64:
0f:c0:70:1e:00:f7:dd:16:b8:fa:d6:f1:be:3e:4e:cf:ed:11:
6b:ac:e9:8c:45:51:3e:b4:5d:cf:40:0f:8a:13:dd:3b:20:5f:
36:7f:f2:ba:97:42:dd:98:12:18:18:ad:7e:33:2f:20:22:4a:
5e:3a:20:97:2b:a5:41:08:3d:9f:ac:07:78:94:46:17:ea:9d:
f5:4e:62:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:38:17 2025 by rpki-client