Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier: gdDPYZW9DF3QQDHEIhwkAAIfByLcdIFfhjZiukkwDO0=
Subject key identifier: BC:5C:1E:E9:85:0F:2E:3D:FE:26:C1:5F:84:FC:3E:9F:81:8D:70:2A
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial: 0194BCA97FE0305C0236EF0C8A93FBA46F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number: 0270
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: TM0dbAavAlujmA/yMRMBLFCJUE8yy30onOCQzStl+v8=)
2: waNULbcRhTUiNsANSLGcB4J4itI.roa (hash: 9dW8NgonrZBc4IChXkCIdxerNGPGCgwx9gaoEJblTYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7f:e0:30:5c:02:36:ef:0c:8a:93:fb:a4:6f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=bc5c1ee9850f2e3dfe26c15f84fc3e9f818d702a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:75:5a:e8:90:1a:bb:32:97:23:89:b5:15:
df:a6:fd:2f:c0:79:9a:1f:31:ea:ba:09:aa:66:6c:
b7:7d:9c:95:34:7b:20:df:a1:a6:48:66:f5:6d:ac:
08:3c:ce:bb:90:e5:60:fa:ec:b1:9d:07:58:7d:72:
c0:29:3b:e8:91:0d:e7:fd:45:5b:a9:60:67:ac:f4:
ab:bb:d2:87:f4:e6:01:b5:88:0e:0c:6f:66:e7:11:
09:5a:8c:30:54:a0:97:d4:b7:f4:c0:6f:05:5e:0e:
fa:32:86:1b:a1:82:bc:b3:83:47:70:4e:0e:c9:7f:
f3:f4:6b:2f:8c:fd:93:8f:f2:95:2d:8b:15:00:99:
71:ae:74:ad:fc:e8:00:ab:02:3a:a1:80:f5:15:b2:
b2:21:02:e3:f1:ed:5e:5f:a8:fa:49:9c:a1:b7:60:
c7:14:d3:05:e8:66:6d:80:b6:a3:a0:28:ed:2a:18:
3e:14:f5:d2:3b:b4:df:86:46:00:e1:3a:47:f0:70:
5c:de:70:8f:aa:4e:c1:c0:1d:03:60:f3:b2:72:be:
bd:f2:b5:f9:bc:9a:90:1f:66:27:c8:59:8b:e1:ea:
06:21:bc:34:f9:30:86:55:1a:32:77:21:e5:a5:c6:
99:08:f8:36:5a:53:33:46:c1:05:86:4e:ec:2b:02:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:1E:E9:85:0F:2E:3D:FE:26:C1:5F:84:FC:3E:9F:81:8D:70:2A
X509v3 Authority Key Identifier:
keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c3:f0:6c:4e:aa:d9:8c:56:50:54:35:ac:b9:52:d0:da:4a:
a5:f6:fe:57:ab:e7:62:e5:e6:d2:2c:59:77:2f:a3:05:0d:39:
e6:02:69:f3:88:75:52:ce:ae:cd:b9:cb:e0:12:11:d5:db:56:
b8:d2:d8:a6:fa:c4:0c:32:ee:d9:bc:ad:d6:41:7a:8e:a7:0c:
f5:a9:f0:1b:8b:56:09:da:ae:55:d6:f4:49:3b:e9:0c:b8:c8:
15:ae:45:91:95:50:bc:5a:e6:2f:31:35:a3:f8:a7:6c:08:8a:
a7:5e:4b:c1:b6:53:38:e6:97:1b:55:22:e4:90:7c:88:42:8a:
62:22:40:b8:41:62:e8:a0:70:05:bf:ee:ce:4a:1f:05:f0:d3:
20:90:c9:37:08:fa:29:49:1a:c4:09:a9:36:2d:83:7a:e8:98:
22:e3:76:a3:64:df:1d:58:06:b9:81:9b:e7:a0:cd:2e:1f:53:
1d:79:eb:dc:8e:f0:50:66:d6:9e:22:ed:57:d1:9d:38:7b:d0:
c9:76:e3:54:6f:2a:ec:fc:4d:d4:8b:54:11:5b:2d:3d:38:1e:
a3:ff:33:1a:8c:08:f9:eb:5c:23:ca:f6:f4:0f:d3:ad:cc:20:
da:0d:82:61:93:f9:a6:74:cc:16:30:ee:72:25:14:c9:15:ac:
1f:d8:b3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:32 2025 by rpki-client