Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json)
Hash identifier: JcZDi5OvaOAjF1uYAqCjvR3ubY0G3rGPI6Rbv0H6Yl0=
Subject key identifier: 1D:21:BF:06:9F:44:7B:5D:6A:DE:15:EA:0A:C4:57:C3:B8:C4:D2:23
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial: 0194BD85251B364D6A63F47B3F9D9AEE446F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
Manifest number: 05C1
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: FN9RGBMyQ31Y_fViha13qkky7DI.roa (hash: gAmFRHmRCLI//ymFZDIrqygKx6kT7sxILKZQSxKuAic=)
2: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: aadfsbAK/rsEvnJ6UOD+F8WsziGfEcTJqoxh5ADT1n0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:25:1b:36:4d:6a:63:f4:7b:3f:9d:9a:ee:44:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=1d21bf069f447b5d6ade15ea0ac457c3b8c4d223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:ab:68:81:6d:69:36:8c:a9:fb:98:c4:06:
09:fd:f2:c4:ae:da:f4:dd:70:e6:89:8f:d1:ea:07:
d1:1e:aa:3e:16:c9:98:1d:02:28:42:77:5a:ad:7f:
4f:44:d0:1d:42:7d:a5:af:28:5b:40:3d:5a:33:5d:
62:86:01:fd:c2:8b:72:ae:87:3f:e5:cd:c8:dc:78:
73:62:76:8b:d9:96:b0:af:73:52:ed:65:63:ae:d3:
b8:7b:84:8b:5f:d8:9a:c1:58:ea:b1:86:a9:37:b9:
aa:75:a7:93:cc:5f:c4:cd:b5:3f:14:6d:80:ef:b2:
40:89:99:e3:76:00:50:43:9c:98:4f:ad:24:07:7b:
32:1c:5b:77:39:52:c4:08:51:6e:8c:de:17:98:59:
e3:0c:d0:63:8c:5a:55:35:55:dd:66:e5:f7:c7:91:
a3:f1:d9:11:9e:ad:64:d3:86:b4:9b:a7:e8:3a:5b:
20:34:38:98:f6:b5:d1:dd:59:88:68:1c:9a:05:6d:
5e:68:02:e9:65:a0:bf:3e:95:a1:ed:5c:a5:48:63:
f4:71:a9:3d:71:27:da:51:b5:fa:91:21:66:17:06:
50:7d:06:1b:16:5e:77:d1:e5:53:19:70:ba:22:d5:
f3:d0:43:06:a8:d8:84:90:2b:1e:18:4d:2d:33:d0:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:21:BF:06:9F:44:7B:5D:6A:DE:15:EA:0A:C4:57:C3:B8:C4:D2:23
X509v3 Authority Key Identifier:
keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:26:c2:e9:ff:7d:c6:d8:56:b6:18:c7:04:1d:01:51:a8:f2:
9b:2a:b2:aa:f2:6b:b7:46:01:74:eb:c2:ed:80:4a:f2:e7:3d:
8a:9d:19:cf:95:80:0c:6e:6d:13:8a:33:1a:36:b2:37:65:a0:
83:57:14:62:c7:a9:85:a1:9a:bc:ef:32:c0:cb:4c:db:f2:79:
54:14:3d:ed:ec:82:0d:d3:d6:5f:89:7d:d4:c0:e3:4f:1f:4d:
f4:69:6e:0d:4d:8f:70:1d:ce:83:a9:ca:f9:f8:1b:16:55:89:
18:38:49:3b:21:cc:86:a8:ca:73:e7:04:13:01:00:a5:e3:a7:
e2:81:55:6c:a0:3e:c0:f9:c2:a3:1c:fc:92:82:bb:04:fa:67:
11:69:1a:ef:4c:d9:ed:fb:3c:38:3b:8f:f3:bf:a6:2b:6f:82:
4a:94:d7:94:32:11:d6:75:98:d4:a6:74:2c:49:99:96:77:f8:
bc:63:53:c3:7f:88:d3:d7:0d:ee:71:e6:b8:2d:1d:3f:2e:8d:
f6:cf:87:41:a2:21:f8:fb:a6:89:b4:e6:7d:32:8e:2c:13:11:
ab:e9:35:7f:06:1d:ad:68:2c:10:58:bd:0d:17:64:a1:22:2a:
4a:d9:5f:8b:98:a4:96:01:5e:0f:de:dd:7c:16:e8:61:d8:da:
00:9e:9f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:01 2025 by rpki-client