Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
File: bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json)
Hash identifier: 040OxF63mg9PpYabNlhVhttO7MUthL4aFAxLvA0QZKc=
Subject key identifier: 78:FF:77:D0:FC:AC:0D:13:BA:85:10:5F:C0:69:8A:52:5B:B3:93:C2
Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
Certificate issuer: /CN=6e94cdea9365612adf7611144668254b388fa612
Certificate serial: 0194BC04FC0AD9FBC5E7D271F32181226657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: EISyMOnc-5eOjKIrD9k72tY8RJc.roa (hash: NvuPqYNjAsbNaJVzrvYdoO9D6Yxanaqgvz+JVlXSpwM=)
2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: iXiCOiiC/41ZVLxsuvyPXChFYLHLRcEZxgOXLPjC4TE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fc:0a:d9:fb:c5:e7:d2:71:f3:21:81:22:66:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e94cdea9365612adf7611144668254b388fa612
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=78ff77d0fcac0d13ba85105fc0698a525bb393c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:0d:55:b9:57:b1:5e:7a:11:f6:87:02:c0:
a6:7b:b2:fd:8e:40:7a:75:ad:e8:f3:55:49:cc:21:
ba:39:c9:e9:0a:41:21:4e:98:41:b8:94:36:59:52:
40:3f:5b:cc:70:fd:bb:3a:d9:da:16:b5:06:57:80:
ac:ff:c1:51:ed:53:47:4f:c7:f9:a4:ae:85:ca:e6:
be:14:0c:35:f1:b8:ce:97:d1:17:b7:6c:41:55:9b:
f5:ee:d3:61:21:01:91:6b:f2:96:b5:81:73:f1:d5:
6a:12:e9:d5:c4:cd:86:b2:4f:46:9f:d9:d9:c8:69:
64:22:2a:a5:d7:d1:34:d2:9c:fb:97:38:0b:51:06:
6c:75:45:cf:98:9b:ad:5e:31:ca:85:4c:8c:d7:14:
fa:9b:ef:a7:93:4e:f7:5b:5f:e2:48:40:88:8e:2c:
9c:d0:c5:02:67:33:b1:36:27:7c:02:b7:c3:92:fb:
dd:7e:f1:0a:fd:f8:39:fd:fb:33:95:6d:ce:7d:36:
5f:12:00:ed:c2:9e:26:98:4e:cd:2e:39:4f:7c:8d:
78:c5:b0:36:2a:45:09:be:11:49:fd:3d:b1:5e:41:
5f:3d:63:b2:bc:61:6c:68:17:70:77:ef:d1:40:99:
52:fd:f8:dd:35:47:6d:c7:fa:9b:c7:a2:dc:d8:2f:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FF:77:D0:FC:AC:0D:13:BA:85:10:5F:C0:69:8A:52:5B:B3:93:C2
X509v3 Authority Key Identifier:
keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b5:f4:4b:f0:3d:0e:60:d7:36:d1:d4:2b:99:65:a1:9e:97:
70:6d:59:8a:7a:17:1b:7b:24:4e:a8:05:85:1e:fc:01:39:3a:
f6:a4:e4:b6:e3:cc:50:16:df:0f:97:84:e4:f1:24:60:29:d9:
8d:e7:65:0f:7c:2b:72:98:e1:e1:6a:f9:9f:69:db:4d:1a:66:
bd:99:c4:86:66:2e:5d:7e:43:c8:9d:c7:6f:8b:62:21:5f:db:
ce:71:c5:77:7c:99:73:49:6b:d5:c7:b1:25:99:fa:a9:82:e5:
ba:a5:5a:db:cc:f9:77:83:79:85:52:74:31:87:ca:c4:2c:28:
8f:72:81:b0:fa:c4:6a:66:4d:1e:fa:b3:51:58:de:33:e5:09:
11:9d:df:b0:4a:7a:82:40:51:37:f3:4b:aa:62:9f:61:5a:00:
a9:04:30:f1:da:33:8f:6c:1d:4f:12:9a:c0:77:ec:28:22:3c:
b5:8b:65:a5:b8:e0:c9:80:ed:0a:91:24:98:ec:2b:3d:76:85:
9e:ac:8a:cb:88:da:e9:61:5e:f7:25:ff:5c:2a:a1:4f:6d:ad:
ff:a1:d0:6a:cd:58:fd:c2:7b:15:e6:9e:b2:f3:75:7b:d7:13:
65:fe:60:49:51:32:e1:67:92:b6:1b:7a:27:25:26:5a:53:9e:
f4:cd:20:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:08 2025 by rpki-client