Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
File: bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json)
Hash identifier: TcYhz5PZwWlDNWZN2qp6FnzDmxztC9u8ujb71yNCCoQ=
Subject key identifier: AB:12:A7:5A:8A:C8:5D:9C:13:3C:D7:4D:05:F4:57:7D:E9:27:B8:58
Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Certificate serial: 0194BC04A38096F217B1F1679458518C0E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
Manifest number: 1289
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: 1-w5DNPlIhExlDG3JJ8YehKY8B2s.roa (hash: 2oDdXXuxPyseKyeUOGZKSwRrTeZuxQlLGL5+bIlribY=)
2: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: EFD7MDasRWyAvXMsWlqlhTo6R9pRmrrDiBQbtrpwTXg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a3:80:96:f2:17:b1:f1:67:94:58:51:8c:0e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=ab12a75a8ac85d9c133cd74d05f4577de927b858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:5a:ce:59:97:25:43:55:9b:49:f2:06:e9:
ef:c0:46:4b:7b:e5:88:27:23:30:c0:d8:54:19:16:
d9:e4:35:b0:d5:d8:6d:b0:bc:e3:5a:ca:79:37:c0:
7b:40:6c:ea:cd:e1:d0:34:c4:40:62:49:17:39:59:
63:f9:18:44:d9:cb:e4:86:28:e2:fc:9a:4a:0d:e4:
00:fd:f5:c2:eb:fd:10:31:33:0d:d8:e8:46:37:c3:
dc:b5:f4:27:fe:14:68:4a:fc:c4:8b:e0:ce:55:36:
ab:ec:05:2e:90:d8:b6:17:51:10:8b:37:c8:0a:16:
54:e9:b3:e9:04:b2:7b:1f:06:d2:a0:13:76:ad:ed:
48:b6:68:6c:be:d2:bd:23:1d:39:23:a2:28:ef:a5:
71:51:70:fa:a5:7a:7f:12:b6:36:06:3a:46:2f:9a:
33:c6:d5:34:79:15:61:8b:78:2c:e0:78:40:81:3c:
79:bb:7d:96:2b:68:7f:cc:9d:4b:b6:68:00:e8:1d:
bd:e7:01:6f:69:8d:53:52:77:6e:a4:80:47:d5:f0:
e2:94:4a:85:e1:3d:45:8e:82:47:fd:3e:3e:d8:5e:
06:55:73:d7:d4:87:7e:5a:7c:99:d7:70:f5:80:34:
e6:fa:71:d8:3c:f5:59:10:a4:d2:97:bf:af:0a:52:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:12:A7:5A:8A:C8:5D:9C:13:3C:D7:4D:05:F4:57:7D:E9:27:B8:58
X509v3 Authority Key Identifier:
keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4b:c1:28:62:0d:1c:66:40:e4:d6:c3:c7:af:ab:82:e0:f9:
2c:48:59:05:cf:aa:07:e8:fc:f1:3d:d6:87:58:87:7a:46:42:
3b:14:99:3f:2f:19:a2:3b:45:98:53:f6:35:a2:1e:70:f0:bf:
4d:fa:68:63:47:3b:e0:47:38:b0:b0:e6:4e:28:6b:7e:63:69:
6a:8e:ed:93:18:c9:19:1e:de:34:7e:6f:0b:fe:99:f4:29:64:
75:bb:26:f5:9d:2c:26:dc:64:e7:0a:57:83:fe:34:6e:58:25:
e4:b4:14:b0:d9:aa:a1:de:b4:f9:3e:f8:cf:12:9a:cf:93:2e:
98:ce:e8:13:8d:ff:34:af:e6:ac:57:bf:67:04:b8:a4:f0:04:
f7:b8:06:a4:08:74:ec:79:34:ad:92:2a:5b:68:fd:d3:09:c4:
b4:c7:da:36:b9:1b:9a:03:8c:3e:91:de:ca:78:29:70:93:bd:
8b:ff:47:74:43:83:dc:cd:1a:32:93:b8:bc:e3:ae:6c:bb:8c:
56:cc:0f:fd:47:a6:22:f3:42:7a:43:62:4f:16:40:21:d5:60:
d2:39:a8:17:c7:58:17:f4:a9:ab:1e:d3:57:c0:b1:d0:45:da:
b9:a6:82:1c:d8:d0:72:ee:87:ab:af:0e:de:7c:7a:0a:74:83:
05:b7:93:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:43:34 2025 by rpki-client