Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
File: bOLuhMz1bNwA_CyqWSknna4UiIo.mft (raw, json)
Hash identifier: jM2jnKC9KVMbe7MR5vVs6rJ7bfL3J4p1it48KUksZyY=
Subject key identifier: 45:73:8D:AF:3D:F6:CB:85:31:74:40:B2:56:13:A3:B5:4D:E0:14:3C
Authority key identifier: 6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A
Certificate issuer: /CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
Certificate serial: 0194BC3C396924E7DA755A4E6ECD2366AD2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
Manifest number: 0F6D
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: bOLuhMz1bNwA_CyqWSknna4UiIo.crl (hash: gqEc4Xxg3T4Kns7bJF9w1TaYkA7c760+QqXZF8s4NQM=)
2: cm9pm1Y4fh7VmcKkQuyOuu9QXgE.roa (hash: T9xnzREMcoc526+ebS5GUXWxlrjNz60+DOHB2xM8pA4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:39:69:24:e7:da:75:5a:4e:6e:cd:23:66:ad:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=45738daf3df6cb85317440b25613a3b54de0143c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:c9:23:3f:e5:78:e5:65:30:f0:d5:10:79:7f:
e3:67:ad:2c:fe:da:31:ee:ee:2a:a3:6b:77:d8:2e:
ba:97:49:86:7b:51:88:53:b7:fd:d9:39:02:42:95:
86:1e:7a:8c:1b:3b:60:66:c2:90:e8:d3:35:84:cd:
ed:2f:19:1c:d5:1f:e9:2f:25:84:81:95:34:47:fd:
22:03:9b:de:68:8a:84:3d:17:ae:5e:dc:0c:1a:32:
40:fd:c6:f4:89:91:ee:43:df:ac:45:c4:67:2c:8e:
3f:57:db:28:5b:01:e8:30:8f:07:2f:c3:96:3b:e1:
c7:0b:47:43:f2:01:d7:d7:a7:bd:89:1a:ef:43:0b:
a1:58:c2:e9:ec:8b:37:57:f5:ad:97:7f:d7:3f:43:
2c:24:46:95:19:5d:80:9b:59:39:c6:57:bd:50:6f:
44:11:a0:6d:d6:ea:40:5e:3d:7c:5e:d6:e8:08:99:
ed:c1:34:e2:d7:cd:f0:a6:bd:a1:e4:76:a1:c4:7b:
c9:9e:6b:42:e2:0a:af:d5:a4:52:1e:1a:c2:65:d6:
b2:8d:2f:3d:85:81:0c:3c:1d:39:3d:67:79:96:25:
c9:9d:cc:48:44:8d:2c:3b:5d:28:cb:5f:3d:64:3c:
a4:2d:e5:fc:bf:1b:04:52:49:16:74:a1:d5:55:12:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:73:8D:AF:3D:F6:CB:85:31:74:40:B2:56:13:A3:B5:4D:E0:14:3C
X509v3 Authority Key Identifier:
keyid:6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:97:b3:0f:ec:a2:0f:d2:a4:a3:cc:61:74:04:4b:a0:72:a1:
08:7a:2c:7f:c6:f6:c1:bc:4e:f2:74:5b:13:e7:27:15:cb:9a:
2e:56:cc:ff:5a:22:cf:2e:9d:92:af:d4:58:8d:0b:1e:08:2b:
36:ce:2a:89:c3:46:29:6c:ed:47:a0:be:da:8f:68:06:d3:f4:
64:e0:34:97:b8:9c:6e:ea:fe:bf:ff:2e:8f:a2:40:48:8c:fa:
a1:eb:bc:c9:3f:e1:71:52:ca:66:7a:f7:a8:ab:8a:04:6d:6a:
f7:8d:f0:6c:9e:25:66:61:37:dc:69:a5:5b:b8:26:15:6c:63:
bf:8c:87:43:e9:80:6e:61:84:d6:09:ed:a2:a7:4f:db:86:cb:
e7:d2:94:cf:5c:13:47:e4:6e:c1:6e:d0:49:28:55:9f:c4:48:
af:4a:39:02:14:09:9e:86:27:79:da:98:78:06:43:ac:88:5e:
e9:a8:35:bf:02:33:79:34:61:ad:9d:f6:93:39:4f:eb:c2:23:
64:24:f3:01:40:f0:ee:fa:8f:43:e1:7c:ab:c4:fe:62:d4:d6:
6b:26:01:1f:6c:eb:cb:b3:8c:d5:96:69:26:54:3c:d5:d4:1b:
c2:18:ef:71:63:82:13:44:02:1f:b5:60:b5:b7:5e:2e:e3:5c:
a5:de:4f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:00 2025 by rpki-client