Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: epV7zRFh9NxzdacQDuzUKnzIxO3t5zSpfIvugL+aR9c=
Subject key identifier: DC:FB:23:D5:6C:22:B9:8C:12:DF:1B:A0:3B:9A:73:6D:9E:A8:9C:7D
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 0194BD176C8F0E3DDFD3329351E5C946CBA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 087C
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: bzs57lv3Qbjc1TLCtfvKYgEau6U.roa (hash: HAYnok72dCcoCWV0+wPH7iuTT6c76+rSS6MIun+rwec=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: LJsDlBeMahgVFjlTVU8P8tZcJMqOFbMW4Hg3s+/QI7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6c:8f:0e:3d:df:d3:32:93:51:e5:c9:46:cb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=dcfb23d56c22b98c12df1ba03b9a736d9ea89c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:36:42:e6:80:32:4f:8d:0b:24:75:c0:0b:
23:2d:c7:a8:50:ed:60:29:5a:21:46:09:41:1a:f2:
52:ec:26:9a:54:f6:10:40:cb:1f:62:fc:04:6f:3b:
f6:64:bb:17:c4:2f:d2:b2:38:11:ba:86:01:e3:2f:
cd:92:09:75:ac:b0:4d:f5:94:d9:da:1b:ff:c8:bb:
2a:13:dc:dd:bc:c6:8a:4c:a1:ae:b0:29:91:9f:e2:
50:fa:39:87:fb:07:fb:73:cd:70:c2:fb:ef:c5:2b:
c7:8e:ad:2d:9f:8a:1f:0e:d0:c6:33:e1:7f:71:9d:
e4:f1:26:26:04:75:e8:d3:a0:23:a2:51:7d:77:a8:
73:b2:c8:55:3f:93:5c:72:09:ea:a3:53:ab:cf:ae:
d8:1a:b7:46:01:a3:c1:38:83:c8:be:a5:1a:b8:47:
5f:96:55:12:4e:59:d4:b3:29:bb:cc:1f:d1:cb:ba:
eb:43:1d:05:06:42:c5:8c:32:41:3e:b8:3f:83:16:
1e:d9:9a:f4:40:05:e0:33:c8:ec:b4:0c:bc:dd:29:
a3:01:af:bb:e8:a4:54:75:9b:fc:35:0b:00:07:72:
53:41:ff:b5:c3:52:51:b6:da:a6:22:b7:4a:ec:90:
93:39:5e:cb:04:b4:5b:1e:a9:73:ec:23:a9:60:16:
5e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:23:D5:6C:22:B9:8C:12:DF:1B:A0:3B:9A:73:6D:9E:A8:9C:7D
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e9:c7:6c:fb:3f:9b:4f:16:fc:96:a3:c0:5f:41:56:88:ce:
9e:60:d9:23:f5:9d:3c:1c:81:07:76:c1:f8:80:61:8f:06:76:
80:d5:cf:23:0f:a3:9f:2a:03:cf:8a:31:e2:40:3a:b7:4f:d0:
59:c1:e7:3e:c1:92:a9:34:a2:38:8d:cb:5f:7f:80:d3:85:1d:
2c:68:69:2c:90:4e:41:14:30:31:d9:2a:4d:c1:dc:a8:ec:5d:
54:48:84:5d:67:95:34:8c:cc:a9:f5:b6:9c:52:8b:e1:2f:3a:
6f:db:70:3b:16:2e:31:96:a8:dc:35:58:82:28:79:5f:9a:56:
b8:3f:62:36:15:e0:2d:bd:65:5e:94:0f:7b:81:6a:d3:8f:f1:
81:06:32:36:f2:9f:89:c7:21:38:01:cd:0c:9a:2c:37:79:4b:
da:3c:a5:d1:85:cc:7d:b2:f7:b8:b3:a0:f4:44:34:56:14:ea:
2d:ea:d5:2c:e9:d6:c5:1d:12:92:f3:15:69:ee:65:2b:5c:e1:
7c:ea:64:45:c6:ae:81:60:4d:00:6b:25:c6:8a:23:b8:83:a9:
a1:73:9f:8a:10:b9:b7:09:28:29:9a:4b:45:00:c9:88:c1:4e:
c8:7f:42:b7:9d:96:76:04:9e:24:88:cd:8a:5e:25:ec:07:16:
02:f0:b0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:58 2025 by rpki-client