Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
File: bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json)
Hash identifier: Nh/wt4zWDQCaisl0WkYLeO1hmYmMyApAWSRCtBaPQMg=
Subject key identifier: B7:C0:1F:AC:67:4E:48:46:23:8C:E8:F4:4F:0E:D7:C9:58:6F:DA:96
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial: 0194BD4EC23447FD4C2923142C44D4E07087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
Manifest number: 0CC5
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: DoUsi8lBp24xgpF7Cj5k0M8Xf1k.roa (hash: 8DoQ+UjZ0y3DouoJyhRBNdxsuMKM8IPBGox8SgTwz/M=)
2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: DV/r9t09penpoyPuH9FSuOvSHuGcB/AGunCui4W49HY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c2:34:47:fd:4c:29:23:14:2c:44:d4:e0:70:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=b7c01fac674e4846238ce8f44f0ed7c9586fda96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:93:a6:12:83:14:4f:f2:45:17:d2:36:70:
cc:8d:c3:5f:8d:10:5b:e4:be:2a:ab:f0:e4:93:de:
7e:12:9e:ab:96:2f:1d:a9:ac:fb:4e:23:51:b6:24:
04:78:21:43:d3:77:34:d3:85:65:86:68:e7:57:0e:
65:35:a3:1b:d4:59:8a:02:64:a9:f4:57:fb:d3:57:
7f:10:61:92:48:53:f3:c4:f6:95:d0:7f:da:46:c0:
05:d3:7e:f5:c5:99:f6:bc:40:c8:ee:ed:c8:47:b3:
b4:d2:e0:d0:84:42:1f:62:6d:3a:af:fe:ec:cc:e1:
57:68:64:a5:55:63:64:39:ea:bd:70:b7:92:43:29:
8b:f0:51:07:da:ff:2a:14:af:6c:fd:a3:72:0a:bc:
8f:37:98:aa:d6:35:8c:a4:0c:cd:67:d4:ec:be:4f:
ff:4a:a1:95:89:2e:8c:dd:ca:9f:35:3c:5f:78:9c:
79:33:04:b6:df:06:14:9b:a2:e8:62:f4:42:0b:25:
90:0a:55:4f:f5:71:be:3b:21:44:69:a1:6a:d8:9c:
8a:2d:7d:0b:9f:04:4a:53:99:b9:5d:42:e3:ad:70:
35:6d:44:10:eb:75:3f:96:aa:b7:1c:b9:b9:61:3b:
9c:80:c4:f7:27:0c:5b:ad:12:b5:65:29:d6:bf:22:
3d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C0:1F:AC:67:4E:48:46:23:8C:E8:F4:4F:0E:D7:C9:58:6F:DA:96
X509v3 Authority Key Identifier:
keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bd:88:ab:0e:5d:0e:a0:ef:7f:39:3d:c3:ae:77:e6:63:02:
20:ae:c2:97:6d:da:f1:60:f0:a9:63:15:10:a6:ba:45:21:8a:
55:ac:6f:75:15:f7:e9:31:e8:33:67:ea:e7:90:20:6e:28:07:
3b:3f:7a:ff:cb:f8:a2:00:05:6c:51:3c:a2:33:41:84:54:7e:
cd:46:3b:aa:59:c8:36:77:ff:40:d7:ac:f7:3b:fd:e2:21:0e:
e6:c2:4a:c5:b3:82:8b:7d:79:e8:73:c0:ad:21:d0:96:63:a0:
d8:ff:a5:ae:c2:89:f4:77:6c:d9:7e:50:a1:d6:0f:0b:74:b8:
ef:c0:9b:d6:89:1d:f6:25:1d:30:b7:ba:db:c0:a2:d1:7a:6f:
29:09:5a:dd:cd:45:96:31:6c:bf:37:9b:ea:78:9b:73:02:24:
37:f7:e6:86:98:75:a1:09:e2:48:da:17:fc:14:34:77:eb:4d:
a5:87:76:b0:5c:f5:3f:a6:81:c5:e5:08:9b:f1:bf:ec:c1:f0:
a0:3c:b8:7b:a1:b4:1f:ee:e7:bc:b3:1a:70:07:be:76:af:14:
6d:89:70:c0:de:db:3b:c5:22:b7:8e:de:1e:f3:19:a1:1e:24:
f2:15:c7:d0:9f:a1:03:fd:a7:35:e4:3b:75:c4:a9:e9:00:ae:
d9:9d:67:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:34:14 2025 by rpki-client