Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
File: bVbe-EWP2Osu11SsLpDTUFoyqoI.mft (raw, json)
Hash identifier: E4Ipa6+je+68njAiRFKqCR/UWIkoq/OwB4PTgCFFNpU=
Subject key identifier: 94:C4:D1:F1:2A:71:55:22:CD:2E:CD:B2:A1:36:7B:AB:5B:66:9B:B3
Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
Certificate issuer: /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Certificate serial: 0194BC72BA2119AF837F7A6F043B310E40C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
Manifest number: 03EC
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: SBebfO-JEiTLVku7wA-Q7NJY9QI.roa (hash: iiLUe1+ewBfgZMamdKFXLL2gnvfWWm7luTyA1wiqfW4=)
2: bVbe-EWP2Osu11SsLpDTUFoyqoI.crl (hash: qq31FdQ1khN5zAcadFwO6Zc2qLGyDLfpzR16vxzrQnI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ba:21:19:af:83:7f:7a:6f:04:3b:31:0e:40:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=94c4d1f12a715522cd2ecdb2a1367bab5b669bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:83:76:63:4d:ca:d1:b7:c7:e6:0d:19:f3:
4a:73:7e:8a:99:85:bb:74:82:60:10:4d:6f:56:e6:
f2:16:d0:d4:94:55:21:c6:91:12:c2:cd:e4:84:e6:
a4:e3:1f:98:dc:fa:de:b0:c0:ac:6b:48:49:3b:f9:
06:40:8e:ec:47:89:b4:39:27:c0:96:59:4f:7f:46:
67:70:c9:cd:bd:e7:06:4f:5e:a9:ec:dc:ff:76:99:
b2:80:57:0e:b1:dc:3b:5a:c0:d1:c0:b9:63:ee:f8:
02:b1:cd:4c:84:7b:c6:da:c1:1a:67:6f:29:08:45:
ad:51:e0:54:fa:af:5b:56:fc:99:8a:62:e1:58:a2:
83:67:5b:27:62:7d:92:6b:9e:12:d7:85:70:a8:e3:
26:b2:6d:3d:d2:f4:2b:62:e3:86:67:b2:a1:81:85:
96:94:b0:25:33:e3:24:ec:2b:b6:1a:ab:ec:9b:d7:
0f:e8:b0:39:e7:cf:8c:84:78:e9:93:08:f0:38:79:
03:3d:a0:ac:ce:0a:92:3c:39:65:58:67:18:fb:dd:
75:9b:8f:56:27:57:5a:d6:38:5c:a9:2c:4b:6e:0c:
c9:83:9a:b1:b9:cb:a8:38:13:af:6d:8d:dc:57:47:
0c:61:36:b3:27:ba:28:9d:52:ca:b5:ac:a0:cb:95:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C4:D1:F1:2A:71:55:22:CD:2E:CD:B2:A1:36:7B:AB:5B:66:9B:B3
X509v3 Authority Key Identifier:
keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7e:7d:0b:0e:9d:9d:c6:4f:42:9c:ae:8f:a7:4f:08:77:d0:
02:cf:db:a2:f8:88:69:fb:2b:ce:43:9b:83:f1:3f:0c:c5:53:
f4:c1:c2:83:7e:62:58:68:eb:fe:70:c1:18:6f:a3:5a:7c:78:
14:42:28:ae:37:c3:dd:b8:f2:7c:48:3e:c6:45:ce:f1:98:66:
e7:60:05:b7:e1:62:9e:f9:2e:9f:8d:ff:dd:ed:d7:11:8a:03:
71:b5:70:e1:6d:41:ac:f2:0b:22:45:09:d3:7d:3c:af:88:0f:
0b:b8:a8:8b:af:98:76:b6:88:cd:27:d8:12:54:51:d2:6d:d5:
05:86:50:dd:94:ea:4f:79:68:f0:db:18:6b:2f:83:fd:a4:48:
ab:2d:a0:59:5a:21:bf:b3:0a:fb:0a:81:3e:91:d2:d3:b0:c7:
58:45:df:62:4b:87:c3:c6:94:11:28:2b:b9:3b:f9:e6:c4:23:
af:f2:dd:b7:a9:fd:80:2f:18:79:b0:ed:82:85:56:08:c6:3f:
72:67:4f:55:aa:82:3b:13:41:7d:64:55:60:1b:80:a6:8a:b5:
8a:6c:3d:17:fa:45:66:ef:32:ff:a0:bf:38:35:3a:0f:d9:bf:
02:80:b3:9c:ae:55:eb:16:6b:5d:12:c2:4f:c3:15:19:08:58:
59:84:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:04:53 2025 by rpki-client