Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: hmSY7ZZ0z1ieSiRcbL4xvNc4+6d6bl+8mKbi0V3Djq8=
Subject key identifier: 30:77:9A:EB:7B:78:3A:70:AF:D9:21:30:DB:E7:51:6C:79:DF:BE:5B
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 0194BCAA0A4CE0E99B61208414DE8E30B5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: 0rDYOCiVnQy1wBfGsCwgf4uCy6M.roa (hash: dtebcZBA/CIRFXc0hvNHRfZk/QfKnBn3jDoKUNxXxXo=)
2: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: ZVBviXoeZ86bblmTUbofhRzV0+ONoLc0wEJheQfYSQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0a:4c:e0:e9:9b:61:20:84:14:de:8e:30:b5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=30779aeb7b783a70afd92130dbe7516c79dfbe5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:9c:78:24:d6:84:0f:fd:2e:b7:fd:dc:84:
20:47:ed:b6:77:6c:aa:05:3b:1e:92:4a:21:e6:af:
51:fb:ce:d5:ec:56:55:8f:d2:db:8f:ef:10:87:f0:
b9:bc:88:b6:0d:2a:94:19:40:f5:73:21:2f:6b:85:
9d:67:b6:18:f3:d9:70:47:98:31:4f:7e:7e:31:a1:
6d:6e:93:c1:7c:79:02:de:a2:71:5a:0b:db:7c:71:
2c:70:bf:eb:99:78:66:33:bf:a1:15:41:89:82:96:
df:03:3e:b1:57:48:0f:83:38:05:da:06:e9:43:11:
72:e9:b4:cd:39:bd:01:88:a1:1b:6f:d8:bc:3d:65:
c7:75:9a:9e:52:fd:d8:5c:be:7c:3f:72:5a:a4:9d:
d7:7c:70:eb:df:7d:e6:05:4c:de:4f:59:d0:4e:fc:
85:1a:52:70:c3:b2:a6:7f:f1:d5:ac:c9:ed:43:6a:
84:02:3d:38:59:40:63:f2:32:37:5e:50:24:3d:89:
69:12:2f:81:90:98:8c:26:fa:c3:f0:8e:90:bc:7a:
9f:15:ba:74:2e:f4:01:d9:58:65:9d:ce:c9:a4:45:
a0:bb:19:e5:ff:55:1e:2a:50:a9:b3:e6:d6:5d:d5:
43:8e:fd:42:ee:2f:92:92:43:bc:8d:2e:54:62:75:
00:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:77:9A:EB:7B:78:3A:70:AF:D9:21:30:DB:E7:51:6C:79:DF:BE:5B
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:92:00:75:4b:10:0d:e9:1f:6b:86:1f:47:07:d2:a8:ab:b7:
4d:85:1b:49:4f:d1:5e:dc:88:38:57:83:4c:30:5c:6d:a1:d2:
0a:99:9a:26:41:7f:da:11:52:c3:04:17:9c:3d:4c:cb:d3:9f:
6b:f6:d0:f1:a9:d7:9b:92:5f:e1:1c:ea:b7:eb:fa:0f:f2:3c:
30:f9:95:9b:e4:cb:34:0e:16:be:8a:cf:63:97:9d:73:2e:ab:
22:19:c1:aa:c8:46:39:f6:ee:a0:e8:68:0c:ec:ce:97:3c:50:
36:5c:6e:b9:7f:34:ff:79:11:8b:fd:05:99:73:61:bf:c1:48:
3a:b7:c8:5a:6f:16:23:e0:c7:0b:25:5c:f5:29:31:4f:c6:da:
13:70:0c:03:7d:4a:d6:f8:f9:02:3f:e6:db:fe:9b:28:6d:e9:
25:1b:99:8e:ea:1e:72:c2:c1:81:c3:fe:c2:7d:43:00:d8:84:
61:26:5d:1f:7f:88:f0:59:99:80:89:8d:aa:2d:7e:a5:8a:fe:
d9:2e:83:c8:bd:14:53:ce:3a:91:59:53:0a:e8:cd:62:c9:0b:
c2:5a:a2:b8:61:93:10:f0:bb:39:28:f5:61:93:61:50:26:2e:
89:d8:ea:c0:f2:9b:49:21:ac:57:ea:f6:8a:3f:3c:87:44:f1:
c4:25:6b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:07 2025 by rpki-client