Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File: v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier: nhhrFJEg4tJUE+20Q4/+Z6dTLIlOfN7ZsQVcDFdBpnk=
Subject key identifier: B4:F9:AE:58:E9:77:F3:A9:3F:D9:B4:D2:2D:01:AA:F6:47:69:74:3B
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer: /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial: 0194BBCDFE354FA391B9199DD0C0377D38CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number: 10BD
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: CwTJXDuwwtXY5lds5AcNMw4m4MM.roa (hash: pkjwfyNy3tBr0gdIHHue6NuT85XueEkqyX3eSoK30mk=)
2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: 1Sxo7AllK2TUgpFNqdn2aEhA/bJnodMjuePGP+zx12w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fe:35:4f:a3:91:b9:19:9d:d0:c0:37:7d:38:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=b4f9ae58e977f3a93fd9b4d22d01aaf64769743b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:83:b3:ca:27:b2:93:af:92:33:63:9c:19:
e0:64:d3:5b:a9:fb:2c:47:ed:e9:e8:c8:a4:4e:b2:
25:8b:e6:bd:98:23:8d:2a:5d:92:7a:f7:e6:c7:f0:
78:49:d4:22:5f:1b:9c:7c:bf:e6:86:29:fe:92:ac:
13:42:20:13:f7:33:e7:89:6a:53:41:31:87:00:dc:
27:7b:44:c2:47:6e:7a:d3:17:f5:6e:ce:65:48:68:
13:d1:e1:32:4f:06:28:03:91:72:7b:6e:17:1c:b2:
1c:76:a1:89:3c:ab:24:41:55:26:d6:af:cc:fa:a8:
99:e3:ef:4e:47:e2:64:4f:e1:cd:e4:98:d4:19:5a:
ae:a9:a5:98:12:0f:40:64:dd:36:db:51:ce:25:3b:
7a:85:43:6f:3e:f1:7a:25:4c:55:06:da:30:56:3d:
d8:b6:a8:15:7c:3f:19:50:8b:67:bd:c7:63:f9:fd:
5b:61:e9:83:1b:bc:12:61:0e:87:9f:c2:30:07:cb:
6c:6d:4c:bc:5d:37:54:b2:81:41:28:78:29:46:80:
8f:98:43:b1:a6:02:88:47:00:3f:04:5e:5e:fb:9e:
31:a4:64:88:8c:e4:99:51:3c:ef:8e:42:56:ec:77:
e9:5b:60:e7:95:cc:9d:c5:ad:4b:f4:7b:43:7f:98:
3f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F9:AE:58:E9:77:F3:A9:3F:D9:B4:D2:2D:01:AA:F6:47:69:74:3B
X509v3 Authority Key Identifier:
keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a1:7a:cd:5a:e4:91:0f:e4:91:a8:35:d2:86:24:d7:ae:4f:
19:29:36:b1:ad:00:23:dc:0b:2a:57:24:7b:0e:60:35:dd:38:
b2:ef:4f:f2:18:be:06:38:c2:5a:84:22:94:50:9a:7a:7b:d1:
7b:9c:1c:d1:ad:a3:7e:91:40:7d:f3:d4:45:07:3b:f6:2d:ce:
77:3e:3d:90:d3:a1:11:a4:7a:28:9d:81:52:9f:a3:bc:a4:b6:
0d:54:e3:7d:f2:19:49:ab:7e:33:19:e1:a8:1c:f2:2a:f0:71:
be:cd:80:be:99:29:f4:3d:a9:3e:aa:30:10:d1:89:af:10:5a:
64:3d:a9:2b:ff:40:f8:25:c9:f2:59:cd:38:57:ab:eb:0b:2d:
17:47:0a:d9:04:40:f9:ec:45:b3:1c:a8:c0:92:15:20:82:06:
7a:6b:cd:98:d2:b7:9c:c6:9e:b7:3a:66:19:c6:60:d9:8f:bd:
6d:53:b5:6b:21:8d:24:a4:13:6c:cf:50:0d:5a:ac:4a:6b:3e:
68:d1:23:13:86:6b:f5:e1:43:63:82:67:db:9e:29:5a:40:b8:
67:3f:22:f5:94:a1:4b:d3:bc:95:26:dc:45:5d:f2:6d:54:4c:
0a:eb:5e:f5:db:84:24:cd:79:62:7c:fd:87:37:94:13:b5:a3:
cd:12:91:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:33 2025 by rpki-client