Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
File: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json)
Hash identifier: I7HuAey/hyl789RLpKi0ZuaTdIBTxodBdBX/+Zaj47M=
Subject key identifier: FD:C8:DB:49:A6:89:F5:EE:35:09:27:F8:83:D5:03:1F:EC:BD:ED:0E
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial: 0194BCE0B6AAFC7D7C62AC180BA56DB96055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: 7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa (hash: a9e9u4Kh69S/npnlVehDJcUBqvJOaHqrRNt0cx8h5Bs=)
2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: C1Xlp0kN50UfS3vx9Bk17ebZYpdGZjt1rqzj6n52jWQ=)
3: cjqlxXd9d603JmJ-9nME9vd7MMs.roa (hash: k/vf9BXXM6xYOCcjVLyRSPCeCSgUP+JptIGKabcT1E8=)
4: hZzdEV89UIlpyAqq4Kc3si8CNoM.roa (hash: d1WlFoJHZ3C9ZD8ErKPK4CYZhKvTRioRSz/Q+loHQuE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b6:aa:fc:7d:7c:62:ac:18:0b:a5:6d:b9:60:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=fdc8db49a689f5ee350927f883d5031fecbded0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:81:e4:bc:4b:4f:e0:6c:47:af:16:05:04:
52:ea:f6:6f:0c:fd:64:e8:84:cd:10:4a:59:e8:54:
11:a6:91:d6:5a:33:53:45:2d:c8:4e:14:3c:d1:e8:
a4:d0:6a:0f:e4:70:13:7a:2e:c7:0c:33:d6:a2:01:
d3:a4:b4:e1:7e:19:8c:94:ff:4d:bf:9e:29:74:5c:
c7:dc:02:64:69:14:db:45:b6:a0:57:2d:ba:be:d4:
34:56:d5:39:14:bb:2c:55:ab:5e:79:88:84:f0:29:
bb:d0:53:a8:3d:e0:48:a4:c9:f5:3b:fb:b6:45:d4:
48:17:64:8d:06:59:af:5a:c7:79:31:ae:21:93:ba:
ee:3c:c0:bb:d5:35:fe:e0:aa:24:36:d9:a3:6e:24:
de:88:52:67:32:ec:80:74:c9:a3:34:30:ba:c9:cb:
56:00:c7:5a:4f:e9:92:ba:f0:c3:04:d7:8b:d6:2e:
81:64:0a:5d:c5:d9:67:e2:b9:36:3b:f2:44:be:a2:
f2:ef:23:2d:05:2f:54:2e:99:27:fe:6c:8d:b0:74:
ce:b7:04:75:8f:a5:02:bb:c9:af:56:3a:17:01:5e:
25:81:cf:a7:47:4c:65:10:e3:9f:d2:fd:ee:16:d5:
13:40:41:01:03:51:dc:44:14:cc:ce:16:93:d3:4e:
0c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C8:DB:49:A6:89:F5:EE:35:09:27:F8:83:D5:03:1F:EC:BD:ED:0E
X509v3 Authority Key Identifier:
keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6a:e7:44:03:47:a6:7a:0c:df:90:d9:00:b5:47:84:5e:88:
3e:b1:5c:58:2d:ce:e1:58:70:ae:ea:13:78:4f:fa:f9:0c:c3:
13:9e:fb:9e:5a:9e:f8:a7:8c:28:9a:06:49:83:21:48:12:05:
12:cf:98:ab:1e:95:ac:d1:2f:c5:22:3a:b2:40:c2:09:e2:c9:
93:fb:90:1b:bb:1e:53:86:53:53:d4:2e:6d:26:7a:d1:51:65:
75:f6:96:27:dc:49:7e:19:54:ab:b0:da:54:ed:b6:69:a4:85:
27:74:eb:ca:e7:da:25:6a:57:7e:45:ef:45:4b:13:e8:f6:8a:
95:e7:d9:20:8b:8a:04:8b:ec:22:40:02:a6:fe:1f:3e:46:43:
0a:da:d5:87:f1:ad:78:c5:c0:44:ff:05:17:f2:bf:96:52:9f:
3e:f8:0f:1f:ab:d1:d0:6a:b5:71:69:15:a8:97:b8:3a:93:49:
86:78:b2:f2:c2:9b:14:10:25:bb:e7:7a:7b:86:6a:12:bf:cd:
ae:19:5c:f0:d6:e8:73:0c:b2:6d:b8:cc:64:bd:07:c0:bb:65:
86:48:33:f5:4e:70:62:fd:b7:1a:3c:58:f6:9d:5b:74:1c:f4:
ab:dd:f5:94:7f:d8:8e:c7:f1:0d:c3:2b:8e:0a:b9:5f:16:bf:
68:05:6f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:28:05 2025 by rpki-client