Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
File: bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft (raw, json)
Hash identifier: ZC7BJSHyuLIlf51DZyKBK6gK2JvlAGXir0ddtKb3iuQ=
Subject key identifier: C1:49:18:6C:B6:1E:77:21:7A:21:0C:76:BE:E4:DB:53:2E:EA:CD:C1
Authority key identifier: 6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
Certificate issuer: /CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Certificate serial: 0194BC728D365CEA5B9A5EC103866652F400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
Manifest number: 03E3
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl (hash: /ZQaHZNtktc3gizoyJ/unNOV0+oclRigqCO0EDGY7Ps=)
2: kepUhm0anFry8RwMMkqJayre0fg.roa (hash: HEBHciDc0e+f+TYCTKlbfrh1hJ9IXR8LLwkK0vX0JYA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8d:36:5c:ea:5b:9a:5e:c1:03:86:66:52:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=c149186cb61e77217a210c76bee4db532eeacdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:cb:d6:a8:73:3c:be:1f:0b:3a:94:44:3b:
2f:f6:b5:09:bc:26:b9:ea:6b:a4:90:63:2c:2c:69:
cf:39:85:b1:5c:6c:f9:ae:4f:02:02:5c:2b:59:18:
cb:fd:dc:98:70:99:2a:23:e0:55:36:6a:a4:a4:1a:
05:08:88:20:a7:d2:c7:1b:d2:8f:13:63:57:e4:4a:
92:7b:6e:09:db:7f:08:8d:10:ee:a2:9a:3a:0c:de:
29:99:80:e1:6c:73:cb:35:af:bb:e2:91:17:32:7b:
53:bc:40:fb:05:14:a1:aa:90:3c:ef:0c:98:b6:72:
79:ae:23:e5:15:49:4b:73:89:de:00:f0:b5:78:06:
78:6a:8a:d7:ed:e8:28:1e:a0:2e:7b:e2:b9:c9:db:
6d:5a:b5:9a:d6:58:54:8c:71:a1:be:e5:d3:07:3f:
c3:18:4c:b5:94:34:d5:99:f8:1f:85:af:a5:ba:4d:
e3:36:21:83:7d:e3:4c:03:89:e6:a2:de:20:75:60:
fc:2b:f2:d0:e7:aa:ec:52:16:35:07:c9:3d:68:9e:
ab:f9:4e:1e:45:51:84:0b:63:63:0f:35:6a:40:42:
1d:ef:aa:c9:b5:e5:26:2f:12:5f:63:ad:ae:76:b9:
b2:33:01:26:0b:29:f3:e6:c3:a8:c1:52:6d:f3:42:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:49:18:6C:B6:1E:77:21:7A:21:0C:76:BE:E4:DB:53:2E:EA:CD:C1
X509v3 Authority Key Identifier:
keyid:6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:51:85:4c:a3:68:d7:39:c0:88:b6:5b:39:a7:af:9e:99:d0:
bc:d9:d7:21:cc:a8:79:f7:51:ab:01:1d:7a:6f:7d:c9:97:f2:
4a:f1:b3:27:fc:79:f7:e0:8c:de:c4:ef:61:25:26:13:ac:4d:
d5:27:ec:0c:7f:28:2a:fc:7a:c4:c3:51:43:16:ec:39:5b:db:
66:44:d2:3d:89:c9:42:77:8c:11:08:b1:97:79:e6:1f:c6:26:
c3:41:01:a6:fb:da:81:06:5a:cd:fb:3c:f9:1e:a7:dd:1b:1e:
1b:4e:33:53:4c:7b:3d:8c:9f:45:d5:e1:cc:cf:b6:63:1e:1e:
d4:f0:22:4f:f0:2b:45:22:a2:f3:e7:a3:3d:61:6f:83:6b:b7:
00:40:2d:24:4e:53:89:29:c5:bb:ab:c9:d3:4d:bb:ca:01:1f:
14:36:20:5d:0f:dd:36:90:82:b8:1a:82:ad:02:f3:4d:e2:e4:
e1:c0:c4:88:d0:e2:90:f1:15:50:2c:05:6e:c3:76:1d:25:0b:
83:a9:18:0d:28:a2:81:68:5e:15:4c:12:c4:3a:8a:7d:47:21:
53:5f:5e:48:5f:66:ab:95:93:ab:a1:3b:cb:41:89:7f:87:99:
7e:97:fb:ad:4b:50:99:4f:ab:6c:bd:31:03:7c:0b:32:e7:65:
6d:54:a3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:36 2025 by rpki-client