Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
File: bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft (raw, json)
Hash identifier: EHwnPoobNa5942XKZ2yYJKzGMnM9tfgid2kcQSbUkCo=
Subject key identifier: 86:7F:1C:9B:87:2E:9F:52:8A:72:50:72:52:5E:E0:C3:9E:28:D2:00
Authority key identifier: 6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
Certificate issuer: /CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Certificate serial: 0194BC3BF405E05AC613B539CF3F519FF548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
Manifest number: 049F
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl (hash: 6sLkzw67mowmsck8MEPUCTBZrM0d3/F923jBMb/Mzck=)
2: g4EaozYmC9YQ0a7L9CYiQ4ogRAk.roa (hash: xmryesaevMInujVcjkZCiYepzaYX2LiaZCMbhmPgvyw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f4:05:e0:5a:c6:13:b5:39:cf:3f:51:9f:f5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=867f1c9b872e9f528a725072525ee0c39e28d200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:53:28:4b:4c:51:63:57:09:f8:67:3b:c3:
75:f0:b9:bb:ae:86:9d:04:5b:5a:e3:f4:3a:45:b4:
f5:ab:76:0a:d8:fe:0b:51:64:89:91:75:e3:26:4a:
9f:27:3e:c9:ae:7f:d3:2a:bc:a9:6e:f7:46:c4:6c:
ca:0f:5b:61:ba:ae:1e:38:b1:4c:a4:56:bd:1a:26:
e1:32:fb:03:28:77:37:c6:18:25:20:8c:b5:16:ef:
77:0c:71:c9:ca:35:0e:c4:c7:0f:fd:b4:4e:68:b6:
05:4d:0f:6f:40:f3:50:a7:9c:15:d8:76:6f:50:72:
31:7f:60:f8:cf:0a:8f:38:f0:f7:14:c1:5c:7c:77:
15:14:db:00:2e:03:08:7b:2a:ab:16:34:82:7e:42:
6f:34:56:06:cd:12:a1:79:20:c3:7a:26:01:72:ce:
3e:08:77:88:cf:59:c8:8b:e2:0a:c3:20:4b:38:88:
55:86:70:1a:de:73:74:dc:e4:ec:75:20:3c:18:0a:
74:4a:61:6f:96:71:43:54:7c:73:c9:ee:09:78:19:
f6:e7:f0:80:ff:31:bb:95:03:f1:2d:bc:46:9b:23:
c9:52:27:df:06:c6:34:da:88:f0:03:9d:84:07:86:
91:64:eb:10:52:82:9d:b5:3d:9e:5d:7a:c2:81:76:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7F:1C:9B:87:2E:9F:52:8A:72:50:72:52:5E:E0:C3:9E:28:D2:00
X509v3 Authority Key Identifier:
keyid:6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d7:35:a4:9b:f5:05:8c:62:3b:21:9d:08:06:74:d6:80:76:
e2:f2:5a:ee:34:73:e4:79:7d:31:10:52:ec:eb:46:9b:1e:d7:
3f:b9:07:ca:24:fd:8a:1a:47:f1:27:8e:02:db:96:db:2d:23:
38:0e:2a:98:b4:90:2f:ed:d4:36:5a:73:fa:b8:5c:22:a3:ed:
04:8a:29:be:99:4b:22:8a:eb:2d:6c:ce:73:31:05:db:2c:01:
0e:b8:6c:f2:bd:8b:ec:30:74:aa:e3:55:d5:90:fa:56:d0:94:
93:25:fa:ae:b8:0a:e8:a0:bb:8f:37:a1:f6:7c:23:e5:13:85:
59:17:89:11:b0:d9:df:7c:ef:08:8b:25:f9:72:3c:1b:5f:52:
1a:27:a2:65:2c:43:6e:6a:42:b8:e3:d2:88:5b:12:52:33:bb:
34:88:07:75:6e:e1:93:f3:87:f8:64:31:8a:c8:4d:ba:0c:ad:
fa:fa:ab:ae:c3:e5:cb:ff:32:b8:fd:79:f9:d6:0c:40:d7:1f:
9f:ac:4e:71:47:cd:6b:c9:44:85:f1:db:c9:89:85:71:0f:cd:
6c:e9:32:b7:0b:30:59:c0:9e:f9:51:a8:4e:df:fe:0f:3c:a4:
46:55:08:36:bd:f4:57:28:75:10:46:eb:2b:0b:a6:08:a7:77:
7c:70:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:40 2025 by rpki-client