Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier: preWZSwWyhgyRgWxezyOzX/sIEXxanu9F9Yos/KIV3k=
Subject key identifier: 47:E6:3E:DB:95:8A:3F:64:77:B8:65:D1:BE:1E:15:DC:12:E1:55:A6
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial: 0194BCAA295733A9AF3684D5ECBCBDDF84B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number: 049D
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: smPgfi/NArWIcOl6YUETtXwAuf5ssLJkerH18VjRmX8=)
2: jDb6CVt7LMESu9TedWHpv82vXzQ.roa (hash: zvLg2bIhHSdnpMeV4b2spjUGOYu0nN5hkdLuTlMfXXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:29:57:33:a9:af:36:84:d5:ec:bc:bd:df:84:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=47e63edb958a3f6477b865d1be1e15dc12e155a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:3b:63:08:31:7a:af:eb:ec:2f:fc:18:8a:
3f:b1:fb:12:fc:11:35:f3:98:58:40:a8:44:4d:88:
67:40:1d:0f:e2:e3:c1:73:fd:14:ac:a4:bf:a8:3e:
35:f0:f0:16:e1:80:ba:86:15:d9:c8:35:12:44:a5:
82:e3:1f:e7:05:19:96:66:77:f4:50:80:83:92:8c:
bd:78:2f:9e:40:a7:04:3b:fc:aa:9e:20:1e:b6:42:
4d:7e:6b:49:b8:f1:40:5d:92:53:51:5c:f9:cd:74:
42:77:1a:eb:43:13:61:f2:b5:6f:2f:bb:94:eb:98:
39:c7:0d:f1:98:88:bf:36:6e:e6:82:7e:93:d9:39:
0a:5d:d1:ee:cf:98:da:b8:2e:ce:24:ca:df:c2:d1:
61:85:65:0c:33:02:dc:f6:bf:06:ba:9b:09:36:9d:
56:af:06:eb:6e:89:0e:41:75:64:bd:e4:53:aa:82:
7e:f6:7a:8e:2e:27:04:44:45:0b:fb:cb:44:63:a3:
d7:ad:f7:47:d8:1e:2e:e2:e7:cf:80:08:f2:23:de:
8a:dc:79:b7:bd:fb:ae:0b:d8:7a:11:f4:e5:cb:83:
88:55:36:1d:93:42:13:68:ca:d2:0f:11:c3:d6:49:
ef:70:64:d5:9a:a9:e5:d8:1c:9c:bf:b6:1d:36:8a:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E6:3E:DB:95:8A:3F:64:77:B8:65:D1:BE:1E:15:DC:12:E1:55:A6
X509v3 Authority Key Identifier:
keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6c:06:67:f6:02:75:65:71:fb:88:93:08:31:6b:9b:c5:66:
6c:b7:ab:54:7d:93:f7:23:08:94:04:5d:14:e0:8c:1a:92:5a:
ae:29:1f:cd:e1:77:aa:c6:ff:d0:e2:77:23:8c:0d:75:c3:a5:
81:af:f0:92:df:b9:f2:ca:4b:32:53:d9:17:1a:45:6a:46:d1:
62:bb:ad:85:ad:5b:e0:f4:cb:1b:2e:ce:62:23:61:a0:ef:cf:
03:d2:3b:58:b5:9b:02:8d:68:d8:77:da:59:a1:25:7b:0e:c8:
3e:cc:89:e1:19:bf:f5:a9:93:83:09:47:a6:c4:30:ed:f4:dd:
9e:17:b0:41:1e:8b:f8:e1:93:47:00:ff:af:04:68:73:b7:43:
de:af:0a:06:9d:8d:e3:68:8e:aa:5e:a9:42:a4:f8:40:01:b2:
d5:5a:1a:5f:8c:c5:d4:a9:0b:a8:26:a7:9b:79:ea:ac:c7:79:
97:05:78:18:5d:30:4a:dd:04:7e:32:db:0b:25:1e:50:44:86:
da:3e:2a:9f:fe:7a:57:05:6f:21:5b:e7:e3:e9:a8:a6:8f:5c:
3f:fc:d9:d3:c5:ff:2b:94:45:7d:10:63:7c:24:f8:94:26:4d:
93:a0:03:8e:0b:7b:7f:bb:23:e8:a1:5d:df:14:e8:cf:63:71:
cf:26:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:19:48 2025 by rpki-client