Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
File: v3rjZp-Ef6J6abFLuH-Me_15nuA.mft (raw, json)
Hash identifier: pM1JdH4WfYzMyvn6By6HKQvYWsqiaIrJWi/DdcXv/T8=
Subject key identifier: 6B:5B:7F:6E:64:12:56:C6:09:D8:0D:51:AF:10:07:65:F9:AC:8F:94
Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Certificate issuer: /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Certificate serial: 0194BC04E959FEB9CF46607618A014CB67B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
Manifest number: 0B9F
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: Z6k4PVUyfZNvtBW6nB5nR2R0amg.roa (hash: gFgurKpY3RWD/+pqzWGTie0De0tX7ossY01q+RXg6WE=)
2: v3rjZp-Ef6J6abFLuH-Me_15nuA.crl (hash: M2UaadTtOkx4+aBVFTH2TqhnuOBugdjgv6BeoVwgCOU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e9:59:fe:b9:cf:46:60:76:18:a0:14:cb:67:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=6b5b7f6e641256c609d80d51af100765f9ac8f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:f5:54:0d:04:d7:c6:8f:0a:7d:69:65:76:
42:0a:aa:32:9b:40:fc:72:03:15:99:0a:6c:23:2d:
91:8f:ce:c4:b1:ed:0a:1e:50:05:29:83:9d:6b:9f:
3f:7a:b3:0c:ab:a4:7b:41:30:be:67:64:8f:47:ef:
00:77:80:1f:01:22:f9:31:8c:23:c0:fa:ec:20:9b:
36:b3:29:e1:7b:5a:d9:b4:47:75:75:50:bc:09:15:
e5:d9:7a:9f:d8:1d:b8:f1:1f:5d:0c:7c:1c:6e:1c:
5b:08:60:ad:c4:2e:4d:76:39:16:88:a5:a5:1b:f3:
5a:f6:e2:be:4d:fa:eb:a6:bf:ab:1f:70:40:b9:a2:
c9:9f:08:3f:f8:b1:a2:20:f9:0c:97:40:51:cd:c9:
85:e7:b5:ee:9f:d2:d8:db:3c:0c:fa:d1:a5:94:6d:
97:6e:e1:8d:4e:6d:41:45:34:b2:06:29:13:11:94:
f5:84:1b:79:d9:cf:b8:49:34:fb:39:08:9d:70:10:
81:ec:fe:33:22:08:98:81:a6:67:c1:be:88:fe:ba:
8a:a7:b3:5e:85:f0:ff:c3:74:a9:2f:17:0e:4e:1d:
0c:80:08:9c:db:d8:d0:11:dd:9f:b7:dd:e2:37:94:
62:8e:fb:1e:7a:b5:ec:27:0e:48:a0:40:ce:e8:0e:
75:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5B:7F:6E:64:12:56:C6:09:D8:0D:51:AF:10:07:65:F9:AC:8F:94
X509v3 Authority Key Identifier:
keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:58:e8:7c:ed:b1:46:1d:fa:3b:88:08:49:d7:35:14:ae:c0:
bf:f3:9f:5e:dd:7d:99:62:ab:df:20:35:96:a3:cc:1e:82:6e:
2e:5f:ce:8d:a0:da:5b:c4:56:83:0c:31:27:5b:61:0d:fc:97:
71:b3:91:dd:ce:b7:76:89:e3:a3:4d:6d:00:99:48:9d:96:88:
76:c0:98:94:d8:31:ad:59:9a:4b:02:49:30:e5:03:24:10:63:
be:fc:3a:b0:08:30:d3:46:a3:28:f5:f8:f0:7a:b8:80:59:11:
8f:db:77:2c:99:5d:da:5e:70:ce:6b:cd:d0:bb:17:ee:a3:a8:
fa:e6:1a:66:b9:62:68:61:35:4d:10:9c:fa:9b:23:bd:82:82:
eb:37:b6:d8:4e:e2:99:3b:ca:13:45:31:84:c7:ab:43:f7:0b:
bb:34:e6:ca:ff:b8:89:91:9a:d8:fa:2d:f0:dd:7e:4b:c5:7b:
ed:0d:ea:89:18:80:5c:5b:80:28:0c:64:68:fe:c1:12:45:3c:
c0:22:85:fa:3d:a9:f0:a4:67:9c:d4:df:ee:32:f6:a0:dd:09:
a6:7c:31:4d:38:bb:59:15:88:6d:b0:50:05:94:2e:ba:ad:93:
b5:03:9f:bf:13:80:b7:f5:b2:01:15:bd:06:f4:3d:75:59:31:
f2:21:ae:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:49 2025 by rpki-client