Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
File: bXoBv9NLsT37elNXId7EAc2TEtk.mft (raw, json)
Hash identifier: JGpctc5tH5dWk3aKFnoGexNeD0BQbDxeHvcN2DFCGPY=
Subject key identifier: 3F:3C:82:CB:4E:22:7D:17:C8:DF:B1:D9:07:9C:AD:E3:BB:65:D8:E8
Authority key identifier: 6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
Certificate issuer: /CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
Certificate serial: 0194BC3C5FB601EA89727C1A74893F5B8091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
Manifest number: 0D2B
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: J1daZ0b9QqDyeaqVSA6rdJN33m0.roa (hash: m2mGCz+ed0huZCoFC3yQqfv0T01L6xVokVoZSaSYXMo=)
2: bXoBv9NLsT37elNXId7EAc2TEtk.crl (hash: NLgEc6tqs7PoFmLpTSJUN1biWYNz6TBm54iSlkiEcbY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5f:b6:01:ea:89:72:7c:1a:74:89:3f:5b:80:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=3f3c82cb4e227d17c8dfb1d9079cade3bb65d8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:d7:5c:ab:4c:38:bd:b4:b6:2c:a6:a9:f8:
c8:30:bd:18:93:62:94:0c:38:f4:e4:c0:60:ad:0a:
49:59:dc:d5:6f:cd:3e:95:c0:86:5b:26:ee:b4:fb:
f1:46:84:53:09:2f:22:4e:3e:49:12:59:c8:c7:cd:
15:78:8c:18:2e:3f:0e:76:f7:e2:8d:ab:6a:89:0d:
2b:c1:ff:1a:ca:79:3f:97:a8:0a:9b:6f:b8:a8:b7:
d3:45:2a:09:8b:88:b0:1f:23:f1:e7:95:90:1c:8d:
e1:ab:a1:8e:28:04:78:a0:ef:4f:73:36:ee:18:ae:
c9:6c:7e:17:51:91:6b:17:70:19:4b:d7:19:c0:b4:
74:3b:e2:47:b3:07:17:28:6e:4f:1e:0f:c6:e6:57:
e0:7f:5b:74:78:c3:4f:1e:b2:aa:60:08:b7:e7:74:
2f:72:70:b0:59:f9:46:aa:dc:61:d4:9b:67:0d:df:
16:73:c9:91:3d:67:be:1f:96:7a:d1:a6:0e:ca:68:
3e:ee:e2:a2:4f:81:29:93:03:c3:26:50:6d:d9:05:
3f:3c:26:df:46:27:7e:02:80:8e:cf:ea:79:4e:c1:
32:0f:cc:a1:17:9a:02:35:7c:59:68:bf:2e:eb:17:
7f:d8:d3:be:b8:ef:7b:d4:00:a1:66:1f:54:75:19:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3C:82:CB:4E:22:7D:17:C8:DF:B1:D9:07:9C:AD:E3:BB:65:D8:E8
X509v3 Authority Key Identifier:
keyid:6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d2:3d:f1:0c:8b:80:2e:55:05:00:be:e4:de:09:8f:1c:80:
dd:d7:70:70:69:af:af:e3:3f:4c:d6:6b:6c:b2:0e:38:02:0f:
63:52:47:64:7e:3c:e6:2d:6b:a5:a3:78:5c:fd:91:bd:c3:d5:
26:c2:40:56:7a:f0:e0:39:fc:e5:4d:ea:1d:86:63:aa:03:f9:
51:22:b9:6d:2d:19:75:fe:24:14:7e:1b:cd:95:b3:b0:83:dc:
a2:75:51:44:c1:e0:eb:c5:29:e8:d8:93:02:17:bb:5e:8a:fb:
5c:9e:89:bd:52:5e:a2:c1:25:a9:5a:c6:d7:ff:bf:37:01:05:
e4:8a:4f:81:32:1c:b3:b9:49:2d:d8:98:51:76:b4:5a:9c:35:
25:4f:a1:f2:3c:c7:9f:99:12:ee:2e:49:31:c2:87:8b:90:a9:
86:db:00:b4:51:46:89:7c:ed:58:44:0f:7b:0d:04:1e:d7:7a:
ad:d0:78:29:32:5d:79:ae:48:65:f8:05:30:f8:3c:e2:2c:59:
50:80:b3:7b:22:c7:36:fa:2a:91:e8:c2:34:a1:c4:1e:32:55:
76:64:f2:01:c7:f4:de:28:34:70:e9:63:f4:81:e4:07:53:fd:
b4:fa:a6:8d:d8:75:9d:db:92:51:0d:82:15:97:6c:50:d8:d5:
05:f4:43:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:56 2025 by rpki-client