Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
File: bQmekI59iHniTR7eCdgSz0at4sw.mft (raw, json)
Hash identifier: zdIIV+dgcIn06p45y3MywYdcBfHqH0roYrWwHGrG+L0=
Subject key identifier: 12:F9:AB:FD:78:1C:03:6E:52:6D:99:97:F1:8E:9E:73:3F:BF:A7:D4
Authority key identifier: 6D:09:9E:90:8E:7D:88:79:E2:4D:1E:DE:09:D8:12:CF:46:AD:E2:CC
Certificate issuer: /CN=6d099e908e7d8879e24d1ede09d812cf46ade2cc
Certificate serial: 0194BC3C1AAF20E04FA3C13F3C9AEFB115B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
Manifest number: 0326
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: bQmekI59iHniTR7eCdgSz0at4sw.crl (hash: 0dHdftm2brWmgC6NmGDTamyB+ZuaoBIrTPvb8g/XNu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1a:af:20:e0:4f:a3:c1:3f:3c:9a:ef:b1:15:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d099e908e7d8879e24d1ede09d812cf46ade2cc
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=12f9abfd781c036e526d9997f18e9e733fbfa7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:eb:18:0a:5d:60:02:e8:74:5f:b2:55:69:
d7:32:2c:61:35:eb:a4:32:73:50:f4:f6:22:61:29:
14:87:35:51:fd:b7:41:c2:3b:8d:80:32:3f:94:1c:
2a:25:60:ac:aa:ec:0a:99:ce:f9:30:30:b3:47:74:
f3:ee:aa:6f:53:63:38:1b:4f:6e:84:e8:69:32:09:
fd:25:20:27:51:00:15:7d:b5:ab:33:ec:a0:69:df:
66:49:31:7a:68:84:d7:ca:00:5f:dd:9b:9a:10:eb:
c2:27:b7:e2:1f:f1:7e:91:5e:10:76:13:f1:4a:05:
3f:7d:a6:b9:3c:cc:aa:9d:dd:8b:de:9a:26:1d:1c:
7a:ce:45:cf:93:e6:0e:27:ea:2d:33:50:64:c7:e3:
58:f7:01:ea:e0:15:24:d8:fe:17:41:0b:25:5d:91:
33:1b:df:bc:7e:ab:3c:53:20:4c:7c:3f:06:1f:fc:
98:63:71:79:83:5f:7b:2d:1d:b8:a2:03:48:39:08:
a1:55:c3:d1:86:31:8e:a4:b8:45:a7:4f:77:89:47:
b0:af:4c:c6:73:90:da:3d:5a:6c:9a:ff:20:23:b8:
99:46:7f:21:3b:46:8d:7d:dd:08:ac:4f:84:07:92:
84:2c:7d:ca:55:12:10:21:f4:18:11:7a:63:34:cc:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F9:AB:FD:78:1C:03:6E:52:6D:99:97:F1:8E:9E:73:3F:BF:A7:D4
X509v3 Authority Key Identifier:
keyid:6D:09:9E:90:8E:7D:88:79:E2:4D:1E:DE:09:D8:12:CF:46:AD:E2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:25:f5:7f:8a:93:c9:70:8a:a0:f1:96:27:3f:ab:d4:5c:cf:
a6:7d:b9:60:23:29:01:e6:04:16:2d:c6:1a:80:4f:96:ee:ce:
ce:4d:47:04:0e:62:57:37:d2:0d:20:4d:65:d0:46:0f:2c:f0:
6d:28:95:77:e8:70:a4:07:a4:91:dc:d5:31:9d:77:b3:e8:1d:
05:1b:0a:f2:22:b8:ae:a6:04:62:c5:3f:27:86:3f:75:76:5f:
24:d2:c5:90:e0:02:fb:86:87:47:53:81:91:8a:43:c7:f6:4c:
5b:5b:81:8a:60:f1:41:5e:e6:e1:d8:17:4b:b9:5f:8e:35:2d:
8d:8b:02:c3:42:76:ef:96:c9:59:93:fd:dc:7b:f7:60:64:b0:
a0:9e:27:9a:14:7a:3f:d3:f5:65:0e:f2:57:1f:5b:27:3b:35:
12:7a:93:f9:3c:4b:3a:36:75:00:ce:5b:e2:6d:d4:f0:5e:2a:
8b:98:39:fe:8f:33:37:2e:da:6e:1e:fb:f4:d4:7b:ff:87:a1:
29:28:1e:bd:ab:61:36:96:e7:11:4b:6e:f6:11:07:f6:ad:a9:
75:a7:6e:d4:a8:81:3d:f9:b1:e6:3f:6f:2a:43:1b:4f:7f:bb:
be:7c:3a:71:f8:25:db:f6:c0:c6:c9:90:b8:74:a6:01:1c:43:
67:27:d8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:20:44 2025 by rpki-client