Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File: bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier: ImwLNoeo/WDrie+6TiMyMmNHzqGZk5yTFZX+GnY/f4A=
Subject key identifier: 17:44:46:D5:5A:70:6B:6C:C9:A2:66:AE:E2:A7:8D:01:2C:76:69:85
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial: 0194BC72EC225C1AB83116CCE9A3097B97CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: 0EGynOuUA9lIAUsQTGHI/8+B7ywjBw9v47FhypX9qeM=)
2: z4IVFfra9dO93PZl7xdhmVhqzoE.roa (hash: 90ivV2dV0BSclFTId5ah7Fo9mKfLvO9taEvtncU7b/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ec:22:5c:1a:b8:31:16:cc:e9:a3:09:7b:97:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=174446d55a706b6cc9a266aee2a78d012c766985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bc:8b:b9:8d:11:79:48:9f:f3:8b:2c:12:39:
2a:8c:41:17:1e:bc:4e:3b:7a:38:e1:49:28:d7:bb:
4c:61:f0:45:4b:97:87:d5:b0:fc:4e:22:fd:22:62:
16:e0:12:e8:35:36:11:3f:b3:70:46:d5:28:eb:e5:
eb:68:85:89:2f:ab:a6:bc:82:f3:55:a8:36:7a:e5:
c1:62:e2:ef:18:b0:32:b6:db:bb:aa:50:d5:a6:6e:
68:f2:ef:a9:af:b9:a1:86:bf:02:73:d8:48:33:76:
f7:ff:47:4e:0b:a8:25:a4:a9:27:c4:fa:e7:bd:e1:
30:05:e9:6d:08:ab:57:c7:b1:7b:5f:bc:ee:a8:b4:
3d:bf:03:59:af:8c:e7:25:d4:bc:37:64:ad:37:22:
9a:e4:71:9c:4a:66:8a:ba:96:0a:7c:1b:7e:70:5a:
4f:87:df:f8:53:ca:1c:f8:7d:1a:e5:0e:cc:14:4f:
23:81:ff:df:4b:7f:4f:41:c5:65:19:21:8f:b5:b9:
bf:c7:72:70:d2:91:b6:d3:9f:a9:ca:70:d8:23:6c:
49:c2:aa:82:78:e1:75:33:a3:3f:e3:01:d4:2f:6d:
97:63:89:64:01:09:56:6b:24:78:a1:64:c5:08:dc:
cd:ee:dc:d5:39:0d:f2:53:45:4f:9e:e8:ae:33:44:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:44:46:D5:5A:70:6B:6C:C9:A2:66:AE:E2:A7:8D:01:2C:76:69:85
X509v3 Authority Key Identifier:
keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f8:ed:e8:79:97:b2:51:7b:ac:4d:8b:f2:e2:36:a2:9e:28:
db:b6:2a:f2:1d:cd:92:03:1e:74:9c:40:44:cd:55:d0:cb:cd:
ca:12:59:17:50:43:f3:5d:72:f2:47:db:14:ef:56:45:28:6c:
80:86:9e:d4:c7:26:db:81:7a:9e:e2:3c:1b:7d:2b:02:fc:0f:
92:1b:98:f8:e5:83:7f:e6:ca:24:44:d2:f4:3b:dd:36:a6:c3:
be:07:98:0d:03:70:0f:f3:24:dc:ab:1a:39:31:1f:6c:5d:35:
b0:8b:35:77:dc:a6:a2:c9:64:cc:6c:14:0d:8c:d2:4c:a0:87:
06:19:05:59:bf:33:50:4c:25:8e:2a:14:af:4d:42:2d:0e:bb:
4a:9e:f3:d8:5b:5d:49:7f:bc:ec:37:b0:4c:c9:43:1f:93:42:
30:ab:8e:4a:bf:19:ba:a8:78:7d:c2:5e:a8:fb:75:c1:95:06:
2a:0b:fd:20:95:f5:9b:66:07:7f:2e:d6:5d:3b:da:14:a8:2f:
db:72:ee:df:49:10:84:66:40:8a:45:19:11:b9:30:44:1d:91:
1b:47:d0:72:e1:42:d8:8d:3b:3a:86:78:53:0f:90:1d:f5:61:
58:7d:78:ba:5a:02:22:2b:9e:58:9d:5d:63:0d:34:da:f1:cb:
02:7b:fe:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:14 2025 by rpki-client