Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: Gn/u1myEMSFFH42gWuoxxuNewniIta5excOrjNbVKIM=
Subject key identifier: 72:5B:B1:74:A8:DA:4B:51:21:B7:F5:52:78:9B:85:59:33:7E:34:C5
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 0194BD855E1CF93006211521FE7B5D00FCF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0598
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: IX96Gh3BFBbXkqBejaxTNu8pIO2vT6kXVDV++sD5bhY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5e:1c:f9:30:06:21:15:21:fe:7b:5d:00:fc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=725bb174a8da4b5121b7f552789b8559337e34c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:11:0e:cd:df:be:65:32:eb:a4:f2:ef:fb:26:
b6:98:96:63:c8:c8:7f:2e:b3:df:55:3e:e0:fa:d6:
38:8f:e0:ad:22:bd:07:c2:8b:d5:06:b7:b5:03:7d:
ea:02:60:67:54:d4:04:57:40:87:cb:97:8c:dc:02:
eb:a8:f6:b9:6b:44:f4:83:19:ab:07:33:f1:30:43:
9d:d8:75:a3:ff:55:bb:17:63:74:0f:c9:33:b3:5e:
93:79:80:0c:49:c2:7f:c3:cd:52:7f:7c:64:c6:0a:
ce:e2:31:23:2b:0e:49:e3:ee:f8:29:43:6a:bf:cb:
cf:3f:88:96:10:ab:f3:6a:67:26:86:70:2a:02:82:
6c:75:45:f0:8c:71:25:87:57:a4:24:88:a9:69:c3:
7f:05:2a:e7:c2:45:16:e2:83:98:81:b1:4a:da:d4:
36:a6:c2:d0:31:24:4a:b8:4f:44:12:0a:96:48:c3:
21:ac:57:b5:77:16:06:2f:e1:a1:a8:82:bd:82:f4:
49:de:c8:cf:9a:05:d0:01:4f:15:69:99:11:fc:8a:
86:c9:d1:79:f8:6d:d4:a7:ce:c0:fa:a3:3c:fd:63:
02:fd:b4:dd:3d:fb:01:71:6a:12:09:f3:dd:b4:68:
23:f3:98:1f:54:a9:86:f1:c2:16:ca:e7:b3:32:7f:
d3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5B:B1:74:A8:DA:4B:51:21:B7:F5:52:78:9B:85:59:33:7E:34:C5
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:eb:a8:e7:6b:fe:20:e3:cf:6a:90:ea:c7:79:7e:4c:70:0f:
e1:91:3d:c7:fe:20:eb:6d:05:b6:ae:a4:0a:37:38:85:0d:09:
df:d5:df:e2:81:85:cd:81:a6:f2:d8:d9:fe:ec:de:a9:e7:f8:
63:c8:1b:9b:d1:4e:52:bc:38:ea:4c:19:34:7b:f6:69:54:3c:
37:6e:44:a3:f0:64:e1:04:af:3a:6a:bc:de:d8:ed:59:40:37:
c7:cf:55:55:c2:12:1d:d5:ae:68:7a:f3:42:8b:d7:60:61:d1:
5f:a3:6d:ee:aa:e4:86:1a:1e:ee:a4:64:80:ec:ad:00:e6:4d:
e0:eb:e4:de:32:14:7f:36:de:16:fd:d7:87:12:a0:76:3a:3a:
b0:ec:14:9a:0f:16:37:12:6a:45:72:3d:6f:ea:e8:c7:fd:6e:
05:7e:66:1c:4f:11:4e:b8:5c:12:7e:32:e5:8e:a3:c9:10:31:
f7:4d:db:82:7f:e3:aa:7d:1b:da:47:41:c9:7e:81:de:4a:e7:
34:b8:d9:ff:5e:40:45:77:80:c7:af:05:bd:79:0f:dc:18:aa:
bf:6b:28:53:79:64:16:10:08:60:4c:0d:23:73:f1:fa:ef:63:
c5:ec:5f:92:ac:85:55:8d:ad:e6:7c:fe:1e:e3:6d:4c:49:a6:
ee:11:90:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:29 2025 by rpki-client