Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: kNh0ZyNtJiYIxgw+RGMAiH2YMBwhAfN7HZzGzbx9xcA=
Subject key identifier: BC:05:36:42:55:BC:98:F4:91:AA:F9:25:B3:DB:C0:C7:01:46:69:C5
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 0195DFD90DF4B86FDC10935CAFC11FE9ACBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 0DB2
Signing time: Sat 29 Mar 2025 03:01:38 +0000
Manifest this update: Sat 29 Mar 2025 03:01:38 +0000
Manifest next update: Sun 30 Mar 2025 03:01:38 +0000
Files and hashes: 1: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: ON69cFwxrGiw6hhXtnpkpFUFlcG5mraFHbLAvEDpQAU=)
2: BFXbBXmgj_U02tRnQ5cIwT3U598.roa (hash: Y3AkRUWe6b+8HIEcIYVHhjtW0X1zsv/QwB6RX5f9lr8=)
3: KkxpxMmS8S1Mkz143AE6R41uFZE.roa (hash: eXPgSZI2TwSvGEkwL2CEgSDrAeeuar7/NsGxHBBximA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:0d:f4:b8:6f:dc:10:93:5c:af:c1:1f:e9:ac:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Mar 29 03:01:38 2025 GMT
Not After : Mar 30 03:01:38 2025 GMT
Subject: CN=bc05364255bc98f491aaf925b3dbc0c7014669c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7e:01:08:85:e6:36:db:84:32:ce:46:16:76:
ca:6e:48:f3:1e:f2:2e:4b:5c:ee:d5:92:81:72:8f:
64:ed:f5:95:22:a8:d0:ae:a8:52:1e:13:c3:dd:11:
59:f0:75:2d:4b:e9:1d:62:84:12:e7:a9:9d:53:01:
3c:73:3c:54:33:47:2c:1b:d1:9f:38:cd:11:a4:3e:
1a:5d:f7:4d:31:60:f9:ad:bb:ca:c7:b6:d1:fe:1c:
85:18:56:dd:13:bc:7a:57:6f:57:52:0c:94:ec:2a:
40:f2:03:f2:61:a3:a7:8b:47:4f:9b:1c:e4:ca:84:
75:1c:cb:90:63:ca:20:bc:ba:40:96:19:52:11:20:
fd:76:5d:8f:cb:ea:cc:b8:76:bb:e9:b6:51:77:36:
fe:9c:de:83:55:d6:65:ce:30:3f:29:20:8b:88:a5:
62:e3:8f:86:10:41:30:42:aa:df:99:d5:17:c5:0c:
19:0d:ca:00:7a:bc:7b:eb:09:83:81:ca:1c:68:12:
e9:75:62:5c:4f:74:a3:91:04:75:05:d4:35:d0:5e:
0f:c6:3c:0a:f5:08:bc:57:19:cd:5b:5e:40:e7:37:
e6:60:1c:b3:01:f4:63:78:4d:c7:f3:45:f0:46:84:
9a:8b:69:1c:b0:0c:6a:85:27:a8:55:0c:b8:c7:0e:
ce:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:05:36:42:55:BC:98:F4:91:AA:F9:25:B3:DB:C0:C7:01:46:69:C5
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:22:fa:f9:81:64:29:f1:71:d8:d7:cf:31:19:cb:f5:da:68:
6b:19:68:e2:c4:7b:a0:e5:8d:ac:ca:d6:04:2e:c9:41:6c:91:
0d:1b:ac:57:5f:8f:63:70:e5:34:d8:80:5d:db:a4:6c:7a:fa:
c0:ac:11:ef:3e:9c:3d:2c:b8:de:4f:10:fd:97:26:35:da:17:
b2:cc:d9:24:0f:7b:e7:93:e9:43:53:35:24:cc:b5:8f:24:1f:
b2:b2:48:84:6b:75:6b:0d:ca:4d:ad:89:72:5f:da:bc:6e:cc:
19:c4:95:0e:58:a4:b3:73:ff:68:bf:58:61:7e:85:20:ff:9e:
4e:0a:8a:ea:24:f0:3d:67:5c:21:29:b6:db:e6:83:9f:7d:37:
aa:a1:50:39:5c:ed:8c:b1:cd:11:00:1c:b6:71:88:bb:d4:00:
6a:5e:6b:0f:99:6c:88:85:a3:cb:ba:ba:a3:8a:87:7c:ce:d3:
83:48:b0:70:d7:fd:92:76:f5:f3:d3:3a:69:67:3a:4d:f9:b2:
89:7a:cc:b2:04:a7:24:ae:57:d6:0d:16:36:d1:18:0d:76:fd:
3c:77:e0:4e:1a:23:82:3f:8b:44:4d:54:0b:27:d3:6e:4d:94:
3d:d0:03:09:39:15:aa:47:f0:5b:4f:dc:69:9e:c1:74:45:f4:
4c:05:f5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:25:52 2025 by rpki-client