Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/cae5be-79fb-4eee-91f6-c3d6cb9d0a0a/1/bvV-1OLX9TRwswI1N3vq3XvThA0.mft
File: bvV-1OLX9TRwswI1N3vq3XvThA0.mft (raw, json)
Hash identifier: z8mCgQz6JaP1YJhQ0aqSknZ7ld9N5teF8eU/nXqUyi0=
Subject key identifier: 09:E9:FB:D9:AD:D7:4C:67:5F:40:4F:FB:A7:1A:62:E4:29:9C:9D:32
Authority key identifier: 6E:F5:7E:D4:E2:D7:F5:34:70:B3:02:35:37:7B:EA:DD:7B:D3:84:0D
Certificate issuer: /CN=6ef57ed4e2d7f53470b30235377beadd7bd3840d
Certificate serial: 01946140C55F31AE5F31B0A30B0DE74586B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvV-1OLX9TRwswI1N3vq3XvThA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/cae5be-79fb-4eee-91f6-c3d6cb9d0a0a/1/bvV-1OLX9TRwswI1N3vq3XvThA0.mft
Manifest number: 03CF
Signing time: Mon 13 Jan 2025 20:00:22 +0000
Manifest this update: Mon 13 Jan 2025 20:00:22 +0000
Manifest next update: Tue 14 Jan 2025 20:00:22 +0000
Files and hashes: 1: BLC_pqec7Xb-cxtE5YGkEZg3Ahc.roa (hash: dypZ8ZU7UC2HFkI5mlxgXkU7sCOGn2OpykEoY50q3pU=)
2: bvV-1OLX9TRwswI1N3vq3XvThA0.crl (hash: +ZPGLUhFZDeLlj5LSJ0nPYhW1aOnhyg9eWilVglw9xQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:61:40:c5:5f:31:ae:5f:31:b0:a3:0b:0d:e7:45:86:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ef57ed4e2d7f53470b30235377beadd7bd3840d
Validity
Not Before: Jan 13 20:00:22 2025 GMT
Not After : Jan 14 20:00:22 2025 GMT
Subject: CN=09e9fbd9add74c675f404ffba71a62e4299c9d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:30:bb:22:54:81:4c:be:1a:b8:91:93:18:
ac:7b:c1:a4:54:4a:4c:4e:b8:a4:e5:d8:1c:37:9d:
27:13:d5:a6:87:72:a9:ec:64:6d:68:ce:cc:2e:ef:
4d:bb:0c:a7:71:a0:41:74:33:db:95:4f:f8:ca:bf:
9b:6d:97:0b:0d:e5:48:1e:96:5d:62:bb:6d:c2:4c:
c1:6b:07:98:28:b9:6b:2c:f7:51:dc:7a:09:f7:dc:
cf:8e:6e:99:f4:bf:31:13:99:22:e5:c4:40:d1:05:
c6:05:d7:34:b5:8c:64:63:cc:e3:44:35:27:b3:13:
35:74:f5:03:57:32:7c:a7:cf:34:c6:fd:45:05:94:
ec:f4:3d:69:9f:cd:77:82:2e:e2:6e:10:dd:77:ad:
47:7a:6d:d9:48:51:30:e5:6a:f9:12:94:27:3c:4e:
6f:d6:4e:8c:24:c9:87:4f:db:3e:24:e0:da:a1:c2:
17:f7:9e:df:ff:56:a0:62:77:d8:40:3f:68:99:b8:
79:83:bf:6b:f6:28:07:11:0f:d7:5a:b7:ba:ba:5a:
1a:09:62:05:a5:5e:76:00:fe:11:3a:b7:1f:3e:2a:
3b:21:ed:d7:0a:0d:9a:a5:b4:6a:35:da:83:7c:eb:
a2:0f:84:25:c3:20:df:46:b9:d5:1b:9d:78:cb:c8:
66:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E9:FB:D9:AD:D7:4C:67:5F:40:4F:FB:A7:1A:62:E4:29:9C:9D:32
X509v3 Authority Key Identifier:
keyid:6E:F5:7E:D4:E2:D7:F5:34:70:B3:02:35:37:7B:EA:DD:7B:D3:84:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvV-1OLX9TRwswI1N3vq3XvThA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/cae5be-79fb-4eee-91f6-c3d6cb9d0a0a/1/bvV-1OLX9TRwswI1N3vq3XvThA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/cae5be-79fb-4eee-91f6-c3d6cb9d0a0a/1/bvV-1OLX9TRwswI1N3vq3XvThA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d5:67:e8:15:7c:4d:14:59:6a:cd:e8:f1:23:4c:74:1b:d6:
db:0e:e8:c8:3e:d4:f4:c1:ca:6d:6f:92:e4:26:97:01:0e:75:
da:c5:65:52:02:69:f1:84:f0:e4:2e:e5:9f:e2:79:ae:86:f3:
39:47:c1:b9:7d:75:48:cb:e2:3a:11:6e:bb:28:de:49:0c:a9:
88:1b:8d:08:94:7f:11:f0:ea:27:b1:74:e7:4f:e2:5a:ef:b0:
ee:89:f7:85:a8:ec:2c:7d:a7:b7:5d:6c:25:ea:25:39:83:07:
db:9c:73:61:d0:79:ce:03:a7:7d:41:e8:4c:db:0c:2a:99:9a:
f3:78:cb:65:e2:58:9b:c1:dc:ad:e6:c5:f3:2b:76:33:d2:1c:
41:5d:15:25:25:54:77:a5:8b:46:1c:6d:b1:8d:53:3e:4f:5f:
f2:54:13:76:14:c1:1a:8f:7a:e2:97:61:35:25:3f:32:81:40:
c7:c1:44:8b:37:7c:08:c7:b7:bf:a5:2b:fc:f1:df:86:9f:3c:
cb:ab:51:d9:8e:0c:7a:d5:eb:92:9b:fa:c6:dd:bd:a3:9c:9f:
8d:85:90:02:11:17:13:b2:04:d3:80:d4:d3:8e:2e:9e:ac:2c:
bc:26:fe:e7:84:75:9a:9f:07:c1:a6:2c:c9:3f:b9:99:02:4c:
32:a0:b7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:15:45 2025 by rpki-client