Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: hn3XAr5gGYi4FWcdm3O8lP3tyz/6wciZh04yab+KjJw=
Subject key identifier: 08:EC:7D:DC:A7:6C:F3:CE:9A:7A:9C:EB:91:72:C8:99:78:67:62:6C
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 0195E046AB929B2DEA946D7E0869638EA53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 0840
Signing time: Sat 29 Mar 2025 05:01:22 +0000
Manifest this update: Sat 29 Mar 2025 05:01:22 +0000
Manifest next update: Sun 30 Mar 2025 05:01:22 +0000
Files and hashes: 1: 1uAuKLt072-ZQlDEaEvJ4cVZt0U.roa (hash: VxasM346e46c28SKyluMBsYSF6rJX7VQBKo0/PUfiM8=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: 5VYZfdfNSP8eDl9IHL7n0B+t1eexka+Rwt/3wXPiuAU=)
3: FOTPh9BPoJbjEvO_XqYw0Ecj8wo.roa (hash: Tk8RIwgbHfyEByRiqFBz9C7JpjarILl3F0YIF0cWF/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:ab:92:9b:2d:ea:94:6d:7e:08:69:63:8e:a5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Mar 29 05:01:22 2025 GMT
Not After : Mar 30 05:01:22 2025 GMT
Subject: CN=08ec7ddca76cf3ce9a7a9ceb9172c8997867626c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:43:84:c6:87:f9:c7:11:ce:5b:29:3a:a5:32:
03:9f:52:0e:15:a1:63:e6:3a:ba:c6:44:e4:83:17:
13:c8:46:15:a3:63:5a:de:dd:90:92:52:e3:b8:2a:
e9:f4:f8:62:33:a1:4c:7f:34:21:b7:46:81:b2:b4:
10:5b:ea:50:ce:b4:66:7e:95:15:7e:b3:4f:f8:48:
8d:bf:a1:08:97:9d:b5:e6:26:80:0f:b3:93:e5:15:
78:b6:43:cc:d7:87:73:9a:10:bf:31:bd:c7:62:40:
55:1a:62:f8:62:7e:0a:3b:db:34:a0:ce:19:50:a1:
88:aa:ef:e6:d4:03:95:99:9c:df:09:fd:a0:08:93:
6f:b1:aa:9d:a2:a0:29:54:68:ef:cc:10:59:a2:41:
b0:70:c0:23:da:89:00:9e:1b:33:63:21:93:9a:eb:
ab:13:79:12:e5:76:8b:b8:a2:53:f0:d1:16:0a:3f:
47:7e:3b:6b:67:a3:1c:fc:fd:52:26:4f:2b:ea:fe:
41:23:db:40:ee:29:6c:7d:79:b5:e5:10:89:c4:8e:
76:ac:3d:a2:37:2c:32:f5:60:b6:74:84:d5:53:01:
87:03:ac:86:6d:5a:de:3b:83:a3:4c:a2:6c:77:ff:
c3:17:41:0b:26:8d:49:07:44:e4:44:c4:cb:38:4b:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EC:7D:DC:A7:6C:F3:CE:9A:7A:9C:EB:91:72:C8:99:78:67:62:6C
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b6:b2:4b:a4:ae:57:30:fa:af:ba:1e:ba:17:a6:b9:4f:b5:
90:97:d5:e8:61:b2:f0:35:8a:57:50:70:71:c0:8f:51:8e:c9:
3d:ba:b9:a0:f3:16:f9:e1:70:17:95:b7:3f:8c:32:58:6e:f0:
90:c1:64:ec:81:d6:d1:f4:82:c6:c5:5a:37:d7:4e:04:14:12:
b3:7b:bc:15:a4:9c:5f:2d:68:86:a1:a6:80:d2:58:1c:56:52:
0e:6d:48:54:33:a9:42:fe:45:7e:d0:76:41:fa:e7:a0:41:f4:
2b:17:ef:5e:e2:2c:5b:a7:b0:cf:72:2c:d8:42:0d:0e:46:2b:
20:e5:09:f7:42:67:4a:1c:f0:0e:4c:38:b1:87:53:ad:17:61:
4c:c6:59:30:1b:c7:5d:49:4a:87:63:9b:19:65:11:da:af:c2:
ee:5e:72:ce:fb:16:d4:0f:70:9f:a9:bb:c9:5a:17:85:36:05:
e7:f1:8b:7d:99:5f:26:2b:a0:2a:44:6e:93:d5:cb:86:93:f3:
e5:aa:a1:84:a0:e8:23:35:9a:5a:49:34:e8:7e:4a:86:98:d7:
b0:82:41:73:61:c2:96:54:50:ca:b5:21:22:2d:4e:4f:26:8b:
6b:60:48:44:75:fb:45:f7:b3:8f:b6:cf:47:06:bb:bd:56:74:
32:ba:ff:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:57:56 2025 by rpki-client