Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/bM-ITPeOxTGYbkbt4C_GiGGWU4E.mft
File: bM-ITPeOxTGYbkbt4C_GiGGWU4E.mft (raw, json)
Hash identifier: UXnjwbCD70D07R87SX0xNoUIhovAMypCh6RubvatCfg=
Subject key identifier: 00:54:8D:A0:89:E4:FF:37:87:B2:B4:DF:50:01:13:2D:5F:66:7B:54
Authority key identifier: 6C:CF:88:4C:F7:8E:C5:31:98:6E:46:ED:E0:2F:C6:88:61:96:53:81
Certificate issuer: /CN=6ccf884cf78ec531986e46ede02fc68861965381
Certificate serial: 0195E12206B312B677D399A45128BFEE2FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM-ITPeOxTGYbkbt4C_GiGGWU4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/bM-ITPeOxTGYbkbt4C_GiGGWU4E.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 09:00:58 +0000
Manifest this update: Sat 29 Mar 2025 09:00:58 +0000
Manifest next update: Sun 30 Mar 2025 09:00:58 +0000
Files and hashes: 1: bM-ITPeOxTGYbkbt4C_GiGGWU4E.crl (hash: nssQYtCRg1uVtsoKhZIPWHvMlaVTHRNmuNDneiksuEM=)
2: s8NaGjMWfkeloBSw3aUEBPqgwWo.roa (hash: l7guJUvxDOPbJ8VU8wnfUS8Pky0FKoE+ChOFc0y3G3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:06:b3:12:b6:77:d3:99:a4:51:28:bf:ee:2f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf884cf78ec531986e46ede02fc68861965381
Validity
Not Before: Mar 29 09:00:58 2025 GMT
Not After : Mar 30 09:00:58 2025 GMT
Subject: CN=00548da089e4ff3787b2b4df5001132d5f667b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:26:fe:14:19:98:49:d8:6b:97:40:09:3a:89:
5a:ef:a5:72:15:75:f3:4e:27:a2:a2:a6:73:3b:a3:
b6:8e:1b:34:af:b1:4a:6d:1b:7f:a0:c4:8c:1a:c9:
4a:ab:91:eb:7a:87:fb:bf:4d:a2:dc:c0:5c:c1:28:
be:98:31:5c:f0:73:1f:53:f8:50:a5:17:df:6f:64:
b4:26:23:77:9b:92:40:7d:a7:a0:f6:c8:55:e2:0d:
f4:8f:4d:48:ce:3e:a0:63:29:1d:5c:53:cb:44:97:
79:4f:33:fc:f5:b7:01:0a:06:13:87:6d:6d:3c:f5:
36:e5:be:c9:79:01:0d:b2:6b:7d:a1:95:b7:d8:9b:
53:d8:5f:9b:56:3f:e8:bd:01:56:73:6a:17:fe:94:
17:ff:82:15:ab:66:dd:13:89:73:41:3d:fe:ab:7a:
a0:85:92:45:65:40:ba:e4:b1:dd:c1:22:63:b6:e5:
9e:84:de:5c:3e:53:19:2b:e0:ed:14:d1:50:aa:7d:
3c:1d:30:57:fd:b3:10:3c:f8:b5:a3:1a:9b:58:1c:
e7:2b:d9:63:0f:9f:5f:2e:75:9d:02:0f:b0:15:ef:
1a:0c:50:a3:5b:28:69:13:22:97:ff:b3:fd:ed:5a:
f8:22:bb:da:b9:ae:54:c6:2c:f1:70:9c:d0:eb:99:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:54:8D:A0:89:E4:FF:37:87:B2:B4:DF:50:01:13:2D:5F:66:7B:54
X509v3 Authority Key Identifier:
keyid:6C:CF:88:4C:F7:8E:C5:31:98:6E:46:ED:E0:2F:C6:88:61:96:53:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM-ITPeOxTGYbkbt4C_GiGGWU4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/bM-ITPeOxTGYbkbt4C_GiGGWU4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/bM-ITPeOxTGYbkbt4C_GiGGWU4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4d:63:86:14:5d:50:29:16:d0:1e:bd:0a:da:88:88:6b:c9:
fe:6c:e1:46:c9:cc:16:ff:2f:02:f1:f1:61:0c:44:b4:d3:ed:
69:0a:d9:e0:ce:f4:49:ee:b8:14:b7:30:c7:5c:6d:32:36:49:
97:e1:00:31:2a:37:72:8a:b1:13:58:6e:0f:76:e0:48:54:43:
44:0e:59:bb:28:34:e6:b2:e1:2e:22:3d:d5:e2:b8:b3:ae:c2:
62:7d:d3:9e:94:4b:cb:ec:90:f7:3a:b9:a9:3e:c6:bc:05:39:
b3:e9:2c:38:6a:53:dd:82:34:99:07:fe:b2:d6:91:6f:59:2b:
9f:46:27:0e:1b:26:2b:02:32:d9:05:33:f0:d6:b0:dc:11:03:
92:cc:5f:29:cf:9f:e5:95:6e:8f:1b:f0:42:01:cb:38:12:b1:
92:ed:24:9f:5c:25:06:6a:3c:ee:d0:7b:5a:2b:e3:de:8d:1d:
76:3a:12:71:af:56:3b:5b:96:31:19:0b:59:a7:9c:c3:37:54:
6d:9e:42:99:e8:28:4e:a0:6a:06:15:58:80:cc:54:5e:97:3f:
1a:4c:5d:51:e7:e2:67:91:a4:20:3c:95:74:81:e6:86:f6:d9:
cc:28:36:19:50:5d:83:aa:95:45:6e:77:98:c2:c3:da:e5:36:
b7:ef:e1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:47 2025 by rpki-client