Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/bPqEFiGq_FL4jEkB4fGPrc4eHWU.mft
File: bPqEFiGq_FL4jEkB4fGPrc4eHWU.mft (raw, json)
Hash identifier: 6sGhVDIOT1g1hBdU7QWRanv/FaMZvoIv+0sf/s5Nbyc=
Subject key identifier: 60:9E:01:2D:A1:D8:55:3F:87:D9:45:BC:FB:2C:26:3C:EF:D8:59:A4
Authority key identifier: 6C:FA:84:16:21:AA:FC:52:F8:8C:49:01:E1:F1:8F:AD:CE:1E:1D:65
Certificate issuer: /CN=6cfa841621aafc52f88c4901e1f18fadce1e1d65
Certificate serial: 018C6720BF0784A897EE4F7B6910C0BF1E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPqEFiGq_FL4jEkB4fGPrc4eHWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/bPqEFiGq_FL4jEkB4fGPrc4eHWU.mft
Manifest number: 0FD9
Signing time: Thu 14 Dec 2023 07:00:48 +0000
Manifest this update: Thu 14 Dec 2023 07:00:48 +0000
Manifest next update: Fri 15 Dec 2023 07:00:48 +0000
Files and hashes: 1: bPqEFiGq_FL4jEkB4fGPrc4eHWU.crl (hash: tqFJRo2o6CMu1nqp32sAISDAOkg/oDstzeNUnRL7GJc=)
2: j77F94kRElf2HAiKogimUORYSx4.roa (hash: oYGfT03xDh1bp6nlUCw1pNfAUn+kumfr5NtPWcz1kSU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:20:bf:07:84:a8:97:ee:4f:7b:69:10:c0:bf:1e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cfa841621aafc52f88c4901e1f18fadce1e1d65
Validity
Not Before: Dec 14 07:00:48 2023 GMT
Not After : Dec 15 07:00:48 2023 GMT
Subject: CN=609e012da1d8553f87d945bcfb2c263cefd859a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:72:02:e7:4f:33:87:3c:83:b6:64:98:14:70:
05:56:70:b6:1b:39:5f:cb:ed:ec:b5:48:06:05:29:
99:e6:4d:5c:39:28:64:3a:0d:7c:46:07:74:e1:e0:
0a:df:d5:87:7f:82:c6:76:eb:7f:bd:1f:19:e9:58:
df:54:85:21:0e:f1:6a:1e:2e:3d:6b:19:9c:5f:55:
69:17:ac:16:d3:ce:a4:59:dc:5d:9c:02:78:72:52:
91:b2:66:41:f7:dc:6a:fd:85:38:ea:47:ae:da:d7:
a7:ac:aa:e0:e7:c2:06:a8:10:cc:0c:86:92:78:e7:
38:de:ac:03:4a:62:ca:db:dc:0c:61:4a:ac:1a:1f:
a2:c6:06:ec:12:3b:e4:2f:83:e5:fe:e7:27:83:9c:
8d:19:5a:70:02:fc:5c:0f:65:2c:19:84:ef:d3:b6:
6b:a3:b8:f3:f7:f4:b5:af:12:0d:cb:6e:3d:bf:c6:
e4:a5:44:6f:21:b3:20:98:99:f4:35:75:4d:28:fa:
89:c6:34:d1:f5:8f:aa:e2:4e:0c:55:49:01:a5:eb:
53:41:6a:eb:51:94:8b:1f:df:af:f2:e2:11:7e:f7:
97:07:43:41:28:d6:1a:21:be:a6:1c:d4:8a:0b:6f:
4c:35:bf:6c:2e:77:fd:f1:a0:d1:01:49:11:14:bf:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9E:01:2D:A1:D8:55:3F:87:D9:45:BC:FB:2C:26:3C:EF:D8:59:A4
X509v3 Authority Key Identifier:
keyid:6C:FA:84:16:21:AA:FC:52:F8:8C:49:01:E1:F1:8F:AD:CE:1E:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPqEFiGq_FL4jEkB4fGPrc4eHWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/bPqEFiGq_FL4jEkB4fGPrc4eHWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/bPqEFiGq_FL4jEkB4fGPrc4eHWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ed:bf:bb:4b:ec:f8:cc:45:e4:8d:25:6a:85:09:ce:ae:a2:
94:b9:bf:51:bf:9a:fb:fb:7c:46:55:4e:cc:6e:72:60:de:d3:
c9:b9:ab:8e:81:91:a0:0a:c8:99:47:e6:93:d7:2a:73:48:ab:
d0:b3:c5:3d:88:33:4b:f0:59:58:78:60:ae:45:20:8f:c5:58:
38:87:69:4a:94:12:5e:8c:1d:7c:d1:8a:09:b2:e6:41:6a:d5:
b1:3f:15:f9:21:17:10:cc:64:52:4d:2e:5c:39:6b:a0:31:08:
59:8f:cd:df:8d:34:00:9a:f4:20:27:b0:65:d9:0e:65:02:0f:
4c:d3:a8:b8:55:79:bb:79:cd:a0:56:a3:a2:6f:60:8b:f7:37:
32:a3:1d:7f:58:05:67:6a:df:8e:01:24:19:8f:f6:87:41:d8:
a7:be:70:d3:0a:72:42:40:f4:fb:f8:81:2c:af:f8:5d:52:78:
4b:78:2f:01:b2:12:85:31:3e:98:14:41:b8:dc:11:d8:29:44:
a4:61:5d:68:ae:9d:77:8e:f7:a2:43:1c:04:e8:3f:02:72:ff:
37:04:e8:d5:bd:1c:e4:26:7b:d2:66:be:e9:15:bf:59:5e:94:
90:32:c2:b9:43:df:6c:be:fa:be:b1:e0:60:5d:ba:53:5b:8c:
e1:6c:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:08 2025 by rpki-client