Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/bssoXSa94Jl93n24SJqh1uBKxEU.mft
File: bssoXSa94Jl93n24SJqh1uBKxEU.mft (raw, json)
Hash identifier: ytxm7MXB0Faxwdmghuv1nxZeILd303Qn024Dqeay8Rg=
Subject key identifier: A6:6A:E0:16:04:8D:AF:24:FA:83:62:4D:F7:BA:B2:64:3A:11:0A:2C
Authority key identifier: 6E:CB:28:5D:26:BD:E0:99:7D:DE:7D:B8:48:9A:A1:D6:E0:4A:C4:45
Certificate issuer: /CN=6ecb285d26bde0997dde7db8489aa1d6e04ac445
Certificate serial: 018A2A6EAAB3695E0DE8416BEBEE6D017042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bssoXSa94Jl93n24SJqh1uBKxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/bssoXSa94Jl93n24SJqh1uBKxEU.mft
Manifest number: 083B
Signing time: Fri 25 Aug 2023 02:03:30 +0000
Manifest this update: Fri 25 Aug 2023 02:03:30 +0000
Manifest next update: Sat 26 Aug 2023 02:03:30 +0000
Files and hashes: 1: PNLvIUXT0giAexEdO6G4Fr5fK_U.roa (hash: Jac/VpMmmVLYb3Mv2mswxWmZ5HP8UHOOqBN4OL6qWMI=)
2: bssoXSa94Jl93n24SJqh1uBKxEU.crl (hash: d52YwRM7Snx3H4u3kDGXR+AUv5XmnhVi/mlmCx5I98U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2a:6e:aa:b3:69:5e:0d:e8:41:6b:eb:ee:6d:01:70:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecb285d26bde0997dde7db8489aa1d6e04ac445
Validity
Not Before: Aug 25 02:03:30 2023 GMT
Not After : Aug 26 02:03:30 2023 GMT
Subject: CN=a66ae016048daf24fa83624df7bab2643a110a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:53:c5:86:7f:5e:9a:58:e8:73:6f:ce:c0:
25:fa:17:75:05:35:c1:5f:34:20:47:78:78:ea:e5:
0c:90:50:c9:f1:66:e2:4f:28:27:3a:20:88:58:8c:
66:c9:c2:56:b5:c2:be:13:0c:54:30:c8:f6:0a:0d:
66:db:24:8e:7f:d6:6e:b4:df:19:9f:b9:f1:e7:fe:
1e:f0:51:44:96:b2:59:62:97:e2:d8:e4:3b:3a:e9:
52:55:13:8c:2a:f3:8d:b5:9d:06:49:0c:02:85:44:
71:08:20:38:b0:41:07:cb:4d:97:c6:5d:a3:21:19:
03:ff:9d:15:2b:d5:49:02:72:54:90:d8:61:55:f3:
ea:90:33:0f:b0:26:66:d4:1c:cd:55:a4:bc:9c:ef:
60:f8:00:54:45:6f:93:2e:65:85:d3:ef:8b:e6:5a:
30:c5:f2:64:1c:76:e0:fe:e6:67:84:42:7f:f1:49:
7f:0d:84:0a:74:45:3a:7c:95:c8:9a:da:fe:78:e7:
64:47:e3:f4:b5:e6:3c:28:23:b5:31:a6:8b:c5:22:
02:ef:79:b1:8f:37:c7:d8:46:a6:a2:6b:66:95:81:
e6:46:f7:db:83:b3:c0:5c:b8:b5:ff:b6:fe:ff:4a:
8a:91:fe:57:71:e9:54:44:43:0e:c8:d7:c9:2d:a3:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6A:E0:16:04:8D:AF:24:FA:83:62:4D:F7:BA:B2:64:3A:11:0A:2C
X509v3 Authority Key Identifier:
keyid:6E:CB:28:5D:26:BD:E0:99:7D:DE:7D:B8:48:9A:A1:D6:E0:4A:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bssoXSa94Jl93n24SJqh1uBKxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/bssoXSa94Jl93n24SJqh1uBKxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/bssoXSa94Jl93n24SJqh1uBKxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5a:71:5c:df:47:27:39:71:6d:aa:3c:38:76:41:08:36:8f:
c4:e7:63:bc:e7:47:c6:ef:ce:fc:f3:f7:85:e9:6f:33:54:20:
88:72:85:58:8c:97:13:6d:78:8a:ac:2a:20:e5:7d:91:77:e2:
f5:9b:c1:ef:cc:e1:e8:36:cf:90:13:b2:69:f2:13:36:bb:f2:
80:ff:63:d7:dd:4e:0e:aa:2d:17:b7:b1:2d:1a:06:6a:1b:f5:
34:07:ca:6d:79:c6:5d:67:ce:de:5d:f1:68:5f:96:d5:e5:49:
13:e3:ab:34:4f:e9:00:87:14:0f:71:b7:89:a7:1b:75:bc:c9:
87:e7:7f:1e:8b:3e:e5:f5:e0:04:42:33:7a:c0:58:d8:55:28:
74:8a:f3:46:19:70:b7:46:6d:3d:f9:3c:ba:1e:bf:46:31:29:
7c:d6:f8:30:d1:ab:1d:24:65:ed:79:52:e1:c3:84:04:85:df:
47:4f:94:14:da:a5:7a:8e:0e:9f:cd:80:a3:f2:34:59:24:9c:
62:fd:58:19:f4:ff:c9:95:5a:3a:73:2c:f5:bf:8b:8e:80:2e:
30:ab:03:6f:b7:9a:cb:99:9a:05:4b:4d:f6:23:16:d1:ad:1a:
3f:4c:6a:28:d0:d2:30:f0:f3:93:4d:c1:9a:65:45:49:fa:02:
58:7e:e1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:42:32 2025 by rpki-client