Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: kEog5cUoCE3X39Sjl6Qo14hLaGONc7fy3qcs0Ivb1kQ=
Subject key identifier: 76:49:42:58:1E:68:27:2C:38:70:F0:E2:A3:7F:24:95:71:C1:9A:0E
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 0194BC050ED9F4C47976BEB850EA07FB32EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: vI6uz8S5PDIJe3/rPR2U8XMqysNLCffYTzKW1LX2yXs=)
2: LKntu7OdIVDRUeVXjemgx5JdRkc.roa (hash: kna/rCNXXypoDbewR/02DlClr5ejgsrzdo1XT3WKJ6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0e:d9:f4:c4:79:76:be:b8:50:ea:07:fb:32:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=764942581e68272c3870f0e2a37f249571c19a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:7a:14:a9:6c:2e:73:bd:d1:19:79:24:89:
31:d9:ae:0f:cb:dd:04:01:38:eb:f1:09:dd:01:02:
86:48:26:b2:92:23:74:c4:83:8a:d4:dc:da:a5:45:
64:ee:d5:72:87:27:d8:12:63:b2:4a:e9:2f:e4:f0:
41:52:6f:3e:8f:87:ab:41:52:ba:b8:fc:98:d6:cd:
70:a9:3a:3e:37:81:69:d4:96:3b:58:c1:fc:64:d0:
0b:ac:55:9d:6f:0a:b6:0f:8f:d5:9c:7d:14:81:9e:
9b:bd:d1:08:5e:de:32:e0:9a:19:d5:a9:81:58:30:
a1:e6:6b:48:d0:cd:c4:e3:38:82:63:83:51:69:7f:
dd:7f:20:e9:b7:02:6a:c3:f8:61:84:f4:31:15:db:
1e:e0:0c:f5:f9:15:e5:b9:18:08:10:ff:3f:74:54:
dc:bf:d1:90:9c:e6:a0:3c:6a:24:6e:8d:3d:6a:7c:
bf:87:16:9c:19:c5:97:d0:b9:8b:8c:55:e1:cf:33:
bd:18:0e:ee:3e:62:29:e0:f2:3d:b0:3c:8e:1e:23:
fb:e9:a6:3e:bd:8f:43:52:da:37:66:ca:cb:6f:d6:
df:3e:20:27:9c:a4:f2:d6:45:7f:ed:64:11:6d:3f:
f0:30:70:94:c6:9f:eb:89:28:b1:fc:81:93:f9:24:
2a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:49:42:58:1E:68:27:2C:38:70:F0:E2:A3:7F:24:95:71:C1:9A:0E
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cc:54:a3:67:91:80:ef:a2:c3:8b:0d:17:29:9f:b6:3f:a7:
7b:67:6c:61:7b:1c:57:39:4d:c6:1a:4e:89:d3:ec:62:38:1a:
37:03:27:23:a7:c0:b7:3c:8d:33:6b:e8:d7:3e:07:10:ed:9c:
ea:ea:81:e1:46:47:40:ae:fd:ce:db:fa:f6:06:b1:72:d1:dd:
e3:ea:a3:fe:56:d0:b2:b6:38:2b:ab:b2:f6:c3:96:38:e8:7f:
f2:ce:14:59:7c:c4:b1:61:28:88:1b:9f:7b:ab:8f:b6:b6:75:
48:b8:78:e4:44:b7:6b:e6:50:a7:de:88:ca:07:4b:9f:62:29:
58:a9:c7:0d:6e:20:ac:dd:d5:2e:26:63:b9:24:c2:df:95:54:
4d:d0:d2:ce:98:c0:e7:99:e8:ed:ee:df:4e:eb:8d:b6:c5:a6:
c1:0c:d4:e5:c7:d6:0f:74:46:7e:e9:e4:f0:90:24:e9:de:48:
43:43:ec:ea:e9:f7:d3:42:2e:d6:5b:48:fc:f0:b2:39:cd:7f:
4c:29:c2:5e:30:d0:6b:e5:b0:01:23:a4:95:d0:7d:d2:4e:0d:
03:51:18:1a:b1:ef:af:c1:0c:93:64:87:ef:0d:49:79:05:74:
ed:8d:04:83:7f:5a:8e:cc:32:31:c1:05:48:45:b4:e3:8f:da:
1c:9d:ff:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:18 2025 by rpki-client