Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
File: 6oPjDy1vznWmZqLQtja0bsmYocs.mft (raw, json)
Hash identifier: PojLibOY1+6LIa1ptxX95CsRuBr9G2iA9fkW6d2Qn+U=
Subject key identifier: BD:A7:8F:40:D5:50:42:5E:65:75:DC:CB:C2:D5:DB:33:B2:37:7C:F6
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Certificate issuer: /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial: 0194BBCEE526CE97A6EA47E8CD50E95CF103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
Manifest number: 0C4A
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: 6oPjDy1vznWmZqLQtja0bsmYocs.crl (hash: QW0UdwcckOgN0+nAloAw9xeHnrDx2F4HHdleeREEcpE=)
2: PmUQGIgLz8QIpP_lpOReSK54Clg.roa (hash: Se5e2cwGwp5UjA/KSKu5YaznbQl9QedXbnS92uqoCrI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e5:26:ce:97:a6:ea:47:e8:cd:50:e9:5c:f1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=bda78f40d550425e6575dccbc2d5db33b2377cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:d5:3c:2c:ae:0f:2b:fc:21:57:14:54:90:
0d:ad:3c:de:4c:1a:63:3d:cf:a2:9d:44:dc:04:19:
8d:e1:7e:90:73:3e:22:97:36:e7:f2:fe:18:00:a6:
9d:26:9e:61:bb:a4:1e:34:61:d2:0f:8b:cd:e1:ae:
d2:e5:fb:2c:86:1e:1e:64:f4:df:5c:3e:ca:13:95:
1e:e3:4b:24:c4:7d:c4:40:4b:cf:29:15:25:da:04:
7b:44:3f:79:e2:5c:ef:62:2f:69:c3:bf:9b:5d:33:
fc:88:ae:77:0d:a2:c7:9c:ad:03:86:1c:2c:4e:93:
7b:0a:5c:a4:31:cd:0c:18:76:24:ed:71:4b:8d:44:
3a:2e:d9:ce:e2:3d:bc:eb:b1:64:af:27:4e:be:1e:
ef:e7:90:cd:8a:7c:20:bb:00:af:53:af:c6:7e:87:
de:74:2b:ea:62:38:05:60:c7:be:73:d9:e5:09:b6:
96:70:74:14:bc:ac:45:d4:d3:b6:1c:3d:24:f8:ef:
1a:e7:b9:ba:fe:b1:2c:0b:79:0b:61:6c:47:f5:e0:
65:60:b9:ee:15:ff:bf:7b:af:05:d8:7d:70:1b:65:
c7:89:ff:a8:f7:1c:ec:08:cc:cf:88:26:3e:63:dc:
c8:e9:33:3e:fa:4a:bf:57:1e:68:0a:1b:44:2f:7d:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A7:8F:40:D5:50:42:5E:65:75:DC:CB:C2:D5:DB:33:B2:37:7C:F6
X509v3 Authority Key Identifier:
keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6f:3c:0a:bb:25:94:04:14:9e:00:4f:61:76:75:49:65:b4:
6c:3b:88:49:a8:87:ff:e0:18:09:c8:e4:0d:97:e2:84:2b:98:
70:58:7a:65:3c:94:98:3b:df:de:46:5d:ae:71:2e:7b:31:35:
3a:2a:a8:21:11:93:a9:38:34:7a:d7:21:c7:eb:11:33:97:cd:
09:c4:bd:d4:de:8d:58:19:39:47:6a:a3:f4:b4:c8:01:8a:6a:
64:73:05:5c:8d:ce:6f:7c:44:b5:e6:da:e0:e0:cc:0b:62:f7:
04:c7:89:85:af:b8:36:4d:97:be:f1:55:87:6c:c2:8d:c0:97:
2b:f8:e3:a5:48:9f:40:c8:9b:b1:a2:fa:bb:6f:e4:96:d4:c4:
0b:c1:b2:69:d0:d2:8f:5f:e3:0a:35:db:5d:4d:eb:41:63:2a:
32:3e:3b:b2:57:95:fd:71:cf:91:df:09:04:a3:01:fa:30:0e:
cc:12:b9:5e:9b:2b:c2:e6:34:03:06:a4:01:59:8b:44:6c:84:
cd:43:7d:da:bc:71:c6:dc:47:51:af:7a:d9:11:3f:37:06:10:
b4:b4:62:c9:1e:61:40:dd:6f:f2:ed:70:60:60:70:bd:85:6f:
64:25:9a:bc:e5:e4:0e:59:2c:75:b7:6d:46:54:69:87:96:31:
73:8b:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:42 2025 by rpki-client