Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File: v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier: 4z8lUZVxQNCHKZPsYNo/UOgbrCtbFjMug35uwUfOJ3Y=
Subject key identifier: 08:26:A5:86:1E:88:AB:31:7A:46:0A:2D:FA:B6:E8:E3:9A:A6:92:A8
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial: 0194BBCDCE96D2E6CA3297DB2AE4D14536EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number: 0BDA
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: UIZd9CI7aaVoCr978zA_tJuQwXc.roa (hash: gtKlay3p/m+1ysOhvty8fHbcgsJz5ALUFkSpQwwLWbI=)
2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: Iqa6n5VsNuWKitaT2zBgoc60KKhEPboRiziqFMuQI5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ce:96:d2:e6:ca:32:97:db:2a:e4:d1:45:36:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=0826a5861e88ab317a460a2dfab6e8e39aa692a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:96:33:18:e1:af:35:53:0d:2e:50:5e:55:
ad:cf:22:6f:d6:c6:43:85:4f:65:60:ef:39:55:1c:
fc:80:24:8e:3f:11:3f:09:ee:7a:9c:81:d4:c3:31:
fa:bc:c9:a2:6c:40:95:9a:13:5e:ea:86:82:d7:c9:
a1:7a:f8:44:d0:9f:1b:2d:fc:fd:c8:21:84:f9:95:
89:36:1f:e8:2a:07:27:39:be:f4:08:81:01:48:db:
a8:71:78:fd:7d:4a:cf:f8:96:04:df:c9:eb:b8:1b:
92:ca:87:16:9f:a8:03:68:98:97:91:66:02:4c:be:
9a:ea:ac:fc:44:1a:b5:b5:ff:9d:73:a4:71:55:8b:
48:93:4b:ec:0d:be:5f:41:25:96:f7:bb:ca:61:90:
ea:55:57:d6:23:0b:92:a2:e9:5a:44:a8:95:5e:ad:
a7:f5:ab:41:0f:25:0a:4d:b3:57:35:53:11:cb:d9:
e9:85:1d:2d:57:c2:d1:a0:bd:38:74:c2:0c:6b:95:
b3:ac:58:4b:b5:09:d1:44:8a:50:36:7d:9f:b3:82:
26:52:dd:e6:3b:62:c8:e1:09:c6:69:d4:25:60:16:
d6:63:5b:4d:1b:e8:81:c6:f3:98:61:b5:44:7f:72:
8e:26:d2:e3:1b:81:06:f5:90:3e:2c:42:4f:c9:19:
64:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:26:A5:86:1E:88:AB:31:7A:46:0A:2D:FA:B6:E8:E3:9A:A6:92:A8
X509v3 Authority Key Identifier:
keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6d:fa:47:4f:ac:1a:4e:a2:dc:6c:06:b3:b7:27:af:e4:24:
26:a0:d1:f1:26:97:c6:74:39:9c:be:5a:1c:47:13:17:ca:23:
b8:64:68:c5:ed:b4:2f:b6:7d:33:84:fd:e7:85:c5:53:76:53:
c5:51:35:a0:4f:f9:3f:5c:c5:21:01:da:96:18:06:5f:41:51:
d5:46:9c:42:6b:7e:67:20:76:25:b2:e7:e2:36:51:4f:bb:5f:
ef:e5:c7:1f:0b:d9:36:52:f5:35:bd:d6:d5:68:32:a5:b7:1d:
4e:73:1b:10:64:43:3b:65:37:b6:83:e1:19:66:9b:00:7c:2c:
fc:f3:90:57:13:c8:f5:3e:f6:97:56:81:9e:8c:d2:56:2e:81:
0a:2f:d3:93:ca:8d:ef:f5:b3:21:bc:07:f4:13:3e:4a:6e:82:
b1:dc:2c:a3:79:22:2c:44:c2:46:f8:8d:71:95:b9:8d:75:e1:
a3:03:5d:db:3a:5d:4a:99:cd:a6:5d:38:77:d0:29:63:6f:c4:
65:08:ee:f1:60:81:69:7c:2e:49:ae:ad:a1:a8:96:1f:a5:78:
0c:8a:d9:66:98:36:25:ce:e0:b8:3f:a7:a6:1e:e8:74:aa:36:
7e:f1:5b:bd:da:d5:df:8b:e9:22:bb:b8:12:00:9f:51:99:4f:
a4:6a:d7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:40 2025 by rpki-client