Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: Cp7mY+RSUgJmxAHy5xh9dv4J4mINYQjFSzxOlRMVT7I=
Subject key identifier: 8D:EE:FE:CB:B3:24:6C:1D:B1:36:05:68:D0:96:74:20:50:59:A0:76
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 0194BC3C05CFA5D90F4489EFC45F2C5410B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 09F4
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: U_3B74ujhAJrCWsRNX6BqqwgnVw.roa (hash: t7MohkwWoi0EopfC0Tnorl6v62Y4aRFAg2yz8Q6y9x8=)
2: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: nR2C5IZSfkm+63B2WhYjsfo+q8G8ow0juTc1I5/C1ww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:05:cf:a5:d9:0f:44:89:ef:c4:5f:2c:54:10:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=8deefecbb3246c1db1360568d09674205059a076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:b4:43:5f:72:02:04:da:6f:ac:eb:a0:44:
a4:1c:45:4d:fc:d0:06:da:fe:48:0b:93:80:f4:aa:
6d:37:92:e4:c6:66:5e:0b:3f:01:30:af:b7:de:57:
f3:c6:81:a9:63:e2:de:8e:01:7e:19:e4:7c:8f:7c:
78:9d:6a:66:02:a2:d9:a4:3e:42:bb:e0:72:e7:1d:
c5:4f:ea:51:a8:28:b4:33:8b:c1:04:06:19:1c:a9:
9c:e4:6c:99:e4:ba:c9:98:6a:92:8c:36:24:2d:ab:
1f:30:81:8f:82:f7:54:c5:0d:1a:b4:03:25:ff:bb:
69:37:33:ea:4f:59:6e:7a:cf:3e:2c:fa:f0:26:2e:
39:ab:b4:0d:fa:81:0d:0e:06:57:cb:7d:bd:d6:9e:
7e:51:cf:7a:5a:ee:a9:fa:b6:64:69:7d:82:1f:1e:
36:e8:c2:f1:61:a0:17:af:86:15:36:25:dd:5d:90:
bf:ba:bb:27:80:46:48:91:cd:70:80:d0:db:6e:70:
d9:c3:15:4c:f1:17:7a:fb:9e:59:dd:dd:89:43:19:
d9:93:cd:ee:c0:04:52:06:1b:a7:bc:27:d5:eb:28:
c1:3a:c1:45:56:09:e3:4b:58:fc:1c:01:d4:51:5b:
2d:53:73:7e:7a:e2:b3:15:01:ba:47:ee:5b:64:63:
30:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EE:FE:CB:B3:24:6C:1D:B1:36:05:68:D0:96:74:20:50:59:A0:76
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5b:0e:6c:21:38:f7:f7:76:59:d2:b4:d7:ec:7f:28:b6:5a:
41:1f:34:f8:c6:fb:9d:a7:3a:ce:75:1e:37:ed:87:5a:2f:46:
39:8c:14:16:0c:b0:dd:b2:a1:39:30:3b:ca:0a:58:14:3c:19:
b8:d0:d9:18:63:58:d7:48:cc:cd:0d:00:54:ae:f9:b6:b6:d6:
da:7a:9c:73:99:da:37:f4:d9:0e:27:48:bf:75:93:90:33:e8:
b0:c9:e2:3b:4f:2a:be:57:c1:f5:75:f6:1f:78:09:2f:25:df:
0a:a0:5c:5f:28:61:59:c5:ce:2b:c9:5c:e6:b0:b2:6b:28:39:
2f:bc:36:a5:a4:39:db:85:3b:f7:3f:13:60:01:21:f8:3e:44:
84:90:4d:7b:4b:e7:a1:39:ac:68:81:77:f6:e9:d2:47:68:c7:
5d:28:9b:19:87:f3:8f:bd:04:4d:43:4e:41:b6:3c:6d:1e:df:
b6:51:3e:0e:0d:92:85:75:71:83:73:0a:b6:d7:53:36:b7:78:
ea:8c:4b:66:2d:d0:d2:0b:a7:f6:de:88:3c:eb:ba:c0:b8:5e:
45:8b:64:c1:f0:10:ec:de:63:88:ee:07:45:c2:7a:4e:d9:7a:
19:c3:e3:e9:d2:57:15:17:8e:5e:b7:40:de:6a:a3:70:3b:69:
4b:a5:63:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:19 2025 by rpki-client