Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
File: b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft (raw, json)
Hash identifier: 5Pvx3Momgw7uWF0OIkIPfrerKa4g4fzs9urbaP9eu4Q=
Subject key identifier: 29:F1:B4:EB:26:36:4E:E8:86:88:88:F4:98:84:02:3B:84:5B:42:69
Authority key identifier: 6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
Certificate issuer: /CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Certificate serial: 0194BBCDD4A9CC673A039B681EB1F41F2331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
Manifest number: 136C
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: SAc4N5mOYskXXQItNaC6-fHezN4.roa (hash: 3vn4QWZ4UzqrNwc2gut08M7Edo0Fd06IMg0+84eAYXA=)
2: XVZjts2IAQT3D-3i0mJSagboiZ4.roa (hash: P8G3dqnA4ISbflUuxnqvGaJIWR204WqE02ZEJaENHX0=)
3: b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl (hash: 8L81Dnl2VmfFYj8E8U6oNDaOL3v3aaKHi93pynMoRq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d4:a9:cc:67:3a:03:9b:68:1e:b1:f4:1f:23:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=29f1b4eb26364ee8868888f49884023b845b4269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:b8:61:d2:b9:06:18:ef:3f:f0:57:e5:bf:
c4:34:41:82:28:cb:af:f0:3f:f9:38:d1:ff:1d:03:
5b:a7:a7:f4:b7:de:8d:cb:04:a1:f6:63:56:a5:24:
ec:89:4a:d0:84:64:67:48:c2:1d:fc:85:a8:98:b1:
3e:d1:48:ef:73:d0:f9:20:25:c6:ee:3b:7e:a3:44:
24:63:1a:2d:5d:14:dd:b3:3e:a3:51:88:bc:e2:cc:
13:9f:23:2c:89:26:37:ad:06:44:f8:f6:e0:fa:ff:
63:ee:71:14:6e:a9:81:3c:6a:11:35:5b:18:4d:2d:
76:6f:c0:7f:66:c2:6c:86:d5:39:b9:60:41:ea:bf:
e0:ad:4c:b5:68:a1:ae:ce:25:88:ad:39:27:3a:9d:
3d:96:83:91:7b:e0:2b:86:f4:a6:ae:aa:30:d9:ff:
a0:60:97:fc:2c:da:30:ea:f9:57:0e:e4:61:0a:0f:
19:a7:c9:1e:c7:73:be:65:68:1c:a3:6e:e3:44:5f:
43:75:0d:89:3b:32:2f:b4:e5:66:7b:c9:17:be:ec:
1d:54:19:1e:76:a1:da:b8:5f:05:8e:3a:81:44:f9:
ed:8f:31:18:76:11:d2:29:a4:a2:b1:87:21:1d:e3:
73:b7:49:39:15:cd:73:d3:43:86:e2:8a:0f:76:35:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F1:B4:EB:26:36:4E:E8:86:88:88:F4:98:84:02:3B:84:5B:42:69
X509v3 Authority Key Identifier:
keyid:6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ab:fc:51:b2:d3:0a:39:2f:1f:03:a6:42:da:66:bb:66:78:
32:e4:a4:ba:8c:90:c9:b2:04:fb:8a:16:be:0f:78:7c:b2:cd:
c2:0c:f4:7d:5e:c6:f7:8b:9b:1c:66:3b:4f:7e:96:39:fc:5d:
34:6f:5b:2d:5a:de:35:05:94:2f:b8:e3:41:8a:65:73:76:a3:
da:34:39:62:6c:e8:55:99:fe:e7:5f:72:ed:38:d7:f3:0a:84:
8e:12:3c:a6:a0:a0:7a:6e:ac:43:8f:21:4d:9e:36:23:62:71:
ed:0f:3a:e2:4d:00:4a:d0:7f:8a:25:cb:b7:0a:56:fb:46:68:
d0:70:c7:77:74:66:75:0b:9c:aa:97:c8:f6:fc:f8:fd:35:05:
1d:25:38:6c:b1:88:12:02:08:4e:33:28:68:cb:06:44:63:ce:
e2:b4:d2:45:6c:4a:9d:59:fb:4b:aa:63:87:82:f2:bf:8e:4a:
77:a1:2e:fd:fa:cd:c4:f7:f7:db:cc:db:67:0a:9d:f6:1c:22:
9f:01:72:0e:1c:15:78:83:3a:6b:21:e5:7a:f3:ba:f3:88:09:
c3:0f:f2:5f:aa:54:0e:80:0c:a0:83:0a:9d:8a:61:02:91:72:
ba:52:76:cd:10:52:d8:c3:79:86:cb:95:93:b1:03:4b:f2:17:
27:91:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:14 2025 by rpki-client