Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: DGciTesG6NTSuzw3zt0JUoJJrcPN0ceWMKsKn7bNaM8=
Subject key identifier: F4:02:01:80:4A:67:1F:A1:11:53:21:4D:E7:BF:A6:7D:40:D6:6A:AE
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 0194BC3BEEC4EBB3868909A35BF18C5E606D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 06BF
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: 9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa (hash: dWSzFCZcssBKJcBODdxFw6oV27vvhXKSqLYxiGBOtGQ=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: pLcwccFebI53vHIjA84AHp7bBfYrk5aV2HLkAHzX2Js=)
3: hEhkAm4wvhKI8lm4TouQ913BI64.roa (hash: QBQPmns85EKoDttpiWLYZhYuUsat9iVL0D6w2NFPGj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ee:c4:eb:b3:86:89:09:a3:5b:f1:8c:5e:60:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=f40201804a671fa11153214de7bfa67d40d66aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:55:c6:00:03:34:c9:99:20:c9:75:0e:5d:ee:
9b:93:6e:4c:f5:fe:75:14:09:6e:bd:a5:d5:1f:ed:
54:49:f5:74:86:d4:3a:ef:ea:4b:b8:2e:00:ef:91:
a8:0d:fa:c2:3b:77:7d:1a:bc:d4:02:8c:1b:97:c6:
12:e9:64:3d:13:d2:69:15:20:b9:b2:49:d7:4a:24:
db:d7:89:e4:64:a3:b0:83:1d:f2:33:6a:41:f3:ca:
59:80:0c:f9:92:ec:49:87:d4:cd:a1:2e:37:a9:0b:
ff:34:f5:5b:45:d9:cb:76:49:b9:e4:ff:99:0a:48:
e4:ef:ae:c2:78:db:ec:2e:69:72:e1:e1:16:af:58:
5d:f9:5c:ae:c0:a6:b1:65:ed:6a:f4:3d:b9:ca:23:
55:6c:71:c0:31:91:7f:39:dd:33:b4:a9:22:7a:d4:
e1:b3:4b:7d:c8:b3:b0:25:6d:1a:f6:77:80:08:f4:
a2:80:e7:e6:1e:68:3f:3d:54:91:cd:a0:5d:e6:c9:
33:a4:21:87:d2:b7:1e:2e:ea:6e:52:9b:b6:02:ce:
58:16:bc:cc:b4:63:39:84:6c:c1:a9:bb:c9:5d:74:
af:4f:a0:46:45:40:ec:fe:de:dc:04:94:a2:a4:1b:
d6:26:9a:6f:36:35:72:f0:9b:68:95:29:a1:67:04:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:02:01:80:4A:67:1F:A1:11:53:21:4D:E7:BF:A6:7D:40:D6:6A:AE
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:aa:88:fe:52:d5:45:e2:6c:84:40:6f:a9:a3:34:43:a9:61:
9e:7e:be:93:c8:3d:22:2f:d7:ce:8f:af:fe:f9:e9:32:c5:6d:
70:43:5c:e1:21:46:da:74:71:ee:64:4d:72:db:10:c4:33:42:
93:53:de:98:2a:c4:e4:07:41:fd:f7:cc:4c:08:d6:27:e8:ef:
3e:6a:6a:35:b8:1f:05:ff:1e:bf:11:28:fb:e4:2d:fc:ba:a9:
0c:58:fb:fe:ed:5e:ae:02:0b:d1:8b:55:fc:d7:c6:e6:b0:3d:
c2:5b:17:73:07:4a:ef:5a:c8:9d:bb:0e:72:1a:8e:8c:b2:54:
4e:c1:c4:1b:67:e2:57:c9:26:f3:65:63:99:20:68:58:90:9b:
f3:87:af:5b:6d:15:22:44:8b:af:09:9e:73:b6:59:50:11:cb:
9d:4f:ca:63:e1:57:d5:39:70:2f:13:71:4e:28:dd:ad:50:09:
6e:40:8b:89:e9:11:64:c5:c1:3e:af:25:83:7e:b6:01:a8:60:
cb:e4:1d:bf:b7:b4:95:e5:65:b5:0b:dc:15:fc:1b:74:e5:73:
b1:3b:f3:0c:43:c5:72:ef:c4:5f:68:67:7a:91:e6:35:a8:18:
72:d9:53:6b:14:6c:ed:25:8f:d9:1e:4d:5e:f1:57:9a:4f:64:
70:14:bc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:00:00 2025 by rpki-client