Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
File: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft (raw, json)
Hash identifier: WI500rCUQhj99gbB67SvpYzvvihbZlqzX6KNIBYbsgc=
Subject key identifier: FB:08:57:9D:FC:40:F4:3B:AC:6D:EC:2B:67:11:17:E4:5B:DD:4C:66
Authority key identifier: 3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
Certificate issuer: /CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Certificate serial: 0194BC72DA9789EE556DEC227AEE328EAF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
Manifest number: 0BA4
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: 9-fbWWjNC4mOvVefigl9UV2UFJs.roa (hash: tWgz0w4Sqnk4S40gqRVMtTMDJNe1eyYOZFDB5oZ2xOA=)
2: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl (hash: SH9/KVAM8A5wxqxIS+vfUtAksm3+O+INcfRBvxLGUSw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:da:97:89:ee:55:6d:ec:22:7a:ee:32:8e:af:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=fb08579dfc40f43bac6dec2b671117e45bdd4c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:2d:08:ba:9c:2e:e0:48:25:37:76:64:45:
10:63:83:04:ab:9f:3f:76:76:0a:70:eb:e9:e1:1b:
2e:3e:ba:b9:4c:2d:57:5a:d1:7c:e7:c6:55:7c:ba:
b4:58:98:e4:ae:36:40:82:66:58:60:b7:0a:8a:00:
da:89:1b:1a:a7:2d:f5:a0:b2:f1:fb:17:2e:44:af:
e2:2e:fe:43:27:58:75:ba:b0:7f:d3:f6:5c:65:8b:
7b:f3:c8:50:20:d2:cb:03:3e:49:54:54:15:80:64:
57:c2:4b:f0:24:9a:1c:0d:89:ff:d7:11:d6:1b:8e:
55:a8:b0:71:3d:1a:89:80:df:41:bb:86:a7:a8:8a:
11:1d:8b:6f:57:d9:62:3f:d7:f0:74:a6:cc:41:65:
f6:47:d0:26:45:a6:f1:4b:36:c2:3c:a1:ef:b5:5e:
71:5e:cd:49:82:4f:62:3d:0a:02:19:94:34:c2:e7:
d1:c7:5e:a0:38:8f:00:a4:02:49:13:86:88:5f:5b:
3d:b0:20:f1:8c:45:86:4b:a5:05:f1:ea:f2:f6:52:
7f:19:7a:16:81:b1:72:e0:a8:13:4d:b2:59:fe:72:
7a:86:7f:37:2f:49:ad:57:24:21:d8:11:7b:6f:e4:
73:86:00:ac:07:17:8d:c4:ae:be:7c:bb:27:d0:92:
e4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:08:57:9D:FC:40:F4:3B:AC:6D:EC:2B:67:11:17:E4:5B:DD:4C:66
X509v3 Authority Key Identifier:
keyid:3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:21:a6:f6:5f:fd:45:fb:5b:ad:a0:98:7f:45:73:72:4d:32:
fa:11:6f:9c:99:7e:04:fe:35:2c:0d:72:4d:42:02:ec:c3:39:
a3:a6:5a:23:51:b3:8f:7c:d8:35:08:e5:27:ee:4a:b4:90:29:
1c:f0:36:fe:f7:1a:5f:43:1a:83:3d:f4:15:73:06:71:37:ee:
52:a9:13:54:0e:ab:2e:47:d6:4a:25:0c:59:96:5c:ba:41:53:
5e:14:fc:22:e6:47:21:99:8c:27:24:26:08:97:84:df:25:72:
d1:8b:90:12:c7:f5:73:96:aa:43:f0:83:47:db:19:85:4d:89:
ac:b7:bd:86:4d:04:bf:d6:d8:5d:3d:49:7b:9a:ec:34:2f:5c:
fb:17:93:74:67:35:db:74:1b:50:ca:53:6e:5a:d5:a6:93:67:
a1:3d:7d:1f:cf:44:9f:18:90:23:f3:2b:aa:da:81:b5:03:6a:
0e:69:e8:f2:43:42:c8:f2:f7:ca:42:74:40:42:b2:db:c9:90:
8f:cc:28:c4:24:48:04:2b:f5:b7:7a:0d:73:b8:3c:53:88:d8:
8d:88:d2:ac:28:e6:46:3a:cf:8b:0a:ce:e1:5d:e4:82:8f:a6:
3d:8f:65:72:f0:e0:46:b2:a7:9a:c6:b0:fe:ec:49:b1:90:2f:
fa:c2:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:09 2025 by rpki-client