Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier: OGx3i+hTKye7EPJosik52WDIytBvHDI7hX5Uf+IXPqo=
Subject key identifier: FF:8F:13:C0:FD:91:A7:71:35:B6:63:F4:9E:76:A3:DF:69:BB:6E:FB
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial: 0194BD853BD13E3B23C4CC265AA77F965745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: pBUi9lt88IKPwfWVVac7Sg9yx04l7SAiaMKIlG6Wtj4=)
2: hyaj4NlGFcmb8YwdQipnGWLkuvI.roa (hash: SKjD8sW68Pq2JQ38fUsoQi7UbT3rU+TDmMqbwOOA0i4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3b:d1:3e:3b:23:c4:cc:26:5a:a7:7f:96:57:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=ff8f13c0fd91a77135b663f49e76a3df69bb6efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:16:67:08:31:4b:89:1e:3c:18:f2:5f:5e:
ce:c0:3c:cb:b2:39:73:4d:9d:02:c3:a2:80:8a:42:
e5:4d:f1:2c:38:79:6a:b5:6e:36:9f:49:6b:41:3b:
71:87:24:3d:db:e3:ae:38:ae:2c:c9:8c:bd:b0:6c:
50:f4:28:76:b8:48:e9:b7:ce:b0:da:54:7f:8a:32:
5c:27:0f:f7:55:4b:95:54:58:1e:30:9e:13:e6:e3:
68:cb:68:34:85:77:72:fa:52:d5:e2:b7:61:dd:28:
fd:f2:ab:93:30:a1:a0:74:88:d7:a3:d7:ef:dd:0c:
53:9f:d7:95:57:56:4c:5a:4f:7d:83:c2:a4:c6:dd:
5e:25:18:a8:f4:a6:7c:76:4a:07:07:4c:f8:97:fe:
35:33:1f:1d:fa:38:08:ea:c9:a9:54:e0:2a:12:46:
ac:7b:df:3f:04:95:3f:62:36:e3:ae:86:9c:e5:df:
6e:a5:c2:c8:9d:d3:fa:a8:50:78:8e:86:38:d1:57:
d7:21:bb:85:32:d1:e6:6b:d1:c3:70:ec:6d:31:0c:
4a:cb:b7:04:b7:64:b7:07:ec:49:6d:eb:f5:e2:2b:
37:a4:ed:d2:75:26:2b:0f:b6:1d:37:d0:8a:16:95:
c6:22:ab:5f:1d:cd:12:0f:e4:51:29:43:b1:1c:5a:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8F:13:C0:FD:91:A7:71:35:B6:63:F4:9E:76:A3:DF:69:BB:6E:FB
X509v3 Authority Key Identifier:
keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c9:a3:b8:cf:40:88:c4:5e:63:3a:03:c6:35:69:d4:3c:7d:
3a:f5:7f:a1:74:c3:c2:2c:38:76:09:3f:fa:5e:be:18:32:47:
a3:36:28:64:ee:05:d3:9b:08:1a:52:aa:94:d9:a3:b0:33:d9:
84:cc:24:66:99:b7:bc:a9:8e:5b:10:8d:f2:a6:85:82:06:98:
b3:7f:34:e6:47:b9:c5:a3:91:0f:f6:55:89:e5:35:11:3f:30:
a3:c2:7d:a6:de:75:75:40:05:94:7c:04:c8:22:a2:51:6d:e7:
80:36:19:20:ab:33:dd:c2:66:71:2c:9b:40:06:84:88:e8:4e:
3b:9c:29:af:a5:05:f7:07:9f:68:c4:eb:c7:50:4c:e9:77:2a:
da:53:34:81:f9:be:a3:9f:9d:d6:97:29:0c:97:4c:d7:b8:e9:
5f:60:e9:d3:70:15:4f:c9:49:86:8f:26:46:a3:17:10:fd:e6:
ac:34:21:49:eb:96:5b:59:20:c4:c3:a1:ea:32:a2:0f:cb:04:
88:5d:be:c6:e1:eb:f4:df:1d:b2:f5:07:dc:23:08:08:bd:76:
06:3a:57:b1:ed:85:28:16:7a:44:30:83:83:12:06:f4:47:8c:
6e:02:99:9a:a8:4e:80:d8:61:33:ba:50:62:55:89:58:44:38:
95:69:63:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:55:06 2025 by rpki-client