Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
File: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft (raw, json)
Hash identifier: +5bcnQQ7rrhajE4KOkQq/syLG0GpgOsnYg9M95J7dQE=
Subject key identifier: F5:AC:52:E6:31:06:64:0F:73:E6:5F:38:9D:49:E6:4E:B4:3B:DF:C7
Authority key identifier: FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
Certificate issuer: /CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Certificate serial: 0194BC3BF5A285EAAB3B8373C3D78D4403D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
Manifest number: 0B0F
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: 8eIa-4UA2fnyQQyLs8y9bQIaWAM.roa (hash: SYGKUkvXI/obgdGVYKiFu2OylosInlCBmN7hXgRUyO8=)
2: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl (hash: T9YO6wFFRGyFrkF1wajUNF9n/hSdqs5AXUz5kaNDouY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f5:a2:85:ea:ab:3b:83:73:c3:d7:8d:44:03:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=f5ac52e63106640f73e65f389d49e64eb43bdfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:11:f4:32:f5:4f:dd:f2:33:5c:d4:5a:90:
d7:96:38:3a:d3:b0:b9:bf:f7:84:0f:b2:fe:2c:08:
9e:d7:23:68:26:06:be:ee:5b:87:93:83:fd:62:78:
35:ae:64:32:31:13:84:ab:1c:e5:1a:b2:e5:3b:16:
76:02:54:ca:7a:3b:68:d8:f8:d6:dc:d1:4d:17:f3:
a2:b7:96:2e:9b:7f:d5:7a:02:e0:9a:a3:6a:db:1e:
8d:8f:4b:97:80:dd:62:fe:20:5f:e0:38:f1:b5:d9:
64:69:aa:17:9c:c3:14:0a:37:3b:8f:e3:cc:a3:17:
d3:78:46:0a:b2:f9:1f:cb:ed:e8:ba:3b:90:8a:dd:
e1:0b:bf:6a:a2:00:c7:a3:5d:0f:e5:07:7b:73:11:
d3:9a:98:d3:48:c2:b8:dc:e1:32:ac:d9:fa:18:39:
b0:06:ce:ac:a0:a3:c8:9b:03:59:b1:83:4e:50:f9:
d5:71:cf:de:fe:31:4f:6a:0b:cc:a3:17:8a:d8:a1:
6f:51:17:1c:96:f3:72:66:01:10:51:99:06:21:e4:
52:20:e0:f2:6e:cb:00:37:c7:f0:a5:6a:dd:43:30:
8c:25:b9:17:7b:42:ad:3e:dd:e9:86:f6:ec:0d:8e:
10:82:59:48:04:1b:8a:66:ae:40:04:87:ee:09:a4:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AC:52:E6:31:06:64:0F:73:E6:5F:38:9D:49:E6:4E:B4:3B:DF:C7
X509v3 Authority Key Identifier:
keyid:FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:61:96:d9:c4:da:ca:6f:df:a8:9a:d7:99:d2:9a:85:19:40:
d7:3b:6a:86:aa:3b:53:29:0a:5d:22:9f:d6:34:97:2e:b1:dd:
b8:81:90:12:f2:59:78:98:eb:a5:c3:f9:e1:bf:ab:0b:ac:7e:
fd:2a:cb:6d:89:fe:51:ac:29:c1:6b:7e:9d:c0:6c:c2:18:88:
71:e2:12:3f:14:76:14:6e:77:9c:2e:04:78:ba:f0:74:db:70:
5f:fb:dc:a4:2b:92:69:8e:14:6f:77:b5:77:8b:7e:1d:f6:89:
ad:8d:03:e1:23:89:dc:42:26:52:29:9f:25:dd:18:43:ce:08:
80:6f:0e:43:7b:54:82:f8:16:d7:81:66:ec:c0:c3:65:0c:8b:
10:b3:5e:61:30:34:e5:54:f0:a9:56:fc:a1:d9:07:8f:c5:cd:
1e:30:8c:cc:03:c4:09:41:80:57:60:55:8d:f1:82:3d:74:e9:
16:83:fc:fd:fb:be:ce:1c:8c:1e:b1:e2:87:07:ce:f9:91:76:
49:05:44:8c:a7:a6:0c:ac:6b:e2:f6:0a:cb:bf:06:98:cb:2b:
f2:20:d6:98:80:28:5a:12:7c:a7:ef:02:7d:6f:a9:32:26:58:
79:b1:06:3c:5c:02:5e:e0:09:ca:10:5a:ca:72:44:bc:ea:06:
f2:2b:98:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:43 2025 by rpki-client