Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier: baPxFbYlRN6Ij5B3vZoc2kInmtYlmTe2Nb8fxK8DaRI=
Subject key identifier: 91:A7:18:97:A5:D7:17:17:79:EA:61:31:D4:A8:83:85:C5:0A:B1:EB
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer: /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial: 0194BCE0B638A0453537E6F0B853315875F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number: 0B20
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: 534vF5sjkwJDGuUSMSbyeoXyx-w.roa (hash: yaE3+RBNj5kJXWkdpo0vdtCXgmh99gzWa0o0cozuQ7M=)
2: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: acezjZGwww1yiVscOSDcfeC4rsgUIuuGzIfFXezNYWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b6:38:a0:45:35:37:e6:f0:b8:53:31:58:75:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=91a71897a5d7171779ea6131d4a88385c50ab1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0e:a8:5a:4b:b8:07:d3:42:67:32:fc:e1:93:
d2:72:ac:de:9e:ff:8d:4a:01:5d:0c:83:4a:09:61:
5b:bb:1b:93:e0:09:b7:ec:bc:c4:dd:d7:a5:30:44:
6c:bd:e6:6e:bc:22:9e:55:df:f0:10:b1:6d:ad:13:
27:91:11:54:4c:ae:05:fe:f6:e6:1f:84:e3:e0:40:
b2:dd:01:a7:c8:8c:b9:15:c7:96:13:99:ce:e4:14:
0d:59:91:22:90:8d:da:f5:e9:59:4a:55:06:8c:93:
a7:24:63:12:08:29:e9:78:4e:ef:0c:aa:b4:48:e4:
21:b9:bc:45:cf:96:0a:17:ef:7a:81:33:b7:c2:5c:
5a:16:77:8e:54:74:95:69:11:8b:6d:21:9c:d7:76:
47:ab:44:52:78:69:2e:23:55:96:17:c4:44:c2:41:
94:16:42:f5:95:8d:8e:aa:b0:3f:95:8e:57:bf:e4:
87:89:56:5d:90:7f:96:ec:37:ff:50:ca:cb:05:48:
76:8a:d3:96:b3:ec:47:d2:80:52:be:89:f8:bb:d0:
70:ca:3d:1b:50:4a:21:a0:df:09:71:1a:71:ff:f8:
c7:4b:b9:64:f2:9d:a4:89:a9:fb:83:de:bf:99:ff:
55:75:45:51:5a:db:71:e8:d8:4b:a4:a0:59:1a:6c:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A7:18:97:A5:D7:17:17:79:EA:61:31:D4:A8:83:85:C5:0A:B1:EB
X509v3 Authority Key Identifier:
keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:dd:18:6e:d6:75:15:fc:fd:f3:db:45:fd:44:d9:00:66:42:
6b:3d:6a:a2:12:6a:ff:dd:f4:30:04:5f:f2:3e:a3:48:1b:65:
7d:ce:67:48:70:60:93:88:65:0e:18:74:9c:ba:8a:94:bd:61:
ce:a3:9f:c3:fe:aa:95:e4:b4:57:76:19:3c:f6:97:59:04:5b:
fc:14:63:ed:e9:39:8b:7d:34:f2:a6:0e:2b:0e:99:5c:d3:da:
e5:32:a3:17:24:72:77:f6:a2:9c:da:9e:6b:51:7c:90:55:4a:
ef:58:f8:88:ca:78:47:1c:76:a0:15:3d:05:81:79:7c:9f:08:
2c:52:3a:fa:c2:4c:c5:c7:18:f7:40:22:1d:f0:ee:cf:7c:b5:
9e:13:4d:9f:81:ce:f2:2c:4b:34:43:fd:93:6e:44:44:81:be:
ae:74:a5:26:74:7b:b7:23:d9:3a:6d:40:20:51:50:00:93:33:
8d:f0:eb:d4:2b:90:ae:df:d4:d6:21:5f:f4:00:7a:57:2c:94:
bc:05:99:95:b0:65:39:47:01:68:bb:e7:f5:da:e2:0e:77:bc:
d9:f7:c1:51:14:34:cb:09:98:c4:07:87:e8:67:f4:f7:98:b9:
f8:d6:a4:8a:03:ae:ef:44:9c:61:2f:44:63:3c:3e:21:19:73:
a0:44:15:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:36 2025 by rpki-client