Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
File: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft (raw, json)
Hash identifier: Da/D0YFvc6VCwR1bLget6avWH40M6EpDXGAXQN+/FjE=
Subject key identifier: C3:08:EB:3C:B0:3F:9D:ED:99:2B:9F:77:4A:F1:25:C4:10:5E:78:44
Authority key identifier: E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
Certificate issuer: /CN=e96a769beca3b1932955158135596365c43c83b1
Certificate serial: 0194BD4EA7687D9F8536D978477B5D2AE820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
Manifest number: 0BA5
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl (hash: 56pntsUce7MZIqXxI0cxW6TKxVhcYlZxRhNPZYHlWFk=)
2: Qt-NHTWPG9Blnlp9KwVRBT4_TNs.roa (hash: iMKB/O68vIbAIcl8B86g//4tQCSnWahP5EtY42n7PM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a7:68:7d:9f:85:36:d9:78:47:7b:5d:2a:e8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96a769beca3b1932955158135596365c43c83b1
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=c308eb3cb03f9ded992b9f774af125c4105e7844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:f4:21:08:53:e6:66:3b:e4:bd:7b:8f:7a:
a3:91:0b:c9:f5:9f:06:0b:6d:65:5f:c6:0d:16:17:
d6:a6:93:07:cd:c8:4c:34:24:c1:8d:40:d2:d4:bb:
56:cf:80:d3:2c:8b:9f:80:73:eb:b5:2c:fc:e5:53:
b3:ee:e1:15:bb:f8:77:67:49:bb:5c:7f:f8:e4:6d:
03:d3:3f:06:4f:0f:e2:2b:e4:4e:01:36:c7:64:a3:
e5:1c:47:1f:89:85:fa:a6:66:0d:82:63:f8:e3:5a:
11:6b:86:0b:ac:f7:b2:6d:9d:fc:d5:14:96:fb:a1:
1a:c5:dd:86:ac:d9:de:0a:4e:5c:4d:fa:b1:67:61:
1a:21:70:e3:6e:e0:83:f5:93:07:ec:4b:30:d6:b9:
bf:d8:df:99:9a:7a:33:1b:c2:eb:b5:91:44:2a:2f:
46:5f:c3:a6:1a:9b:b5:7d:5c:5a:61:0e:9f:80:23:
eb:63:53:8f:28:69:df:ff:ea:a9:1c:49:7f:c3:ed:
ff:87:b6:41:35:df:82:51:a4:3b:7d:30:a2:9c:18:
99:a9:e3:59:79:16:b5:f9:40:a7:f9:68:04:67:94:
a5:32:e2:f8:13:c5:40:be:c0:5f:5c:20:d1:6e:ad:
3e:8f:31:df:7d:cc:46:a8:bd:f6:67:e4:d7:c3:0b:
cb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:08:EB:3C:B0:3F:9D:ED:99:2B:9F:77:4A:F1:25:C4:10:5E:78:44
X509v3 Authority Key Identifier:
keyid:E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ba:13:7f:bc:e7:fd:42:9f:f1:a8:af:04:54:92:b5:ac:73:
db:c9:95:24:8f:38:b9:9a:d8:f1:33:3b:41:c3:3c:c0:43:ad:
92:78:93:7d:52:6a:f5:d9:b7:19:8b:b4:61:cf:bc:51:7c:b4:
2a:ef:7b:a6:6e:3f:b6:19:e7:1e:ea:bf:cd:2b:a4:5f:75:6a:
ee:60:d4:cf:1c:65:a1:d7:b4:32:6d:67:07:d3:b0:28:d4:91:
20:ba:c2:78:b6:34:1f:14:3c:be:23:f5:40:d0:67:c5:a8:1f:
2b:1d:0c:3b:8b:2f:58:ff:7f:71:b5:27:e9:d9:2a:e7:66:d1:
81:2a:f4:0a:f7:a3:75:97:4f:d0:d3:15:8b:06:2b:8b:3c:27:
be:99:ad:d3:c3:50:53:76:80:c9:88:02:46:38:17:2e:58:0e:
54:91:01:e8:75:4a:76:64:84:df:f5:4d:7f:1b:ef:f2:ac:2b:
d4:68:d3:dd:17:96:f4:01:2d:7f:02:cd:68:2e:42:58:e8:3a:
5a:1e:71:ae:e0:fd:01:c2:aa:74:fc:54:27:72:7e:26:58:16:
83:c7:87:ae:66:55:1b:6f:2b:34:dc:40:a8:c9:ea:6c:06:5c:
93:e3:28:73:26:ec:3d:bc:2d:6c:7e:fe:43:2d:d9:3f:c8:d2:
14:49:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:50 2025 by rpki-client