Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: r8/k5tRYM31yO8+sRohcOI+5tHJh4fnGfSWo3hLW+Dc=
Subject key identifier: 47:8E:B8:C3:17:74:33:87:26:D7:38:23:F6:E7:54:79:5D:05:C0:58
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 0194BCE0934D6FAADB301BFB029E84849BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: 8dQ0OiRLtZPhu3GEjEb_mugx5KE.roa (hash: 89OURcYF/hYXZlt3wuPoB9EB6Vna11HJsZwd0rNl1Eo=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: a4xRohOLC5YDgwzO/VXZV2+/gs3v6I/fv8PBlbq96tc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:93:4d:6f:aa:db:30:1b:fb:02:9e:84:84:9b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=478eb8c31774338726d73823f6e754795d05c058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:0a:52:e9:8a:19:e4:11:cc:d2:1c:e6:91:
c4:9e:64:9e:78:58:b3:11:4f:37:0a:ab:8a:6d:e5:
26:4b:8e:e1:2d:56:b3:f8:df:6f:e6:f2:67:67:d3:
bd:e4:42:5d:a3:01:75:77:e7:44:ac:fb:01:aa:fc:
0e:99:74:2c:9d:6b:72:c2:3d:52:64:2f:02:f7:96:
17:48:8c:f9:98:31:b6:08:b1:bd:12:19:1e:91:93:
c7:26:07:b2:c7:13:b6:c5:96:30:5e:af:4d:30:d2:
04:28:08:53:11:f8:fb:9e:7f:40:d8:c2:32:62:fb:
93:70:aa:7b:d8:97:a6:75:2f:cf:5c:58:14:c9:38:
55:82:38:ff:2f:0e:bc:32:d2:d1:94:e6:00:8c:11:
18:76:c5:ac:f9:9b:0f:64:3f:2b:61:35:75:c6:20:
75:b2:82:23:76:48:2c:08:82:17:24:11:61:73:ff:
fb:38:68:f7:c0:c9:0f:49:77:33:92:a0:bf:63:d1:
ff:b2:d3:a3:30:1b:dc:44:c7:ba:fc:b0:1a:96:22:
03:3f:9e:20:5a:21:a4:27:71:88:9e:b3:ef:e3:db:
32:3a:83:0d:17:65:0b:f0:56:04:5f:04:2c:94:9a:
ba:27:85:39:a2:34:c4:cb:d2:21:0e:4b:dc:45:29:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8E:B8:C3:17:74:33:87:26:D7:38:23:F6:E7:54:79:5D:05:C0:58
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7d:66:2a:77:9d:15:0b:87:83:43:5a:81:6e:34:f0:6a:f1:
ea:50:2b:e4:f4:51:80:00:8b:51:2f:17:af:04:b5:6e:ff:98:
84:ca:90:31:35:30:b5:a2:11:6e:21:37:75:71:c6:d4:e6:6b:
be:cd:60:0b:8c:d5:70:8a:54:01:97:58:79:71:96:44:b5:78:
b4:48:79:5c:76:4d:41:79:06:9c:c9:bd:90:a1:21:9b:cc:7b:
91:68:da:78:4f:1e:3f:77:50:b6:00:2e:56:dd:f8:25:98:df:
9d:08:0a:fc:54:22:f3:60:b9:51:fa:8f:7c:ec:65:44:e0:d3:
17:bd:57:9d:69:52:7c:b5:e1:d4:50:54:2f:b0:c1:32:78:7f:
fc:ff:5b:f6:c5:f8:e2:04:5e:c5:e5:c2:14:69:f3:eb:c8:97:
d6:6d:69:51:01:47:0f:27:7d:1a:a1:c8:fe:ce:94:90:80:6e:
39:9d:9b:e2:2e:fd:8a:09:77:90:80:e8:25:6c:74:df:f0:57:
a5:46:ab:3a:6e:36:07:b1:5a:d1:47:56:f1:59:65:64:7c:b2:
ef:6d:cd:21:39:bb:8c:af:48:09:dd:6f:00:c8:9f:85:1e:d6:
03:88:de:69:3e:5d:9e:fa:7f:c0:85:2f:53:e2:79:05:c6:92:
86:76:03:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:08:23 2025 by rpki-client