Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
File: b4CWRAfF2qRAiKz-leZIi4APreU.mft (raw, json)
Hash identifier: lCRjT1aR7nsVG9/D8xrydvXoU8fOvVkqJGrc7UJOUCU=
Subject key identifier: 5F:F9:3E:32:8E:AB:DA:95:E9:AE:F0:8D:46:B7:78:E8:6B:52:81:9C
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial: 0194BC04FBBF6D758A739E966F7D5BD7C0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
Manifest number: 0C26
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: F1clSCHfCrBchpNItB3_ECdQ4G0.roa (hash: UEaaY9HoQsqjcDAMUvi86kguZEF+pqvnu6gxjIkAd84=)
2: UvaL6VYsICABr4f2mztYJpGnmok.roa (hash: sDs2WTxe4PeqzEe78b/roJLSHAUp5tH9OZKXA5ved2I=)
3: b4CWRAfF2qRAiKz-leZIi4APreU.crl (hash: rnQzh8BjsR7FNfIjyuu+ijMYGfiBZzA1sfe7iT4Qx6k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fb:bf:6d:75:8a:73:9e:96:6f:7d:5b:d7:c0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=5ff93e328eabda95e9aef08d46b778e86b52819c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:31:72:0b:05:00:a2:f1:d6:2c:5f:1f:d6:
97:5f:e2:6c:42:15:6a:1a:28:1d:35:e6:17:cc:9e:
38:90:18:a8:a2:fa:b2:df:7d:72:c8:4a:55:2d:15:
fa:b8:c4:83:10:f9:7a:2f:40:e6:77:de:fe:75:a9:
e4:2a:c5:22:98:7d:f6:91:a9:4c:8d:91:30:44:9c:
84:83:15:2e:a1:8f:c5:7e:20:46:1d:09:f8:79:1b:
ab:fc:ce:4b:6a:54:a5:f6:41:b2:3b:df:5e:9e:b3:
89:1d:f8:2a:4c:bc:aa:92:83:c9:79:f0:77:24:ae:
b9:a7:97:a4:cb:07:c5:65:05:30:b0:a7:31:3f:cb:
cb:b5:2e:e8:58:e6:54:2c:5f:67:36:ff:5b:f3:30:
b9:ef:49:1a:22:ab:c9:be:00:3c:51:6a:a0:da:87:
99:1a:a7:3b:0d:37:e1:6f:07:32:1a:73:8a:1b:a7:
67:c4:05:5c:27:43:58:97:88:cb:5d:4f:73:ff:34:
aa:a6:20:cb:7e:a0:d1:f3:e4:2e:77:05:30:30:e6:
7f:ec:b4:11:99:ce:e4:16:77:b8:25:20:86:26:67:
07:e7:c9:f5:94:95:d1:53:34:b2:dd:97:7e:dd:30:
48:b2:38:b5:ba:1e:f9:93:5f:04:67:6e:7a:b9:71:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F9:3E:32:8E:AB:DA:95:E9:AE:F0:8D:46:B7:78:E8:6B:52:81:9C
X509v3 Authority Key Identifier:
keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d0:26:1b:ce:a9:93:80:4d:3c:85:80:82:4c:7a:16:72:38:
84:ee:50:fc:20:54:25:36:d6:5a:77:71:54:68:fe:4d:50:6c:
d6:5c:ce:d2:1a:33:53:c2:52:4c:59:92:0c:1c:08:62:01:ca:
74:00:db:b4:d4:da:3a:78:e9:72:64:7e:6c:98:56:2c:3b:d5:
fd:80:69:1b:f5:d2:b9:7a:0c:9d:51:bb:ef:ca:ff:47:cd:69:
c1:90:16:ad:86:81:5c:62:25:30:fd:93:00:46:8c:b1:05:e2:
21:03:ce:51:a3:8a:ab:65:4c:44:11:dc:20:07:6c:38:db:0c:
e2:68:7b:38:ff:e6:78:df:ec:58:e7:53:79:ab:d6:b0:ac:d5:
76:e5:58:43:64:d2:db:7b:b7:8e:07:18:14:fc:62:a8:de:d0:
f0:b8:87:7e:55:e5:3d:31:a8:f5:0b:02:8c:82:3c:c4:d8:1b:
a2:2e:44:ab:78:e0:bc:ec:6d:64:e4:51:cf:ca:6e:22:c4:dc:
5d:00:d8:f4:9f:9e:03:50:d5:f7:c9:48:b7:97:65:c7:13:ea:
4f:30:89:a0:ba:a7:91:b5:e9:0b:bc:c6:b9:bc:c6:41:6b:0b:
2d:fb:d1:a8:44:fa:b8:21:67:84:66:46:c4:e4:4b:f4:15:e3:
c8:90:50:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:56 2025 by rpki-client