Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
File: b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json)
Hash identifier: lylgcLMh9f1/OVvGgzWi2u2XTyfK6mvCEcyj6kOCVOM=
Subject key identifier: F0:1B:03:C0:17:44:1F:F7:F4:56:5D:DB:04:4D:37:32:4F:1C:F4:E3
Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
Certificate issuer: /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Certificate serial: 0194BCA9B8992DDFB2FD67B9A41B096E38EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
Manifest number: 07EE
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: ueb8ySKgLY42vZxAKbEjZWdtInuw3pIwI9Mu88EYH44=)
2: pMbs7XGdo_xSX6txJyvIyBbRMlo.roa (hash: 98SgzoxY6svU/NSUJNYIa8/zWjIUUc01QOY2lQs4JFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b8:99:2d:df:b2:fd:67:b9:a4:1b:09:6e:38:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=f01b03c017441ff7f4565ddb044d37324f1cf4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:4d:8a:d7:f6:65:98:0c:4a:be:39:1b:e2:
12:08:a0:61:4d:ad:5a:54:5c:08:c0:64:90:23:77:
b3:6e:d8:3e:ed:f2:fb:91:78:3d:ef:e0:0d:b8:13:
87:a0:67:f8:2a:06:d8:d6:31:be:9a:a0:79:3e:c0:
0f:50:47:08:f7:ce:0a:45:cb:e7:3b:45:28:cc:80:
79:a3:a0:93:77:ed:b8:30:09:1e:de:24:ae:60:05:
b8:90:cb:a9:46:3c:1f:b3:61:86:31:df:78:5d:41:
88:d9:e8:e6:d7:f8:cf:75:33:f4:2d:29:36:04:74:
e1:ef:5d:eb:55:ca:76:17:39:64:40:52:a4:3f:29:
57:97:64:1e:63:f8:34:f5:40:5f:82:85:66:b8:34:
b0:c7:9a:55:3d:dc:ac:c3:74:5b:66:5c:16:b8:4f:
34:26:28:cb:82:c0:a4:c6:ad:a9:92:e9:07:08:1d:
6e:db:71:09:36:d9:27:b6:9e:5d:33:64:52:c7:26:
41:1d:ad:3d:ed:ae:1e:a2:db:a7:ca:1b:90:c5:2a:
7c:ab:f8:d6:40:cf:fe:77:92:9a:e8:61:a5:3b:e4:
88:22:49:bf:1d:05:bf:7e:2b:c5:b1:03:a0:86:25:
9d:d3:e5:c1:76:4b:db:d8:3d:6b:b8:b8:27:09:82:
c0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1B:03:C0:17:44:1F:F7:F4:56:5D:DB:04:4D:37:32:4F:1C:F4:E3
X509v3 Authority Key Identifier:
keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:60:df:44:b0:96:01:ee:75:d6:1a:48:b8:e7:79:96:f2:9a:
db:9e:ed:5a:0a:e0:27:53:3c:ae:50:5d:9a:f4:c7:bb:1d:4c:
8a:89:be:4d:7d:0d:23:5a:a3:23:d2:e2:8c:6d:bb:c8:d8:a0:
bc:f3:6e:ec:73:38:a9:4d:71:dc:e1:b1:75:6e:9d:0d:ed:ee:
37:3c:33:0f:f8:48:d8:30:8a:16:aa:2b:49:f8:0e:50:32:d2:
4e:f5:36:04:30:37:c7:80:e3:6d:59:e3:ea:c8:0d:18:b0:8d:
c4:d5:a5:2a:aa:e2:32:b4:75:f2:b8:23:9b:ec:2a:8f:f2:6f:
90:fb:22:11:f2:90:0c:ad:c5:57:e6:e7:64:4a:0e:c4:00:b2:
0f:3f:b4:2f:80:8d:0b:a1:d9:e9:e7:84:59:d5:22:ef:ce:1c:
b2:ee:bd:de:50:9e:7d:f6:02:7e:fd:42:e1:7d:4b:7c:3c:be:
d8:48:ed:e7:3f:07:b5:18:3a:89:e7:80:eb:8a:5b:92:ff:cc:
1f:0d:4b:f1:57:67:41:77:1f:73:97:ca:13:a7:d5:37:09:42:
ec:43:64:44:5c:d8:b0:9b:0a:c5:4f:4b:78:8a:4b:ee:d3:15:
80:ef:90:05:19:8d:06:c5:a3:63:f7:da:12:a1:58:65:69:3f:
e6:54:f7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:49 2025 by rpki-client