Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
File: v6yXEHYmO92w7s9b6mV0pAW5hd4.mft (raw, json)
Hash identifier: +ZzX/sY5D/u8SqcBRB8O5wG95p+enoNVxWN4HZi1uV4=
Subject key identifier: AB:49:7F:1B:C1:5E:A0:1A:27:C0:4F:F0:2B:81:40:E5:B0:4F:F6:45
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial: 0194BCAA1AA600AD61B62AE1DBA198AA9034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
Manifest number: 036B
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: 1v55-sthzRVwP8bOkJFlLx0xinc.roa (hash: zFbUN47Ad2SREvrDRIYFVgCA9wik3R33YWjHV8Kko3g=)
2: v6yXEHYmO92w7s9b6mV0pAW5hd4.crl (hash: fbb4McRwt26RYClDMqKmtbw+fZjGqklFTH+nMTYHT0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1a:a6:00:ad:61:b6:2a:e1:db:a1:98:aa:90:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=ab497f1bc15ea01a27c04ff02b8140e5b04ff645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:d0:01:8b:83:c2:56:76:ac:a0:f5:96:d3:
21:48:22:49:e9:fe:ed:67:93:56:9d:b7:97:96:e2:
e8:26:e8:b1:e3:6d:2f:14:4a:39:4a:b8:78:06:5a:
47:4f:ad:d1:95:2f:be:4b:38:b5:3c:c5:8b:b2:18:
8e:9e:da:94:59:7f:82:c9:74:4f:b0:dc:b6:c1:72:
e6:96:79:1f:8a:ab:d1:77:27:f2:8b:98:5c:b4:ff:
de:31:da:51:2c:19:ec:80:38:0c:4e:1e:04:4d:cb:
f4:f0:82:74:5a:24:5a:7a:cd:fd:d4:02:39:9d:89:
4a:3c:b4:8b:f5:eb:a4:85:c5:61:e9:93:c7:93:df:
8f:b8:54:cc:98:05:9a:0a:b4:42:e8:dc:8f:55:0a:
86:99:8f:be:b2:b5:5e:6c:7c:f1:c4:e7:07:f8:b6:
7d:8c:cc:64:f7:4c:63:11:01:85:b3:6c:58:9a:23:
6b:f3:1b:2d:ca:1f:7e:46:37:60:1c:86:38:80:e5:
63:44:55:b9:a2:85:57:7b:e3:51:78:f9:c5:32:30:
c0:d2:0e:67:d9:88:ac:9b:23:c5:f2:7d:d3:54:a8:
b7:55:d7:95:f8:1d:c4:cf:08:04:d2:ab:35:84:13:
be:20:2a:5f:cf:38:28:bf:55:ef:b3:f4:8d:6c:01:
fe:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:49:7F:1B:C1:5E:A0:1A:27:C0:4F:F0:2B:81:40:E5:B0:4F:F6:45
X509v3 Authority Key Identifier:
keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:85:7f:5a:20:eb:33:70:07:67:99:2c:ad:54:a8:dc:90:ff:
d0:2e:49:8c:cc:00:d7:c0:74:a3:09:ca:c4:49:1d:15:0e:5f:
17:ba:b3:b4:c3:8a:07:2d:0a:6c:a9:76:79:db:b7:54:2b:96:
25:5b:f2:4a:ba:26:cc:e5:91:cb:bd:b3:e5:58:0b:52:75:da:
12:f7:90:3e:13:15:8c:42:7b:a5:be:2d:95:94:81:f2:ac:04:
c1:83:be:07:e5:48:b8:d8:90:8d:f6:b7:78:8f:4b:84:33:71:
24:dc:24:bb:99:04:47:bd:be:4e:cc:50:b3:75:bc:35:a1:56:
cd:2b:cc:f6:83:b5:5e:7c:9f:07:ce:b2:1e:4f:d7:0f:69:38:
09:e5:7f:93:11:71:09:d3:78:d9:a7:37:c8:a2:82:1f:ba:4f:
f1:2e:d1:0e:6d:9b:4d:19:f7:f7:85:ff:ca:cd:01:ee:ce:c1:
31:20:49:9a:17:d9:60:7b:c5:9f:9f:b4:21:53:f2:40:86:54:
5d:d9:36:fd:d0:6e:7f:31:25:8c:36:21:98:06:53:f7:c8:bf:
4a:44:23:e5:07:9f:0a:28:f0:46:5b:35:11:49:4e:20:83:a2:
e6:20:cb:41:73:b4:7c:f7:b0:2c:63:a0:ca:30:b0:02:75:8f:
ed:da:41:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:41 2025 by rpki-client