Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: vI84HZiuMe06omwI5LXAoRCB2GwIorudS/jLsEXUoTg=
Subject key identifier: C6:1B:08:8E:15:AE:3D:4B:9A:97:37:2A:31:FB:7E:67:DC:DF:EC:83
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 0194BCE0EF157A38071BDFE555398EE9069E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:45 +0000
Manifest this update: Fri 31 Jan 2025 15:00:45 +0000
Manifest next update: Sat 01 Feb 2025 15:00:45 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: wIwbaXE/sL5DJQq2IPWASDtHUUB4HBLPjeLrkYQEa2E=)
2: nFthzao_iVS1TdMPq7jAXyRRLuU.roa (hash: NXsb3alCPuDvQ88g31RvJaxIIcKhEe221c9ghi3si40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ef:15:7a:38:07:1b:df:e5:55:39:8e:e9:06:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Jan 31 15:00:45 2025 GMT
Not After : Feb 1 15:00:45 2025 GMT
Subject: CN=c61b088e15ae3d4b9a97372a31fb7e67dcdfec83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:52:a7:0d:0f:10:25:fd:9a:d7:b7:03:bc:
91:fb:d7:54:d3:83:56:cc:a7:fc:e0:c6:b3:37:66:
bf:94:e1:b9:5b:ab:ed:c1:d4:e7:bc:a7:0d:6e:8f:
a8:43:a2:02:ca:e2:cb:2c:13:3e:37:59:0d:4b:28:
6e:d0:b3:18:d5:4c:19:32:da:e3:f0:82:cd:62:70:
42:c5:53:a6:0b:af:61:4c:af:24:60:3a:f3:03:75:
28:83:3a:c2:2a:f2:5a:22:15:36:d8:e9:c5:70:f5:
43:28:29:74:b7:8e:41:e3:a4:07:e2:49:d0:54:89:
cb:5b:55:31:03:4b:62:1b:ee:1a:a3:97:aa:d9:71:
be:a8:de:aa:5e:7e:11:38:ed:12:e8:b6:f0:4c:4a:
27:a4:2e:18:65:ea:40:51:2e:7a:99:0b:ae:06:c7:
e9:63:e1:41:da:68:e2:90:c1:b1:ae:39:7b:6e:95:
16:6b:af:13:00:1d:07:6d:02:dd:43:aa:b2:a4:86:
53:d4:ca:7e:ed:a4:68:1b:0e:3a:69:c7:06:6a:0e:
3f:0d:67:5f:a4:1a:b7:d6:7b:cd:bd:6b:be:c7:49:
0e:51:68:9c:0f:bb:26:04:49:ca:16:f1:cc:a5:be:
8c:1e:ab:84:a5:a3:e3:79:5a:58:38:4a:c7:a2:cf:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1B:08:8E:15:AE:3D:4B:9A:97:37:2A:31:FB:7E:67:DC:DF:EC:83
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:02:b5:6e:79:f8:dc:ee:8a:b8:e8:d7:7d:7c:f3:ae:17:02:
e2:89:05:6e:6a:ee:ad:4d:57:4f:3b:98:fa:fc:36:17:c9:b8:
82:e5:ef:8a:ba:03:34:6c:cf:08:eb:93:c6:75:fc:dc:83:4e:
36:b6:31:25:ef:29:79:94:3a:99:e2:c4:c9:13:80:65:50:5b:
c6:0a:5e:8e:f0:8d:94:d4:15:95:2f:fa:fa:69:3d:26:99:db:
51:3d:2b:2c:de:16:c4:0f:48:d7:18:c2:e4:e6:a0:e7:a8:90:
4e:b7:c8:b8:7a:32:35:99:bd:a6:47:d0:dd:e0:7b:14:5c:24:
6a:f7:02:be:1d:63:8c:5e:6f:bb:09:e9:7f:95:fa:c1:71:64:
29:c3:cd:08:e7:b6:2c:31:b2:28:92:c7:e1:ce:d9:a9:32:0b:
3c:c6:59:5a:71:dc:04:de:c9:aa:58:31:16:b4:7d:2d:b2:5b:
89:6b:f9:84:90:46:d0:be:e5:b9:be:15:b2:0e:61:9a:19:ff:
21:e2:df:aa:28:dc:60:26:fa:ab:67:1d:e3:36:fc:55:0b:f3:
f0:15:13:d7:9a:4c:71:fd:b5:44:2c:ec:a4:fa:cd:c7:8a:bd:
0e:b9:1d:87:1a:7b:94:95:0e:e9:61:c0:1e:5c:e5:92:33:a2:
da:94:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:20 2025 by rpki-client