Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier: G0xkf5E2YQ6Drfw/DXzuMaD0hgpBVYG9ODXunxicj2w=
Subject key identifier: 13:C9:D1:44:C4:EF:CB:98:A7:CA:0E:0F:70:FF:11:40:59:CA:CB:E5
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer: /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial: 0194BBCEB3CCEE9C519EF1D863DF7002BE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number: 0AFA
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: 11ZDov8yK1hRbDmEDr1LVkSRJd/4j5Cyhf/Ok498ajo=)
2: r3X5pk5U2Z-5txOYvpcZbvrFurQ.roa (hash: 87QkeU5ku+ENNSsEiVa7il+EqGwoFRelcSgk+xC7ai4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b3:cc:ee:9c:51:9e:f1:d8:63:df:70:02:be:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=13c9d144c4efcb98a7ca0e0f70ff114059cacbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:e8:07:d2:67:2c:a7:7b:f2:31:96:0c:db:
86:6e:ff:7b:c6:98:56:c0:1a:0c:67:aa:e2:30:c5:
2a:49:6c:36:4f:7f:03:53:fe:ff:d0:66:7f:cd:50:
7a:f3:b7:56:e1:2c:be:73:2a:66:2c:1e:ef:a2:fb:
89:63:ce:c1:18:a4:f8:56:33:a7:a5:4f:bf:90:45:
8a:69:ab:2d:22:2d:d0:1e:7b:b7:d8:31:eb:ea:48:
3e:c1:86:75:5e:2d:08:be:2f:39:6c:73:c0:2a:b2:
c0:1d:7a:a3:e4:12:87:c8:73:69:53:d6:d7:6d:c2:
5a:0b:2f:fb:c9:a8:cf:5c:c0:58:ed:f1:83:19:6e:
0b:aa:bc:d9:d5:51:96:16:89:24:1e:ca:ab:ed:58:
bc:6e:83:c0:64:bf:10:62:6b:f8:00:66:e4:f4:e1:
6e:02:a6:6a:9b:3e:11:c3:e1:bb:84:de:4b:60:2c:
53:3d:66:f9:84:ae:e2:7d:e1:c1:8f:01:7d:62:a8:
2e:62:e9:0e:4c:32:5a:5c:ce:12:33:58:48:f7:41:
e1:d7:c8:e3:ad:a0:5f:19:4d:8a:e3:50:b2:a4:b4:
12:68:56:cc:b5:cb:9f:c2:ae:e0:ca:bd:ab:90:1b:
19:79:92:ac:ce:da:b0:a6:cb:d8:f1:31:53:10:7a:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C9:D1:44:C4:EF:CB:98:A7:CA:0E:0F:70:FF:11:40:59:CA:CB:E5
X509v3 Authority Key Identifier:
keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:65:dc:2b:c4:7a:4c:e3:d5:6e:7a:a2:94:f9:1f:cd:a1:c6:
78:61:58:e9:c9:ab:e3:50:4a:e6:7c:cb:90:c5:7e:02:6c:85:
31:4e:4f:c7:e0:2b:e0:5e:99:d6:12:c4:08:7d:3f:48:fc:79:
00:a1:65:fa:1b:5e:cf:ea:de:29:cb:2f:d3:e2:eb:f2:37:58:
d6:13:d7:6e:5d:9b:e2:ac:e6:60:57:b5:0e:6d:9f:b7:f1:f2:
06:bc:c8:d5:c0:25:69:18:c3:f9:cd:34:fc:5b:d1:9b:a8:89:
ab:cc:34:63:f2:b1:0e:5d:e2:c0:20:d4:01:2c:25:20:3f:be:
4c:c8:85:52:2f:b5:3a:c2:81:37:0d:96:88:02:c8:a6:df:e2:
4b:a5:41:98:a6:77:b1:aa:13:0b:40:7c:f1:87:34:08:91:1a:
68:0e:b9:b4:4c:7b:13:4f:81:93:58:99:11:48:b1:82:19:22:
7d:57:ca:0d:cf:fb:05:99:88:45:73:f3:79:a0:3e:c6:ce:7c:
d4:21:64:3e:7b:72:7d:d3:98:af:48:58:45:96:c4:c8:59:61:
26:83:f3:cd:5c:af:55:4d:5b:65:8d:07:5d:af:6f:e8:e3:ca:
e5:29:16:c7:5f:90:9e:58:d9:17:4b:33:10:cc:3b:76:2f:5d:
3e:56:8c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:58 2025 by rpki-client