Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
File: a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft (raw, json)
Hash identifier: xa4RJ6VyFRgbVCWzd5t8bx5HBlspviSBf9sCGYjb4h4=
Subject key identifier: BC:BA:32:97:DE:94:66:F6:DC:0F:CC:A0:D1:07:B6:85:AD:F0:D5:71
Authority key identifier: 6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
Certificate issuer: /CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Certificate serial: 0194BCA984E88E0B0AB9679417300C45BE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
Manifest number: 05A9
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl (hash: vmz4W3msm6oZ9hHnvfe6ZDPxIOAryiT0r424fbuPrP8=)
2: tmEAf9ZXZPWYhkKRSKm2RFZwu58.roa (hash: Wy9lKsdp9Di7MryHAEfUWFGv7fEx23Pr2YF9NFfmLVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:84:e8:8e:0b:0a:b9:67:94:17:30:0c:45:be:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=bcba3297de9466f6dc0fcca0d107b685adf0d571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:82:01:8e:bf:ff:95:7e:4c:6d:f4:f2:db:
51:77:3c:12:4b:dc:c8:e0:d0:e3:0d:69:03:77:01:
94:65:1f:d3:75:13:3d:93:00:df:e7:da:83:5f:88:
8b:d8:43:8a:60:cc:07:60:65:d4:8b:eb:64:cf:dd:
f5:e3:a3:d2:20:bc:66:09:8a:c5:4d:2a:a1:c7:58:
f7:3f:1c:e7:77:7b:3f:d3:93:e9:a3:c3:37:22:6b:
69:dc:2f:90:d8:85:70:57:46:de:b2:1c:42:11:00:
62:14:51:4f:fb:5e:f4:f3:c5:2f:5e:c5:9e:69:f8:
6e:b7:ec:eb:c0:c3:4c:ec:33:f8:9e:2b:a9:55:d6:
3d:de:a2:58:6e:30:72:b8:31:d0:59:3e:03:6c:bd:
37:9e:1a:5a:74:36:cc:4f:85:9e:92:6b:6e:f3:95:
a2:59:25:c6:dd:b9:c1:0b:46:2d:c1:18:8a:e9:c0:
d0:4f:d4:0d:ad:f7:68:45:eb:5f:93:25:1f:75:97:
f7:85:94:81:27:ff:79:9b:d0:28:6b:1e:50:a9:37:
ab:77:7c:56:92:c1:a1:26:00:f0:40:1f:2e:1a:09:
f2:92:f0:69:6e:f6:67:c1:79:c3:6b:60:85:f7:71:
e0:80:1c:27:f0:89:ab:90:a0:f3:b2:40:4c:a4:40:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BA:32:97:DE:94:66:F6:DC:0F:CC:A0:D1:07:B6:85:AD:F0:D5:71
X509v3 Authority Key Identifier:
keyid:6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:90:17:09:b2:5e:e4:ce:1b:86:27:bc:f0:d3:7c:2a:c7:79:
86:57:90:a9:75:23:49:e7:b7:7f:a3:58:1f:a1:80:5a:01:a4:
6f:94:16:0b:71:05:c2:ae:b6:00:40:e0:d9:11:fb:71:fa:0b:
b8:98:55:62:af:8c:cb:10:8a:b4:4e:10:be:86:0f:95:03:bb:
93:0e:92:c0:6a:8a:2b:89:3c:9f:43:7c:b0:e4:bd:dc:f8:03:
84:c4:e4:63:66:40:e1:83:3e:79:d8:45:7d:14:52:f4:be:cf:
c3:a3:7a:d3:c0:10:52:02:02:a9:a0:f3:2b:b4:36:02:cf:af:
d4:98:2f:26:e5:0b:93:e4:b1:17:ab:2f:8b:be:3a:95:bc:d8:
75:c4:0d:60:42:36:ad:00:33:55:70:eb:f3:c9:31:a2:0e:2f:
75:e6:d7:58:ff:a1:c4:f3:bb:e4:01:2c:4c:96:f5:8e:cb:6a:
62:8b:81:05:a7:44:5e:b4:c1:e1:b7:b8:ed:d4:3d:96:1b:82:
97:23:9e:38:95:03:b5:34:d6:9a:88:ad:c7:d6:ba:8f:1f:71:
a5:43:68:1a:e8:af:ac:8b:1a:6a:8d:a9:ad:68:22:21:54:2d:
3f:aa:27:f3:b0:df:26:d2:7f:be:5c:a0:5b:46:61:9f:d0:13:
8f:58:c7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:34 2025 by rpki-client