Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json)
Hash identifier: GySfW18enDwsjXoRWMmu+7RRIgbdhCOCHOeskkG4L2w=
Subject key identifier: B1:31:DB:50:F5:ED:34:0C:1E:68:61:31:16:87:54:C3:56:F6:B9:40
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial: 0194BC72D8271F8155507B7BFA0EB525B1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
Manifest number: 0988
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: P1nV9Bm5GBVZttBLanxp0TvCkBWC82lLSl010bLnauk=)
2: 9SpuyxwY5s_DY9H2HuXrbxGl_AE.roa (hash: 8TyA+krjmjGFWghMXqG0FTTJGiUwEj3FhItOTxb8jEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d8:27:1f:81:55:50:7b:7b:fa:0e:b5:25:b1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=b131db50f5ed340c1e686131168754c356f6b940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:b1:1d:17:1f:98:47:a3:53:8c:7d:f2:fe:
cb:45:af:9d:2b:b4:27:85:2b:d2:4c:ea:86:a9:57:
a8:ca:01:32:f2:d7:e5:71:a7:8c:3a:b1:df:5c:48:
2f:0a:ea:9d:80:1e:4a:9b:51:50:09:cf:b9:f7:c4:
ea:ad:37:6d:d5:4c:be:3a:4d:04:7e:80:4e:dc:86:
a7:a1:87:b9:a3:6c:78:e3:53:89:77:10:d7:0e:08:
20:de:b5:c9:74:5a:5b:e6:10:89:87:a8:92:ee:6d:
fb:fa:88:80:f1:a9:1d:53:f3:89:4b:96:b4:0b:5b:
41:c8:00:16:de:ea:67:80:f2:86:a9:6a:56:4d:d6:
8d:22:c2:0a:15:2e:4c:5e:2b:4e:b7:39:21:33:56:
5f:76:70:9c:4a:03:26:4d:58:ec:71:39:d4:6a:bf:
d5:98:03:12:b7:12:97:f2:c7:33:b1:12:e2:ac:74:
d7:5d:9c:62:ad:e4:6d:45:bd:a0:18:17:ac:21:17:
a1:e2:5e:e8:22:9b:38:27:2a:ea:2d:4d:f9:24:52:
2a:26:d1:b5:22:e8:2e:6e:c3:74:3a:cc:2f:83:1b:
d5:a8:6d:9a:da:ff:9b:4c:b1:96:d9:22:e9:e6:98:
70:f3:f3:0e:0d:30:33:07:1e:cd:e2:de:ee:91:bb:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:DB:50:F5:ED:34:0C:1E:68:61:31:16:87:54:C3:56:F6:B9:40
X509v3 Authority Key Identifier:
keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d1:c7:ea:7a:84:46:e6:e7:93:00:75:60:98:cd:c0:6a:19:
ea:52:68:76:d7:de:8f:b2:44:5b:56:ae:c5:a1:e9:09:7d:08:
c6:ce:e9:4d:1d:38:b5:3c:ea:1e:48:e5:48:1b:0b:fd:3f:f7:
9f:70:53:d8:50:3d:2d:82:ab:e0:50:b1:dd:05:f9:71:a3:9a:
6b:c0:08:a4:a3:63:d8:74:22:d7:1a:f2:2a:8e:ea:e5:a0:8a:
52:a3:85:f9:69:ab:9d:fd:b9:ce:fc:6b:25:17:12:2f:9a:4a:
62:13:d7:81:28:42:b9:83:11:44:7c:06:2c:25:41:b2:1b:de:
d0:e1:07:18:92:32:1a:af:c9:e7:b2:70:0d:b9:31:39:ae:ae:
21:de:96:20:3d:20:05:30:50:7d:6d:bb:55:ec:06:bc:eb:7a:
aa:36:5b:73:09:fc:39:e6:e6:66:5e:fb:9c:37:33:7c:33:28:
fb:1a:2c:f8:5c:4b:a0:63:36:07:c4:ab:a2:45:17:3c:ab:24:
9f:cb:ec:ba:14:5a:20:11:0a:82:a2:4d:0f:f9:d6:75:5f:ab:
61:db:41:59:7d:f8:6f:30:64:9e:4c:1a:49:e5:46:ae:52:cb:
d8:7e:ac:6e:53:b9:0b:79:2a:fe:83:2c:99:f1:0a:55:18:73:
9e:08:93:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:53 2025 by rpki-client