Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
File: cG_6qbf85AgnGBpaoKzumaRmkVY.mft (raw, json)
Hash identifier: AyeJZo/Q4Mf7EgAvnc8G4qk1iW+xDgpNLDyyIkUFe54=
Subject key identifier: A7:86:1C:0D:C6:59:D9:19:FE:3A:B6:5F:F9:A8:9B:1F:6B:36:2C:2E
Authority key identifier: 70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
Certificate issuer: /CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Certificate serial: 0194BC3BD9F2332CC2C02C6CAB1EFD5361B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
Manifest number: 096E
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: cG_6qbf85AgnGBpaoKzumaRmkVY.crl (hash: jSTq+9R+HtboJcpXpk+oeKVQ4xTjviRxhwWUPtU8kOM=)
2: wHLema0UGStCVJFXioCOp9yM9Yk.roa (hash: 9o2chTlhKcvV8PSsEOhRoW59X68c/vtOe1+mp0bUcck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d9:f2:33:2c:c2:c0:2c:6c:ab:1e:fd:53:61:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=a7861c0dc659d919fe3ab65ff9a89b1f6b362c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:a9:49:85:a5:db:3b:dd:58:c4:71:0c:1c:
00:91:7f:5d:64:1e:9f:5a:4a:52:1a:37:3c:fb:93:
54:d3:33:aa:9b:c5:e1:41:e6:84:9c:99:e6:9f:b8:
19:7e:6d:66:18:65:02:64:f1:cb:f4:9f:80:d4:e1:
9f:a8:cf:c6:96:ce:83:de:07:24:e2:b8:70:bd:a6:
3e:5d:0d:e5:c2:9d:72:21:5a:76:34:e0:f3:5b:03:
0a:27:d8:3b:72:c3:19:dc:9a:3e:60:46:02:f0:31:
2b:ef:aa:b9:b9:c6:9f:4b:d0:af:08:a7:ff:e1:a9:
51:29:fa:e5:43:13:0e:31:bb:d3:f3:8f:11:fe:d2:
74:1f:1c:c1:2c:fd:33:38:fb:6f:e7:bf:cc:f9:5c:
90:72:1f:ee:2c:62:e1:e1:52:df:66:9d:10:3c:74:
11:98:e4:fd:41:c3:68:fe:01:b7:b8:c1:40:1b:ea:
58:2d:e7:78:27:93:bd:9d:7a:91:68:4c:f6:72:57:
4f:f8:6a:ab:c7:73:ba:36:6c:3f:bf:7f:47:3e:70:
d3:76:93:bd:8d:7d:12:e0:f1:f8:cd:12:92:95:a3:
2f:d5:fd:d8:d2:c7:6a:72:0d:83:c3:04:65:83:d1:
dc:8d:85:7a:84:22:0d:ae:15:49:c7:f4:cb:1b:87:
6d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:86:1C:0D:C6:59:D9:19:FE:3A:B6:5F:F9:A8:9B:1F:6B:36:2C:2E
X509v3 Authority Key Identifier:
keyid:70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:14:54:c7:87:b4:0c:e5:35:84:43:85:b6:ec:b1:10:e2:a6:
cd:e8:a0:8a:bf:c4:27:24:09:bd:da:63:88:75:e2:a3:c5:c3:
04:f7:aa:b5:28:a8:ee:ce:2e:fb:ad:20:40:97:9a:b0:13:9a:
10:34:15:64:39:e7:06:c8:74:37:96:9e:47:e5:35:aa:38:a5:
8e:df:e2:ca:53:5e:a7:ce:2c:b0:e8:39:c3:c5:e0:c0:b1:12:
7b:34:77:ff:0d:ca:ba:48:19:3b:4f:a3:ae:57:72:9a:f0:e7:
f7:bb:f8:46:39:1a:3b:15:1e:d3:45:42:d5:da:d1:80:09:c3:
fa:8c:a5:cc:65:75:9a:ad:96:3b:4e:2c:1d:57:5d:d0:32:58:
49:65:0e:d2:53:1b:11:6c:bf:5a:6b:90:27:60:86:94:21:b3:
68:0d:4a:ce:19:76:8b:f1:77:90:3a:a1:fe:95:c8:dd:d4:5d:
cd:b8:e9:b9:15:d1:98:e8:d3:3a:be:cc:bd:a0:44:16:1e:f3:
f0:1f:8b:5a:65:e7:77:03:18:6f:4f:05:03:e0:16:99:39:a2:
9e:50:89:50:e1:67:04:43:fc:ef:db:0a:01:8d:55:04:1f:d4:
d3:35:8e:7b:85:03:3f:96:3f:32:58:fe:3d:20:1a:87:ad:ad:
1c:e8:9a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:32:22 2025 by rpki-client