Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: 8+p1xNyn+w4Q+u3JC9u59N2/pyVKtlwEYY3BM5T8g8w=
Subject key identifier: 6D:7F:71:67:6A:67:9C:9E:ED:14:52:47:32:9C:FE:59:61:78:68:F9
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 0194BBCEDAC67C3815EDD2250626FFAFD76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0AD1
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: G02/Kt/7RjY3wksoMBwRHQ3KceyusFoT2RgU7F0as78=)
2: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (hash: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=)
3: s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (hash: nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:da:c6:7c:38:15:ed:d2:25:06:26:ff:af:d7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=6d7f71676a679c9eed145247329cfe59617868f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:7f:85:bb:a0:25:2a:02:b9:d4:67:bc:d7:
97:38:0e:8b:d5:35:66:8f:43:00:33:3a:07:43:9b:
14:5a:26:12:06:a5:df:d8:7e:c6:17:f2:bb:82:6c:
7f:e8:77:42:5f:9d:d5:16:ed:4b:78:fd:34:b5:88:
a4:bc:9d:1d:94:d5:bf:d6:fc:71:7d:11:1a:b4:7a:
8b:6d:5d:b6:3d:aa:83:0c:d0:30:1f:6f:e7:81:2d:
b5:0b:a5:d8:f3:02:31:77:83:fd:5d:c6:9b:14:f1:
7f:bf:5a:bd:76:98:87:74:8f:d2:26:b6:20:2a:ce:
6b:59:be:47:c5:1e:b2:a7:d7:61:fc:0f:79:49:67:
d7:6c:77:f3:28:fe:c2:ec:23:21:ea:0e:9a:42:07:
4d:93:e5:28:cb:d1:39:5c:88:be:5d:83:7a:ec:73:
e1:e1:27:4f:d3:60:f4:d9:0a:85:ed:d4:fa:42:8b:
e0:3c:74:af:68:fd:12:9a:29:d4:4f:ec:2b:9f:4a:
0a:13:cb:94:e8:1b:fa:06:57:ba:af:2c:17:14:4e:
81:7d:c7:7d:73:66:90:41:1c:91:d8:06:d8:58:25:
7a:ad:c7:37:86:f7:79:70:52:ff:f2:02:ab:d1:bc:
a3:f7:17:87:ec:ca:74:b8:de:96:5a:26:c3:34:72:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7F:71:67:6A:67:9C:9E:ED:14:52:47:32:9C:FE:59:61:78:68:F9
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:33:a8:b3:c8:8c:56:41:37:74:ba:c8:1a:b4:21:39:de:b6:
0d:cc:23:1b:01:81:79:c6:16:39:fd:48:1c:ab:67:e0:03:66:
60:20:05:3a:b3:5f:3f:81:21:78:0b:f2:67:17:c7:b6:74:fc:
d7:0e:fd:10:37:4c:49:a5:43:4c:d1:19:da:a9:25:2f:fd:e5:
1d:0f:05:28:f4:0f:0b:26:fb:93:97:1a:7b:1b:d8:66:4e:0e:
cb:7b:32:12:a3:cd:e3:f9:c3:e7:13:e1:20:c2:25:1a:28:03:
e8:cb:4d:fd:15:dc:70:3f:d1:da:1f:31:98:2a:19:38:04:95:
3f:26:1c:25:79:1c:52:fa:0a:7d:4c:44:98:33:96:da:ca:ab:
58:84:72:73:08:b2:9f:42:ea:1a:7f:9b:8e:e5:fc:c4:38:35:
07:d6:1a:f7:ff:39:63:c3:99:95:cc:07:66:b8:a5:46:06:c6:
ed:be:88:d2:db:8c:3b:b6:12:38:25:01:10:28:ff:db:b9:ad:
4c:c6:37:65:ef:64:a2:ba:68:f2:ec:ca:7c:77:3e:41:2b:1c:
7e:ed:4a:c8:17:86:92:aa:34:d8:37:f0:9f:c9:b2:f6:a4:13:
93:a1:e5:c2:8d:12:5a:5e:83:18:3c:15:73:2a:7e:5d:e4:fd:
02:5b:74:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:58 2025 by rpki-client