Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
File: 6g92KC31MgmljAMC50-Kl8o6_wU.mft (raw, json)
Hash identifier: tjv+4qfPfj1cfW+62t9XGVtHTJyVgy7ndwLMidNKv/M=
Subject key identifier: 28:57:78:AA:FF:B0:39:0E:A7:4E:D9:E5:CC:BE:4E:14:15:86:EC:55
Authority key identifier: EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05
Certificate issuer: /CN=ea0f76282df53209a58c0302e74f8a97ca3aff05
Certificate serial: 0194BD85B343FFEC36253E90F6B7886F2897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
Manifest number: 112F
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: 1-8bpJP4ldVymn01b0Lydy-jjhME.roa (hash: 0hHPnyQchhVyljrO2jyFNJVSYpCf6WjQrLOAi1ffRPU=)
2: 6g92KC31MgmljAMC50-Kl8o6_wU.crl (hash: K8cqvesD//NSZjHywsgR5Jwlt9G8BdnJ1gzqtvKVcjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b3:43:ff:ec:36:25:3e:90:f6:b7:88:6f:28:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f76282df53209a58c0302e74f8a97ca3aff05
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=285778aaffb0390ea74ed9e5ccbe4e141586ec55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:21:3f:f9:f2:4f:40:f8:74:1b:07:f0:55:
43:b0:42:55:2a:8e:a9:38:e3:bf:27:03:9c:57:0c:
70:70:fd:95:81:ba:53:d3:50:49:c2:9a:90:da:73:
7d:ab:a4:81:70:bf:85:69:74:03:b3:ae:a0:2b:2c:
a7:cf:3f:66:8c:dc:9e:99:82:87:5a:f4:4c:51:a0:
89:96:9d:24:9d:ee:96:3b:59:9b:88:5b:3d:f7:97:
2f:77:bb:36:8c:48:21:d9:36:78:cb:10:ec:28:7b:
7f:d0:bf:5b:a7:8f:03:4c:e9:81:66:31:f6:86:f1:
16:7c:64:fe:f5:be:da:06:51:da:30:75:6f:92:de:
01:1a:5f:f7:a6:bf:3e:6d:c0:1b:35:29:fd:bc:e1:
e1:8c:0a:2e:59:d1:88:9c:27:c0:ac:34:3f:08:37:
5d:54:a4:52:ae:32:0e:6b:bb:59:95:09:a4:d2:1d:
00:26:0b:d1:95:ec:40:39:cf:f0:1d:d8:d7:8b:be:
12:e1:e9:fb:40:7e:e4:be:08:37:6f:e4:c9:9e:bc:
94:b6:4a:ea:bb:1f:88:ce:86:b2:fe:8b:27:3c:18:
bf:9a:b1:6a:c4:8b:e0:85:ab:69:9c:87:0c:cc:23:
12:15:04:45:c7:09:3d:c5:54:c1:58:67:e9:3b:30:
62:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:57:78:AA:FF:B0:39:0E:A7:4E:D9:E5:CC:BE:4E:14:15:86:EC:55
X509v3 Authority Key Identifier:
keyid:EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:92:d6:21:91:10:95:27:9d:78:f6:03:1a:1a:42:f2:f5:6c:
bb:48:af:32:9e:3c:ec:53:c7:52:75:d9:78:e7:3c:5b:e7:1b:
95:6f:bd:c9:27:9a:f7:69:2a:62:b7:80:90:ae:78:00:bf:d9:
ff:dd:8c:bc:66:02:56:1a:f2:6a:ed:eb:89:f3:9f:34:70:83:
72:87:54:ce:a8:5e:e2:92:1f:de:ea:ae:5f:35:fa:5c:71:a8:
63:db:15:fc:1d:71:c2:07:cf:58:0a:e2:cc:a2:aa:ce:39:81:
5d:69:d5:9e:ad:2d:6b:ad:61:06:43:fe:79:50:2d:03:5e:6e:
73:14:ef:80:52:0f:d5:6d:32:2f:99:7c:3a:c9:8f:f1:b8:22:
19:2f:5e:b7:c5:3b:21:0b:d5:d6:b7:f2:9a:45:e1:04:00:48:
93:9b:40:98:20:49:86:66:6c:83:34:a8:6a:da:6e:5e:0a:f8:
7d:8e:1b:08:9b:c8:02:71:02:38:2b:3b:1c:96:2b:9d:b7:24:
36:52:0a:bb:40:f3:85:04:44:11:11:c1:c4:b4:a3:57:5b:5e:
12:5c:18:de:02:69:a2:c9:62:40:2d:c2:a5:39:76:e3:4f:3d:
16:4b:36:4a:00:ae:d9:0d:c6:62:8f:1b:5c:ac:46:9b:37:e9:
06:14:26:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:08:43 2025 by rpki-client