Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
File: b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json)
Hash identifier: GfybOuxAaiEBQtsCzweRZQn4SVFOhMjizjV5R7BHmmE=
Subject key identifier: C4:A2:EC:87:9A:C7:17:55:DC:01:18:23:BC:AA:57:1A:E3:65:02:7A
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial: 0194BD4E85892153D8CDF7C5B63B38125BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
Manifest number: 070C
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: JmMsEtJ1VhlViUzFcRhkARe+SOZavizB2IERnV8PqJ8=)
2: eC2MphkCG1tQ_l_Eef-rvB7MGJg.roa (hash: oipT2bxgVMIIjaLCh5p0XGkacdhDbfRQ9fsmYqX5jVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:85:89:21:53:d8:cd:f7:c5:b6:3b:38:12:5b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=c4a2ec879ac71755dc011823bcaa571ae365027a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:10:66:ea:54:4d:67:f3:19:fb:e0:7b:85:
2c:9e:80:40:3b:ef:0b:64:80:99:80:4f:aa:d7:78:
7e:24:59:98:d6:9a:20:11:2f:f7:94:d3:46:4a:7b:
49:b2:38:69:ea:48:fe:2d:c9:2d:d1:68:05:f1:a9:
1e:74:5e:8e:b0:21:9c:ce:a9:52:28:b9:21:34:a7:
b7:25:6e:d1:60:68:e1:dd:0c:85:e4:c3:02:d1:42:
0f:9b:a9:f2:61:6a:2f:c6:82:fa:d0:dc:26:17:cf:
50:91:29:7a:e6:20:fb:2a:dc:8d:28:4a:73:0f:c3:
37:10:ad:5f:85:23:ef:f1:30:69:6b:8b:26:1b:55:
1f:7b:d1:14:7e:5f:38:5f:4d:b5:a3:df:09:f8:ac:
ec:0c:6c:03:cb:ab:c9:9e:79:8e:66:7f:e5:10:f4:
f5:b1:77:a0:ea:ff:fc:b0:56:9a:ac:8e:96:e7:d0:
65:bd:21:75:1f:52:5a:cc:f4:12:9d:7e:23:22:24:
3a:eb:0d:e6:34:cc:e3:38:5e:6b:c8:1a:58:dd:e9:
d6:91:fb:0e:72:ca:b7:ca:53:fb:1c:ba:81:f0:22:
f4:a2:6d:fb:b7:fd:04:ad:e4:dc:01:27:45:e0:24:
92:42:3c:ad:b5:1d:94:98:69:29:4a:03:78:45:9b:
38:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A2:EC:87:9A:C7:17:55:DC:01:18:23:BC:AA:57:1A:E3:65:02:7A
X509v3 Authority Key Identifier:
keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d9:15:50:d9:c0:d3:9a:c4:cc:a1:78:50:5b:20:f2:b5:9f:
82:df:db:e9:02:72:8b:55:34:2e:08:98:4e:c5:8e:e6:34:51:
1f:25:d6:82:ce:32:41:9c:03:05:d0:3d:17:d7:5e:46:b0:28:
d7:d1:3f:08:82:e4:2e:24:8b:39:e3:ad:95:ad:9a:60:02:62:
81:33:75:b8:b5:02:e6:7e:44:15:cf:9a:7f:58:b7:59:23:ec:
4b:7b:11:77:2b:42:05:f4:a9:e7:21:42:8d:36:4d:73:46:35:
39:5e:38:6b:f3:33:60:f8:0d:83:2f:3a:8d:aa:d7:4d:da:05:
fc:44:a6:5d:59:84:26:98:43:bf:22:fc:46:ec:e0:0d:23:50:
6b:58:fa:04:f9:4c:22:28:92:15:ff:f4:0f:82:19:e7:44:e1:
f2:eb:e3:dd:d5:58:76:08:5d:fb:9f:23:10:26:5e:d6:70:cb:
db:87:3e:a8:db:bd:bb:46:e4:34:10:78:14:f1:1c:d5:78:36:
f0:5f:88:97:9b:d1:09:84:96:53:1d:82:43:4b:32:3f:b5:63:
d3:6f:ef:83:2e:7f:3e:14:d3:35:f8:c7:89:9b:aa:6f:1b:9c:
77:7c:ce:9c:78:7a:4f:67:54:b5:8d:87:84:01:c8:bf:cf:80:
b5:80:cb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:51 2025 by rpki-client