Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier: Nwjt/OrCl0ZxL7KMq6jB2zSRryMPLTGWciWFeuGAzfo=
Subject key identifier: 39:D4:80:9B:20:6A:B6:A7:78:05:AE:F1:D8:91:3F:69:92:FF:F0:28
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial: 0194BD177EFFBEE8132FC31C0342EF504A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number: 0978
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: 0XabXlC7deISiRQU33Gmn1-hwRM.roa (hash: XChkodvgKF7pFZfRd54zjJi0OLTiUwtDb3v0CScHm/A=)
2: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: eIzgtzefwb4XQcwN47TC4w7SPmqOt9Dx7DHvH/7u/zM=)
3: Jkdiv5bBO_BKcgc0OerouNuGE1k.roa (hash: VbBTlFGzjAjrvA9wRAtB5k6JdTD926ZHlAXAShcRc2U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7e:ff:be:e8:13:2f:c3:1c:03:42:ef:50:4a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=39d4809b206ab6a77805aef1d8913f6992fff028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:83:84:98:98:c0:4e:08:8b:95:4a:5b:e0:
e5:62:5a:03:3f:ba:b9:c8:0d:3b:df:c2:11:7f:98:
8d:c5:71:f6:7c:ce:f1:38:25:7f:80:0a:ba:c6:e3:
b2:54:a1:41:30:0c:58:e5:1a:b7:58:9a:76:2f:5d:
11:80:9b:1b:6b:4e:5e:e4:83:31:44:f4:bd:b5:ca:
68:2e:0c:d4:7d:dd:15:1f:27:3c:9a:97:ef:54:ef:
74:49:41:82:d5:4a:79:7c:64:66:60:1e:1c:2d:04:
d0:65:74:26:1d:52:7a:ba:e5:ab:e0:50:0d:28:2e:
b8:20:06:5d:ab:21:c0:48:e2:83:31:de:ff:be:65:
08:ca:68:b3:e0:8a:6a:f4:0a:c1:25:51:6a:0e:98:
df:8b:d0:01:1d:c0:2b:dc:3c:9d:c9:f2:22:63:96:
f1:ac:5a:55:3f:51:58:5a:45:7d:a0:1c:0b:c5:d3:
86:5c:01:dd:18:33:b3:4e:8d:c7:e7:f6:c1:45:52:
df:d3:b3:b9:98:ed:3a:a7:7d:73:1d:21:b5:06:98:
07:eb:cb:39:11:43:6b:00:2b:f5:26:b7:e3:18:af:
bd:d5:bf:18:4d:c5:06:66:ab:02:38:7c:0b:b3:03:
29:bf:47:f3:8f:0d:ae:ad:78:d5:48:ee:72:5d:72:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D4:80:9B:20:6A:B6:A7:78:05:AE:F1:D8:91:3F:69:92:FF:F0:28
X509v3 Authority Key Identifier:
keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fe:f7:1a:83:5b:0c:80:e0:bd:2c:6d:bb:c0:f6:a2:fe:ae:
be:e6:f7:a1:9f:df:b4:30:31:cf:02:82:e2:01:55:fe:fd:6b:
15:f8:af:6d:f1:24:9a:1c:2c:40:c6:d9:f1:3b:bd:a3:fc:cc:
d5:b8:c4:a3:08:b5:be:8c:9e:e4:ac:21:36:4d:47:b6:4d:77:
41:90:0c:99:6e:46:55:4b:b6:f8:7c:25:3c:69:7b:79:75:b3:
de:27:8a:6a:8d:f4:19:53:34:f7:a6:89:c8:f7:cd:07:72:37:
1c:2e:fc:ef:05:fb:7b:cc:90:f3:ee:66:a2:42:c5:27:1f:24:
77:0b:82:6b:d1:d9:19:51:f6:84:97:7e:9d:f3:22:26:3a:f4:
ac:7b:0b:2d:a3:36:aa:5b:39:4d:c2:e5:d9:ce:66:87:2b:e0:
f3:0e:2b:84:9d:16:de:df:c6:42:5c:a9:3e:4a:b8:78:c5:dc:
13:a0:81:af:6c:68:aa:ba:41:24:3d:fe:3f:a6:2b:f3:2b:a2:
f5:07:1d:f2:f5:0e:a9:e9:b1:73:5e:0f:f4:84:67:fd:ce:b9:
f3:35:85:5c:2f:39:17:d4:8d:8c:4d:a3:ca:d3:80:2a:1c:85:
cb:7b:39:5f:a2:e6:be:fd:87:4b:42:cb:ef:8a:09:38:ed:d2:
44:f4:fe:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:15:52 2025 by rpki-client