Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
File: mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft (raw, json)
Hash identifier: /XVHEK5YVf35K7+zBt6q+Qdp7gT95tzCyQ4NAuMJrK8=
Subject key identifier: 6B:68:2A:59:F6:02:40:BC:57:38:F1:EA:0E:46:10:2F:E0:99:B6:D1
Authority key identifier: 99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
Certificate issuer: /CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Certificate serial: 0194BD8571C0FBF9D239D429DB812FA9B08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
Manifest number: 0A00
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl (hash: 0lRL2gMluPCUuDm32L0hO6vHxc0/0f5fP7N00tBgPX4=)
2: nZK_WOZBkx5CjkyneO9yoAn9z7M.roa (hash: dpA6T/m8yk0xZEgRWH2rVz82pLkCcKV+oqNh5OTEUXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:71:c0:fb:f9:d2:39:d4:29:db:81:2f:a9:b0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=6b682a59f60240bc5738f1ea0e46102fe099b6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:98:91:af:90:d4:f6:72:b0:8c:2b:03:d9:
08:82:11:c8:52:c9:78:4b:78:a1:67:12:05:02:10:
1f:4b:3f:dc:91:42:26:fc:0c:82:7c:1e:d6:bc:19:
62:90:e3:8c:e3:25:f3:28:c6:e0:e9:df:8f:e3:6d:
f9:19:2c:d1:8d:42:61:d4:7d:71:1e:55:fa:35:10:
23:e6:e2:e0:a4:e6:99:fa:a0:26:ef:4f:6d:0c:a1:
d7:d3:4b:fe:a8:eb:d8:aa:19:80:09:29:fe:79:fb:
79:8d:ff:8d:53:7d:1e:70:4f:3f:1f:5b:9f:bc:e3:
0c:8d:1c:70:83:b5:8e:40:b4:8f:15:26:ec:ef:30:
ed:43:66:e5:12:b3:f3:37:23:6f:27:18:d1:75:34:
c3:32:22:ea:99:80:ca:76:5f:e9:07:10:0d:16:e9:
bf:a3:40:0e:71:2f:48:91:de:5d:bb:a0:7c:96:04:
9e:90:3e:94:7f:52:68:b2:f6:16:8c:b1:fc:73:67:
a2:ac:01:b4:a8:89:96:61:62:40:03:05:49:4e:ae:
69:ab:30:46:82:34:bf:d1:68:2a:aa:1c:d5:be:44:
00:bd:8d:6c:0e:c7:dd:7a:76:04:04:bd:60:89:f6:
1d:4d:c3:0f:8d:be:8e:d1:1d:a4:64:47:d8:ac:57:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:68:2A:59:F6:02:40:BC:57:38:F1:EA:0E:46:10:2F:E0:99:B6:D1
X509v3 Authority Key Identifier:
keyid:99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:24:04:43:f2:8e:20:79:74:da:fb:8d:f0:97:f6:c0:27:85:
ca:f7:2d:35:11:c2:3a:51:6b:b5:56:b8:a8:9e:8b:95:92:af:
f4:98:e2:54:b8:16:64:1b:a5:15:ab:b9:82:34:93:4e:f6:38:
c6:79:07:37:56:01:91:4d:fb:58:bd:d5:f8:82:1e:9c:4b:1f:
63:95:18:5b:ef:ea:27:d8:e3:32:b2:eb:02:96:b5:e4:6c:6b:
9c:54:df:93:bc:22:be:4c:da:c3:90:50:b2:67:04:45:e0:8e:
89:97:4c:db:74:1f:c3:86:b4:f6:c6:1e:17:41:76:0a:46:d0:
3d:74:0d:c4:a8:e2:53:77:d1:79:a7:3f:1a:f7:53:0d:17:fb:
cb:48:cb:5b:84:4a:37:f9:2c:dd:44:08:ac:6e:5e:e0:8d:72:
7b:bf:66:5d:fc:ab:c5:db:7c:28:1a:59:73:66:16:9d:be:3d:
c5:cd:4a:57:cf:b4:b3:41:c5:cd:b6:5e:51:87:54:61:c2:84:
d7:6b:48:02:eb:47:43:9b:85:3e:53:54:79:93:e2:ce:b1:be:
6e:35:7d:e3:b2:fa:23:b6:02:fb:1e:c2:f4:e9:24:f1:76:7d:
f4:bb:16:df:ff:c6:85:a5:b4:1e:bc:26:c7:e1:d9:51:cb:4e:
65:a1:0f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:45 2025 by rpki-client