Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: QrkpLPcObfaO6ocoMkmb6Lruh4kNmcIagKFeZiWyCTU=
Subject key identifier: BC:D0:57:D2:CB:00:31:AA:70:1C:2A:22:69:21:30:97:5A:08:9A:B6
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 0194BCE078A7BE43FFA192CB24EAE98EF04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: XlEutT53Peaefw9BWBX8iOxdk0o.roa (hash: 3n8+7Yj6dfwFUOHjwioNJb1p8k9ewBTtziMwK34FcCQ=)
2: _GNQSp_bGjydsnVDpRHY8XNNqhs.roa (hash: pDYhj1QM7SQ6UTwVMyRGZcrJ6AnEuDllBqLjotU+jDg=)
3: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: Cb83FGE/b10FJsxLIQLBfxl3EerGcKMR35TQflDLJ0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:78:a7:be:43:ff:a1:92:cb:24:ea:e9:8e:f0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=bcd057d2cb0031aa701c2a22692130975a089ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ff:f5:c6:e6:8c:53:db:e7:e7:aa:a6:00:57:
31:81:ae:cc:4f:fd:a1:b3:9e:31:c5:4c:22:96:7e:
af:a6:0c:63:bf:3c:b4:0b:4d:45:c2:53:09:28:c1:
bc:06:1b:d9:d9:cb:0e:70:11:3d:e6:01:ba:3c:30:
0d:d4:c4:92:f9:de:2d:75:cc:41:df:fe:3a:39:41:
ee:62:9e:56:b3:43:83:70:04:c7:7a:90:a3:d7:3d:
20:28:b5:f3:bb:c8:84:94:d6:a0:30:14:6e:68:7b:
02:f7:4f:cd:84:f8:db:23:11:b5:6d:ae:c2:de:68:
f3:e0:42:15:63:6d:a3:93:e9:48:bc:1e:04:b9:b3:
c7:c7:b3:4d:96:ac:9c:54:f8:74:35:95:2b:dc:6e:
36:c7:08:f4:fd:d3:18:de:47:5e:82:08:a0:a5:40:
b8:31:dd:e9:d1:69:15:ab:5a:22:71:f1:70:60:08:
5c:f3:e6:ff:0c:f9:9d:c2:a4:e9:65:3d:25:ad:b4:
97:2d:68:13:25:05:54:1d:b6:e1:9b:c6:a2:3a:a5:
0f:a9:3e:22:90:b2:82:ab:5f:dd:a5:81:8a:8d:2f:
3b:c4:dd:d9:d5:70:86:ef:53:91:1c:0f:be:bd:d6:
66:3d:02:64:35:da:63:f1:a2:ab:6e:30:28:9f:ab:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D0:57:D2:CB:00:31:AA:70:1C:2A:22:69:21:30:97:5A:08:9A:B6
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1b:90:2e:d4:2c:33:f4:ed:7e:75:68:2f:37:ef:27:3b:b9:
21:61:fa:75:b2:88:71:c8:ef:19:42:8a:c2:3f:69:a8:b1:29:
9c:b5:87:0f:8b:4e:4e:a0:95:74:7f:56:7c:e7:7d:16:1a:eb:
af:8d:6a:19:ed:a7:64:74:a0:c2:ef:2d:bf:13:7c:0b:17:d5:
0b:8e:54:94:19:97:28:43:e1:e3:ac:e0:35:5e:c9:c6:a8:0b:
21:b3:9b:0b:22:89:b9:bc:c7:e0:62:da:59:67:7e:0a:28:2b:
83:91:b4:70:c2:71:72:3b:db:0f:4f:a2:51:06:f2:fc:fe:5f:
93:6d:18:04:17:f6:87:ee:50:52:ed:04:38:2e:a0:14:5f:60:
22:13:10:93:a8:ca:0c:f2:80:c5:ea:08:80:14:3b:2e:f6:69:
64:cb:6a:fd:3a:32:3e:d7:a9:ab:e9:aa:5b:ca:7f:24:b6:e6:
f8:69:fb:7c:6f:19:ae:69:6a:e8:08:c2:3c:0a:cc:56:31:07:
b7:e6:9f:3f:35:e8:dc:16:f5:7b:2d:a0:01:05:63:14:f4:54:
9a:1c:c1:63:55:c3:b0:13:d3:08:fa:de:f6:a8:30:83:40:ae:
a9:b2:55:06:a6:fa:e5:6a:c9:ab:a3:f7:a8:97:dd:17:bf:1f:
6a:42:e9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:39 2025 by rpki-client