Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
File: b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft (raw, json)
Hash identifier: ik1CDJ6DJGdIi4IKSKKj6fdAHgIpHf/kyG9ROBggYtI=
Subject key identifier: 1E:48:BD:DC:14:2D:50:DF:A8:5A:7E:C8:F5:B0:B0:BE:43:A6:5A:6C
Authority key identifier: 6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02
Certificate issuer: /CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
Certificate serial: 0194BC729572D58DF781314872B051D4F678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
Manifest number: B0
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl (hash: kgwg2vUJ6HBjf7nd/H2XCYG/Ze6SsO2+VIi9ZJfftBI=)
2: he_LtNesHB3yhhLeem_GRg_44MQ.roa (hash: evnQ8oB4iSjxmSj6Kbjo2AeseAHFfPXeoG38g6RTNyE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:95:72:d5:8d:f7:81:31:48:72:b0:51:d4:f6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc5c473f9b7b01e9c2485c46bf569cce0816f02
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=1e48bddc142d50dfa85a7ec8f5b0b0be43a65a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:90:48:1e:d9:e6:f3:93:e6:ef:6b:b2:c7:
c4:6f:69:0e:b0:da:50:cb:62:7a:1f:b6:66:35:ea:
35:da:3e:d3:d3:c6:ad:8a:40:de:16:ba:48:cc:86:
f0:5f:6d:3c:90:e3:b7:6f:b6:01:69:fc:56:a8:12:
53:3f:b0:4c:38:ff:da:10:71:f7:0f:d9:b3:ac:0b:
93:ba:4a:c0:bc:d8:41:c5:5b:b3:a6:d5:4d:77:df:
d5:9c:18:66:d7:1b:61:fa:59:ec:2a:f5:96:41:10:
2a:9d:10:85:7b:ed:c0:76:a9:42:a5:d5:1f:43:d0:
72:cc:dd:0d:e2:3b:30:27:d7:32:e5:e9:03:0d:ce:
86:89:15:87:d8:87:3b:84:ca:e9:15:9f:93:c0:69:
7a:3e:13:4d:4e:a4:ad:cb:c4:1c:52:a8:1e:1f:9e:
30:29:4b:4f:bb:e4:91:04:6f:ef:c3:15:a9:82:67:
9a:ea:77:a8:8d:d9:b3:0f:6e:07:de:a8:d5:23:b9:
95:6b:09:24:52:4c:55:00:c5:ad:99:01:69:31:e8:
4d:a6:81:4b:ec:3b:36:b9:09:9c:d4:99:26:06:2b:
10:1f:ed:42:f5:42:b9:a8:d8:1c:3c:a4:6a:c4:72:
b9:01:63:1a:66:83:f1:8b:1d:b0:a8:9b:8c:ff:da:
28:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:48:BD:DC:14:2D:50:DF:A8:5A:7E:C8:F5:B0:B0:BE:43:A6:5A:6C
X509v3 Authority Key Identifier:
keyid:6F:C5:C4:73:F9:B7:B0:1E:9C:24:85:C4:6B:F5:69:CC:E0:81:6F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8XEc_m3sB6cJIXEa_VpzOCBbwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5e6ac6-edef-495e-b6a2-9cf040574765/1/b8XEc_m3sB6cJIXEa_VpzOCBbwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:88:6d:1f:32:e9:5e:39:6d:a8:8a:c1:86:1d:97:fe:a9:48:
50:3e:f7:4a:05:e6:77:6a:fc:91:88:f3:5a:79:42:f2:8e:8b:
9d:e1:5c:7c:cf:c4:95:10:41:cc:50:0a:5d:01:1b:36:59:0e:
3c:83:8f:04:fa:c6:b9:9c:28:a7:cc:03:75:d0:0c:59:54:69:
7b:30:30:5e:0d:66:fd:d0:c4:01:67:00:fc:b9:76:7f:76:fc:
d8:b3:33:8d:d8:c5:26:60:58:a5:ae:b2:d0:45:2b:6f:5f:29:
d1:71:b4:51:71:ca:a1:7b:06:42:d2:b9:7f:0f:0e:60:4b:1b:
1e:b5:66:58:98:dc:8b:5d:55:c9:56:0a:cc:64:08:6c:1d:93:
96:46:40:8d:92:a7:c1:e4:53:2e:a8:05:cd:0e:d1:ca:01:fb:
86:2a:2f:d3:be:77:ec:43:27:1e:a2:03:75:4f:eb:11:8b:dc:
0a:e7:ed:00:ae:79:a2:19:1b:71:af:2a:be:21:62:ac:3d:3c:
c5:cb:ab:2b:f1:1e:5f:6f:72:f7:cc:b8:a0:d0:71:67:39:28:
df:95:e1:f0:1b:5a:27:3c:0d:38:24:3e:b5:16:e4:f0:b9:ce:
e3:25:65:e6:4f:34:62:ab:0a:4d:de:e1:92:ed:e5:fd:ab:31:
80:a6:66:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:23 2025 by rpki-client