Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
File: B6zZpp4bhJhwhFisUiB8-sHyw8s.mft (raw, json)
Hash identifier: Bc9B/FK+PC0XH6emscf36u/lVR2QV8HE5gWPWxE9izo=
Subject key identifier: 8D:81:E9:A0:0B:E2:22:00:BE:91:08:B4:E5:46:B5:50:45:D5:67:69
Authority key identifier: 07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
Certificate issuer: /CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Certificate serial: 0194BCA96DE7D03CBFCC5B6BDF149FCBD897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
Manifest number: 0AAA
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: B6zZpp4bhJhwhFisUiB8-sHyw8s.crl (hash: PWODr4YAbxpQ5mNOyUnQX5zFhsj4Tp6kxx8ol8B1WY8=)
2: lFbceLcRDwmhBa1zgOvzTV71-HE.roa (hash: mrrcAYvrU89Mw/RDvXkAWlxbSPvtKYbzm6HV1Q42sLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6d:e7:d0:3c:bf:cc:5b:6b:df:14:9f:cb:d8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=8d81e9a00be22200be9108b4e546b55045d56769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:b9:23:a3:70:63:06:c3:ba:49:3e:34:0e:
b0:4d:fe:1f:e2:d9:18:5f:c1:c8:6d:16:28:1c:58:
6b:1a:39:cc:e0:4f:14:c0:56:9b:3e:ad:37:34:f2:
bb:96:82:3c:df:e4:e5:5b:f5:6e:03:66:d8:96:88:
d1:c8:d1:47:ed:fe:90:a4:ae:d0:db:08:74:de:bc:
4a:35:c4:3f:78:46:33:35:bc:c6:ed:4c:5c:5b:ce:
78:27:25:fc:30:2c:c4:10:c1:e1:2b:f8:17:fc:75:
91:70:d1:8d:57:1d:0a:f2:9d:eb:a7:73:c3:ac:be:
47:77:21:de:c5:23:10:45:85:b9:01:31:27:da:34:
d4:ae:d8:9b:4b:31:60:93:eb:89:98:63:94:b8:37:
ef:08:1c:6d:8a:59:f3:98:4f:02:e3:41:a2:57:8f:
54:78:40:38:f6:ca:8a:86:d6:16:ad:75:8e:b3:49:
4f:02:60:65:46:5a:ae:cd:65:16:6a:01:d0:68:5b:
ea:16:fc:56:26:92:58:10:c7:91:56:f4:74:c9:13:
33:8d:55:e2:ca:f2:7f:aa:04:dd:44:9c:5d:65:1a:
70:a8:6a:77:b9:0d:bf:a1:b5:c0:40:88:5c:c4:56:
a0:14:e6:6c:8f:bc:78:de:24:41:b5:a1:78:3e:06:
01:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:81:E9:A0:0B:E2:22:00:BE:91:08:B4:E5:46:B5:50:45:D5:67:69
X509v3 Authority Key Identifier:
keyid:07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:54:b5:c8:f2:17:aa:52:67:a0:c0:4c:b5:7e:70:83:8f:c1:
8e:02:d2:ae:c3:ea:20:b9:24:36:f5:08:11:9c:4f:2b:ae:23:
e8:f7:32:1e:3b:ec:e7:2c:bb:81:ac:e1:1a:2f:3d:69:33:dc:
a8:d5:f0:8d:65:cb:09:35:fc:24:3b:a0:c9:c6:10:94:ba:eb:
16:14:7a:a4:d3:be:a7:f8:c7:2e:d3:5f:66:9b:3d:d4:63:ef:
51:7f:51:21:6e:e2:fc:0c:1e:ed:e2:8d:d4:79:24:fd:70:23:
37:fd:c3:99:88:da:d8:82:9f:7b:ac:67:1b:3b:fc:49:c7:26:
27:b4:b3:f6:dc:4c:d9:fb:0d:07:97:29:69:80:62:96:83:b8:
c0:02:ef:54:17:ff:16:fc:01:a6:d3:6f:88:c6:fe:38:5d:ab:
f2:d7:0c:c7:94:7f:58:31:50:f9:55:d5:2d:22:71:d1:4e:3f:
0a:69:26:53:0b:db:24:f5:9d:37:e7:f5:fc:66:95:5a:45:d8:
06:bf:00:78:18:37:1f:1e:fd:07:c5:d9:1c:0e:52:20:24:c3:
dc:b7:40:ff:1b:55:96:40:6b:27:0a:d6:92:d9:ae:a6:b8:23:
f7:28:38:73:60:a8:04:06:53:46:8a:e7:7f:82:75:78:21:33:
da:15:a9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:35:53 2025 by rpki-client