Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
File: 6HFybEwQPg60LC8Oi12ocz-n7-0.mft (raw, json)
Hash identifier: 4ke7w4DSXuwZXQWXQ+goFleJgMN854g1cqEkwA7atIs=
Subject key identifier: D2:3B:73:75:90:7D:7D:41:55:4B:2D:CB:AE:F6:85:F5:FE:BA:DD:4F
Authority key identifier: E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
Certificate issuer: /CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Certificate serial: 0194BC05217BE8ADB6AE9C8CB17C9A3AF469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: 6HFybEwQPg60LC8Oi12ocz-n7-0.crl (hash: RAB0+w2gGoTGb06LhxWtFgopQSbSGLIxPBxQQg62r/0=)
2: G6m36SSucA1UgGO9o5M5kLYkkg4.roa (hash: eR6QiaUE2YBEvPQTI4qKJi+HqbeIzWqvNHB7ykDHvY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:21:7b:e8:ad:b6:ae:9c:8c:b1:7c:9a:3a:f4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e871726c4c103e0eb42c2f0e8b5da8733fa7efed
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=d23b7375907d7d41554b2dcbaef685f5febadd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:f8:02:8d:37:02:0a:1e:32:b7:27:73:67:
10:ee:42:3f:19:76:bd:fc:3f:62:0c:5c:c7:d6:0e:
0b:b8:27:a7:a2:b1:18:6f:db:9d:69:c4:f5:e8:79:
7f:b8:f4:b8:28:07:bb:1b:1a:76:d4:6c:83:95:bb:
6c:72:fa:10:a0:fe:1a:04:47:59:d4:03:cd:3a:90:
cd:47:f3:32:dd:41:25:93:f9:b9:8b:2a:57:68:73:
14:73:e9:c2:e9:e4:1b:fd:24:b1:02:23:d7:93:f4:
b7:04:4e:ef:18:51:62:b2:c4:37:38:f3:a4:85:79:
bd:b5:84:27:82:a5:49:d5:67:74:49:4b:23:c6:18:
49:1d:5e:7d:90:ce:37:a0:fc:f0:39:31:0e:77:74:
08:5c:26:49:e0:79:ec:e8:1e:36:74:4a:90:6f:d4:
d2:72:13:18:26:cf:8c:a0:26:b6:25:16:4f:7f:8d:
c1:63:1f:af:02:80:4b:0e:91:f6:3d:72:40:6f:7e:
8f:d4:6f:ea:f1:30:2d:ff:82:63:40:73:56:9d:32:
d0:35:24:91:7c:08:38:30:9d:60:2c:d8:0c:c2:9f:
7f:99:79:9e:37:11:72:b4:fe:15:84:7e:89:54:67:
26:d7:81:c4:e1:60:cb:b2:58:f7:1c:d9:52:48:51:
ba:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3B:73:75:90:7D:7D:41:55:4B:2D:CB:AE:F6:85:F5:FE:BA:DD:4F
X509v3 Authority Key Identifier:
keyid:E8:71:72:6C:4C:10:3E:0E:B4:2C:2F:0E:8B:5D:A8:73:3F:A7:EF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HFybEwQPg60LC8Oi12ocz-n7-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cd5c81-d205-40dc-a85b-f744fdc83cf5/1/6HFybEwQPg60LC8Oi12ocz-n7-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6b:3d:7b:39:47:08:93:ce:eb:cf:fa:00:62:1f:5f:5a:7e:
69:4c:68:77:cd:87:3d:40:3b:51:f6:24:dd:5c:e9:3f:3b:a8:
0d:6c:5d:5b:ed:d2:92:72:aa:49:37:f2:d0:ad:0e:78:ea:05:
67:61:4a:bb:db:db:b4:b3:e6:8c:af:33:f7:53:16:89:96:5b:
9f:3b:04:58:40:6b:0c:aa:b5:b6:da:15:cb:39:d1:9a:e1:ae:
aa:d2:08:8e:3a:76:09:92:97:2f:73:c4:7a:9a:60:6b:cd:ef:
bc:59:e7:95:00:9f:20:81:0b:bd:8a:9c:37:e4:5e:1a:c9:d6:
ca:6b:fc:45:e1:83:ac:75:3f:3c:64:9b:d3:e5:4f:4d:ea:40:
b7:ba:f7:14:67:b1:11:18:ab:87:e7:48:88:7d:d8:99:88:89:
9c:df:d5:9a:6b:fa:9c:a6:a4:ab:15:de:7b:4a:f3:93:6a:29:
07:85:c7:f5:46:be:18:5b:de:c7:e4:8c:22:36:4a:94:08:9d:
f4:c2:fc:20:90:a6:1e:76:5b:fa:a9:1c:1c:21:24:5c:5b:00:
45:c7:fe:bb:92:c0:7d:d3:02:68:ef:5d:d3:33:5c:d7:ba:a5:
19:72:8f:ca:67:3a:48:1a:94:93:f9:f1:ef:f0:0e:39:5e:03:
b6:af:c5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:08 2025 by rpki-client