Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
File: s6qVFyKhmXGkTmLKktHJEoTRLiE.mft (raw, json)
Hash identifier: E6lTz6R9zxTY32JWnqS+VFeiuRW1RJE0rBoW8DeI/NA=
Subject key identifier: 4F:3D:F8:BE:6F:86:2A:B2:4C:45:B9:23:08:94:3E:6F:AC:AA:10:EC
Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
Certificate issuer: /CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Certificate serial: 0194BC72842035E600CCEE28D21991CD7AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: fcyT5TdBuZSpYCMKnr2rChuJmjI.roa (hash: Fmex2r2S8TmdcqcCkZmisW8YFG5UQhik8Ca5wAVTb7s=)
2: s6qVFyKhmXGkTmLKktHJEoTRLiE.crl (hash: 9MTFxVuxch3eOWBfiZaRZDGXa9z9ewSnZFt0NumpwIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:84:20:35:e6:00:cc:ee:28:d2:19:91:cd:7a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=4f3df8be6f862ab24c45b92308943e6facaa10ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:79:fb:02:7f:b3:d9:ad:aa:df:eb:7d:f5:
96:14:2f:f3:c5:a4:81:94:aa:67:df:8c:83:db:c9:
39:e8:94:b0:6c:af:5f:e5:c4:35:03:37:88:de:a1:
25:94:e9:b2:35:3d:21:3a:47:e8:ae:d4:9a:72:2d:
a4:a9:d9:5c:e2:21:5f:93:eb:61:54:11:fb:7d:b3:
6b:d6:61:d6:d3:58:db:59:8d:f4:4f:3e:45:f6:58:
4a:97:59:c9:5e:a8:7e:ac:0b:cc:09:a8:c2:bb:b7:
df:b2:10:2b:5c:00:44:ec:bf:d5:7f:90:48:b6:b2:
f9:e4:69:d5:e6:e0:78:6d:8b:4f:81:21:eb:46:45:
01:fc:9b:c0:73:91:12:5b:13:44:bc:7c:b3:5c:10:
39:e0:55:e1:7c:ec:71:0d:e8:9a:bd:86:00:d0:3c:
69:fe:f5:87:bf:ec:a1:64:e7:ff:19:1b:86:42:af:
06:79:89:8f:84:a2:80:59:2d:a0:4f:6c:07:ac:83:
18:46:11:ff:3c:83:45:21:f7:f5:7e:9f:28:53:7a:
3e:71:d1:56:36:b0:18:be:49:a7:9d:da:28:28:14:
12:4b:50:cd:0a:0b:e5:aa:f6:49:10:a9:94:12:e0:
fc:c8:73:ce:8f:b0:fc:d9:59:60:82:09:46:40:df:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3D:F8:BE:6F:86:2A:B2:4C:45:B9:23:08:94:3E:6F:AC:AA:10:EC
X509v3 Authority Key Identifier:
keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:aa:18:81:94:dc:ea:3a:1b:ce:f2:2c:67:0d:87:55:34:00:
ce:10:86:a4:dc:19:fa:7f:c6:cc:84:32:65:0f:70:94:cb:74:
00:a6:a1:5b:19:65:b9:40:2c:de:c6:0e:a6:ea:78:67:c1:b1:
b6:4f:0d:55:e7:cd:49:4c:ec:ba:96:39:2e:cd:41:ca:f0:b9:
cd:07:8f:c8:63:6e:f5:23:eb:d2:37:4a:c8:85:80:05:0b:0b:
8d:f0:8d:14:d8:a8:07:ac:d3:cc:57:ad:72:d5:bd:49:71:9b:
30:28:e1:08:db:f1:fa:94:ce:7d:81:0a:2f:01:67:ba:66:a8:
34:8c:a3:2b:6a:31:e3:86:2a:3a:f5:68:8a:a2:03:0f:36:07:
e1:65:27:92:d0:46:15:2c:d0:0f:ea:b1:f0:51:32:9d:dc:7f:
ad:5e:15:75:7c:ce:89:c3:31:b4:4e:79:31:d8:da:62:e7:fb:
b2:37:22:4c:74:7e:8d:1b:a0:f7:76:e1:77:11:88:40:a8:49:
a0:ef:0c:10:f3:a0:d3:80:97:c6:6b:3d:83:c7:ad:6d:69:86:
f5:3d:97:27:07:bb:e1:80:4f:3c:85:d6:98:eb:fb:7b:47:74:
2c:55:ae:77:0a:d2:e2:49:4e:3f:c1:78:eb:1c:42:a5:a3:04:
01:40:42:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:12 2025 by rpki-client