Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
File: 6cPULzspIbp0GPOCAy1rNccVm4g.mft (raw, json)
Hash identifier: DziCbH0mV+nPq6phLlIBq5lFgDVeomntMUMlIVAiORs=
Subject key identifier: 28:FB:1F:61:F1:A2:69:51:EE:D4:89:E4:C2:98:F3:93:EE:B8:B0:8C
Authority key identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
Certificate issuer: /CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Certificate serial: 0194BC3C90C2F9D22081290128048EE3E730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
Manifest number: 0A9B
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: 5YovwIx-DfYnXnDFJMr95lV97fM.roa (hash: 0/AccKS7ESwqh7EBZGAQBHJV43ER12Y2X7ow/8sTA3k=)
2: 6cPULzspIbp0GPOCAy1rNccVm4g.crl (hash: lEZBu/EVciQOTqGUzyxpU7lytlR6JVSTHWZnkKp+FNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:90:c2:f9:d2:20:81:29:01:28:04:8e:e3:e7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=28fb1f61f1a26951eed489e4c298f393eeb8b08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:20:55:41:e0:2d:ad:c1:2e:b0:05:45:4f:
34:1d:46:23:87:ff:0e:77:e6:81:ec:21:32:58:e0:
2a:24:20:29:f6:7a:6b:a2:15:1e:79:23:47:05:06:
3b:f2:60:98:73:ec:9b:af:71:4a:94:23:e4:ee:0e:
e3:b3:53:ca:70:e4:4d:1d:75:92:10:29:25:2a:78:
0d:10:28:5d:0d:1d:26:2a:53:5d:7a:4d:5e:3d:df:
88:9f:d8:1f:5a:c2:b2:04:e4:87:71:4d:c4:50:af:
41:25:4a:0c:a7:39:f8:ee:b9:a2:8d:b3:e5:3a:85:
aa:ff:80:2e:9f:f6:d1:1e:d4:ae:b7:b6:67:ba:20:
6d:7b:9a:8d:7f:97:80:1d:f2:be:99:c9:9d:00:03:
49:a1:49:b5:48:bc:f4:ba:1a:90:02:eb:1b:16:96:
a0:e4:24:3a:60:9c:5a:20:ab:6b:88:94:fe:ab:78:
d6:1f:3f:32:2a:b3:0b:46:a4:27:96:57:6a:38:f6:
0f:d9:49:fc:51:25:b9:fa:24:6e:e8:ad:b1:63:0e:
d6:40:69:27:19:9e:3f:fe:c4:33:fe:c6:2f:53:92:
45:5b:9b:70:d5:5b:c5:1e:fc:f3:6f:27:54:99:2e:
ac:b3:fd:44:8f:e7:0a:41:e5:59:46:f0:57:25:cd:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:1F:61:F1:A2:69:51:EE:D4:89:E4:C2:98:F3:93:EE:B8:B0:8C
X509v3 Authority Key Identifier:
keyid:E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5f:9a:07:95:e8:4a:4e:ec:6b:8b:19:d0:5a:ff:e2:0a:e3:
cf:9c:d1:a4:6e:ba:48:1f:7a:1e:cf:ba:7a:76:6a:33:33:3e:
ee:15:5f:f2:69:0b:45:56:70:da:f6:0d:36:3b:d8:28:95:d1:
66:a2:06:ef:77:95:c9:40:fe:22:da:2b:66:f5:ef:1f:b9:8b:
d7:13:c5:e6:b0:1f:30:6b:ac:23:ae:a9:4a:aa:c6:55:e3:81:
ba:00:62:2c:00:78:e4:72:ed:69:11:24:e6:28:fb:dc:77:f1:
6e:3b:b5:2a:de:5c:c8:37:31:3c:9b:bf:7c:b0:ea:ad:bc:90:
75:82:10:f6:7b:0d:18:74:4c:6d:67:03:48:18:2d:c0:90:85:
45:c5:fe:2a:0a:33:4d:07:74:1e:7c:4a:d0:cc:2a:c8:2c:f2:
67:96:30:44:43:cd:01:00:76:bd:79:0f:a3:ee:24:12:57:14:
94:88:b7:7b:b5:f6:d7:c3:98:46:4e:fa:07:a6:31:c7:82:31:
9c:59:a8:26:f3:46:54:8d:99:1c:ed:95:7a:8b:94:7b:9e:d7:
8c:ed:ce:c9:67:e4:22:8e:e5:eb:ba:2d:93:f0:d0:da:af:ed:
20:4f:7d:13:fa:83:f5:43:74:ac:c9:30:3f:8f:45:12:90:30:
73:91:ee:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:49 2025 by rpki-client