Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.mft
File: C6yKMgbjZ7gLjKaJIg8JjRiEkbo.mft (raw, json)
Hash identifier: f5rV3MbcXW6FBmZyOkRPNwCbOKs9LJSWoQ3FCUY7Des=
Subject key identifier: 85:A6:E9:96:EA:42:2E:DD:4D:64:C2:EF:A2:AB:DC:CB:75:AC:5B:B8
Authority key identifier: 0B:AC:8A:32:06:E3:67:B8:0B:8C:A6:89:22:0F:09:8D:18:84:91:BA
Certificate issuer: /CN=0bac8a3206e367b80b8ca689220f098d188491ba
Certificate serial: 0194BC3C51E8267AAD4505FACE5BB4CD9EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: C6yKMgbjZ7gLjKaJIg8JjRiEkbo.crl (hash: Mc0z2MVZm56eLlWV1FBpVNKIeudNmZawhxpXs6Sniho=)
2: f5UfFSDlOg-m-uL2DNAR_tMDSg8.roa (hash: /83b/LfsXl5zV/MG30U3LspgV+eRL7MbbHPb/CymUic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:51:e8:26:7a:ad:45:05:fa:ce:5b:b4:cd:9e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac8a3206e367b80b8ca689220f098d188491ba
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=85a6e996ea422edd4d64c2efa2abdccb75ac5bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:ab:1f:f2:05:50:b5:e7:ae:46:5f:44:8d:
3a:23:a9:47:a0:73:1c:67:9e:32:65:34:7d:d3:46:
74:43:cd:22:10:97:fc:76:42:37:c4:1e:ed:84:98:
5c:15:60:30:00:bc:08:9d:d9:8a:b3:b6:25:ed:6d:
6e:02:88:bf:c3:8d:e1:42:3f:12:3e:b6:85:38:1e:
82:07:16:1c:23:5f:d2:df:5a:de:11:03:91:5a:9a:
12:0e:4d:3e:0b:6f:e5:94:22:90:01:5d:55:bb:75:
ce:ee:fd:8c:99:e5:ee:88:51:e4:98:3a:d5:90:45:
15:a1:d4:51:9a:83:90:c9:06:55:58:a1:b3:32:71:
67:eb:0b:3f:91:3a:15:94:05:8f:ff:5e:6f:bc:6a:
4f:0a:42:e8:60:fd:53:ca:9d:57:4c:b4:49:56:c7:
af:c1:62:aa:1c:f0:8d:be:bf:4f:ef:e0:02:f1:65:
d7:da:b5:8f:85:3f:15:d4:f9:4b:bc:16:fb:7f:d4:
13:c9:e4:62:9c:a0:2f:c1:6c:6c:89:72:4b:d5:45:
e1:84:3b:1e:46:cb:c8:0e:46:24:dc:1a:cd:f5:56:
b0:24:c3:31:b5:8b:40:11:65:79:7e:ef:23:9d:fc:
6d:01:a3:6a:f0:d0:89:03:7f:5d:a2:76:4f:67:93:
f1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A6:E9:96:EA:42:2E:DD:4D:64:C2:EF:A2:AB:DC:CB:75:AC:5B:B8
X509v3 Authority Key Identifier:
keyid:0B:AC:8A:32:06:E3:67:B8:0B:8C:A6:89:22:0F:09:8D:18:84:91:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6e:6c:84:8b:d6:38:4d:3d:d0:aa:89:e8:c3:50:fa:40:62:
9f:8b:a0:75:12:d2:bb:7c:54:f2:83:f2:a2:fb:82:be:61:84:
56:77:a6:f1:ce:40:f6:f0:7a:58:9d:fc:56:8d:b7:07:5a:7c:
32:66:20:37:d8:d1:6d:aa:05:9e:ef:94:ac:59:7b:8e:bb:92:
13:e2:f4:ed:65:45:6c:3c:9e:36:ae:fe:08:51:09:0b:ea:48:
b6:53:16:b4:6c:bb:95:08:69:d7:e8:64:f9:2d:d1:81:b1:31:
fc:a5:7a:21:68:b4:b5:8e:42:78:0a:d7:73:95:e6:b2:75:d6:
53:4f:3c:37:8a:48:5a:49:fe:07:b6:06:de:38:af:82:40:4e:
8f:64:e5:9f:53:bc:74:2b:e0:a8:c6:c2:e2:7b:62:52:ac:46:
84:d8:62:64:b6:ec:45:f3:7a:08:f9:ec:e5:70:a1:c7:f7:b0:
6d:0e:98:3f:20:4a:29:47:9a:9d:10:3f:85:7c:2a:7f:c4:9d:
1d:0e:09:4d:69:bb:39:2d:46:4e:e5:6d:4f:35:2b:10:74:70:
f3:f8:41:6b:f4:b3:77:2c:2c:de:95:fd:2f:9a:4d:1f:ec:cd:
3b:c3:af:ac:13:10:86:1a:ce:70:95:2a:21:d0:57:4e:a4:90:
d1:46:a2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:07:54 2025 by rpki-client