Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: MEcEmZHizHTG34kDK1a0dt87AsIPOcCPZQJw1Mu5AB8=
Subject key identifier: BF:E9:21:A8:12:E7:64:C0:2D:67:16:35:4D:6D:2A:5D:D8:18:9B:08
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 0194BD858C9ED98910AB3EBCC572EA41CD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 124B
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: QFHX89DzjoMru0qhZxhPVBjFh5fwk8S5D+BJ0GOMkVo=)
2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=)
3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8c:9e:d9:89:10:ab:3e:bc:c5:72:ea:41:cd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=bfe921a812e764c02d6716354d6d2a5dd8189b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:a8:16:56:c5:24:79:b0:2d:56:49:19:56:
f5:08:dc:82:5f:c6:41:43:93:7d:21:1a:bc:f1:10:
df:ef:5b:79:a2:2a:1e:1a:98:de:50:01:e5:f5:85:
95:63:56:47:81:06:6d:88:9e:95:cd:3b:af:54:20:
a5:37:fa:63:6c:a9:22:70:d9:43:ab:be:71:de:76:
fa:e1:dc:4a:65:34:ae:8b:6b:43:13:29:6c:88:8f:
ce:73:2a:d4:2c:62:0d:fe:37:d5:bd:af:ac:b8:61:
94:26:48:71:89:6e:d5:fd:6d:c8:11:8e:73:94:8f:
e2:b0:85:6c:0e:d3:2f:fe:c2:4e:1c:48:7e:28:68:
c6:cc:57:3f:f7:22:c8:30:16:13:99:2f:a1:99:83:
4b:60:59:84:03:bc:9a:f9:ee:c7:2c:e9:8b:f0:fb:
e4:3e:83:b4:d8:a9:a6:51:11:02:84:43:c0:5a:92:
ab:8c:61:f8:7c:04:8f:ab:57:7e:2e:58:18:d7:b8:
28:3c:05:d8:40:70:33:18:a8:34:98:41:d5:cb:3c:
5a:51:c8:22:bb:e0:3a:d2:39:18:f5:68:1d:90:f3:
04:98:74:e6:48:fa:60:81:f6:3e:4e:30:de:64:63:
02:b3:99:43:2c:9d:09:b0:29:c5:6b:48:ca:51:98:
6d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E9:21:A8:12:E7:64:C0:2D:67:16:35:4D:6D:2A:5D:D8:18:9B:08
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e9:5d:0f:4f:09:3d:b2:2b:32:86:49:a8:de:19:d5:12:17:
a5:4a:7a:13:06:d3:e9:19:58:0b:54:7b:24:1c:1c:ca:c8:4f:
3b:16:33:6f:db:75:97:82:36:7d:e1:5a:d2:85:8a:49:b1:8b:
99:a7:ca:a5:f1:66:2d:e2:67:93:e5:fc:61:c5:75:59:69:de:
9c:a6:42:47:c2:c7:42:ca:75:f3:65:a2:09:e2:76:b3:35:be:
77:3c:41:5d:ed:cf:bb:61:94:d3:d2:0c:20:38:b7:b3:bc:d3:
29:f0:a0:c9:a7:cf:7a:68:1c:4d:20:42:5a:37:f1:7c:18:57:
a0:7c:72:8a:ed:98:75:f4:69:7d:24:82:49:97:fc:32:55:5e:
e7:f0:52:7f:bf:99:02:4b:03:4a:87:ae:63:0b:98:0a:8c:45:
63:bf:8f:41:7d:5e:75:24:b5:50:a2:75:8e:86:41:57:6e:86:
f6:36:dc:8e:78:4c:97:6c:55:ca:db:84:f6:3b:39:e2:2f:95:
6c:79:04:ba:a8:47:e6:ae:07:c4:a0:ac:bf:16:7d:aa:aa:2d:
fc:9a:7e:37:42:5b:96:ab:87:e3:b2:84:59:03:00:50:18:b0:
b7:d6:45:63:b5:63:db:67:a3:40:c2:59:fa:a8:fe:91:35:37:
72:15:86:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:40 2025 by rpki-client