Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier: KB0b0PtjVOg/0zJ9WS3qFTrOmPYrCVSkU1hulfA2Ufc=
Subject key identifier: 18:A5:AD:FA:2C:22:2C:0B:6E:50:B0:9F:3C:34:F8:46:65:3E:7E:3F
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 0194BC72E29FAD955B494C9608D3A57172BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: gySZvsMKs+7c4lvtIyU8k08b+O5H8qRQn8m3YQdxa/A=)
2: o-uxsmeV-GDLlYueP7RtZNtRLkY.roa (hash: xd5QoXbqzMFg+YyYmPM0+ODCfAWCU2/7fETeFx+AjCk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e2:9f:ad:95:5b:49:4c:96:08:d3:a5:71:72:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=18a5adfa2c222c0b6e50b09f3c34f846653e7e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:c5:f5:a2:35:25:87:26:d1:a2:69:01:59:
74:ec:0a:fe:5d:c4:61:24:d2:c8:31:f4:5f:19:b2:
db:c3:4d:10:bf:2f:6a:f4:2a:e7:dc:f0:5b:1e:62:
8d:2e:96:66:60:f4:f6:fc:34:00:f3:82:ab:72:fe:
6f:5f:73:55:f3:74:44:1b:bf:cb:13:aa:75:db:c3:
18:02:24:10:53:c6:eb:be:75:76:12:79:ad:60:12:
dc:2b:de:a5:2c:98:1e:6d:ff:30:11:48:ae:11:e9:
ed:f6:c6:95:c1:ce:2b:a2:a9:c2:f9:e5:3e:b5:54:
df:2f:db:64:c3:39:4c:9a:d9:9d:ef:b7:84:b8:d4:
f6:42:12:2d:0b:90:60:e1:69:01:78:33:20:dc:c3:
e3:dd:c3:57:3b:99:5e:0e:8b:2b:7d:00:23:f9:82:
aa:6e:f9:51:65:f4:18:62:89:ff:75:11:9d:83:59:
b9:03:52:df:4e:de:b9:f4:e3:d5:73:44:98:49:f1:
48:12:97:31:17:9a:49:9c:49:f6:11:08:9c:ef:03:
df:0d:29:13:89:49:0b:a5:bf:7e:f0:8e:5d:6f:c8:
80:49:95:01:77:14:50:51:63:96:e3:eb:42:cd:99:
b7:7e:76:7a:0a:c0:99:34:82:d0:04:06:6d:68:c6:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A5:AD:FA:2C:22:2C:0B:6E:50:B0:9F:3C:34:F8:46:65:3E:7E:3F
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:05:bc:19:8f:c7:3d:ea:a8:62:89:1f:1d:e9:94:bc:fe:1f:
d3:46:bf:4f:c8:95:a9:dd:90:90:5b:53:39:c6:e0:3a:4a:1d:
94:c9:76:63:43:6c:4b:b5:ed:7f:f6:50:86:81:6f:b0:ba:bc:
af:9b:ff:ea:e3:f9:78:35:7f:74:94:f1:e7:9d:5d:70:02:38:
85:18:64:fa:9d:92:04:66:de:e3:cf:b0:42:91:52:59:f5:1a:
e4:63:10:ca:e9:32:7a:20:c8:8a:2b:01:2e:19:d8:33:4c:2a:
ba:32:6b:56:e9:95:45:a5:06:c7:7a:f7:3a:5a:20:48:e1:83:
cc:b9:c5:08:79:41:76:e2:9b:2b:c0:b5:f7:b5:51:c3:f2:29:
45:7b:37:c4:ce:ac:f0:c6:35:57:41:02:2c:6d:8a:c9:26:06:
6f:00:36:c1:e1:7f:6e:48:39:5d:7d:ae:ee:57:7b:11:0a:52:
45:43:0c:55:42:d7:54:b5:d2:64:b7:47:98:46:92:66:90:5c:
4d:9e:8e:4f:54:ea:b2:2a:83:fd:cd:9c:a7:bd:90:b6:d6:b4:
66:6a:f8:25:3c:2a:94:82:19:1a:7b:ca:ee:19:99:4c:da:a4:
87:71:bf:ec:e0:59:cd:73:84:ec:32:81:03:e1:69:6b:7c:85:
bd:8e:ef:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:27 2025 by rpki-client