Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
File: 6CBqoyUuPqjWhOrseimTUTtdIwc.mft (raw, json)
Hash identifier: ZYX9BNm2YdyHLqRFxtZJPGfZZ1txn+vEaqu69dPTdbk=
Subject key identifier: 13:BF:87:E7:C6:73:35:6A:EF:1C:2F:96:ED:C6:E7:A9:52:E2:1F:B9
Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
Certificate issuer: /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Certificate serial: 0194BD175D5546D078945EA301D05DA6B1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
Manifest number: 0FAC
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: 6CBqoyUuPqjWhOrseimTUTtdIwc.crl (hash: gaIoO9V3wKllcIauNxdSvx+5O2mVtboamI2kqLwk//w=)
2: M-_cdcLtCwgztUAvo6U6xc0Pw7c.roa (hash: QqjONmK2RzxQWqZOMsrEEr0jP5v8oGa9bpmq/G1FKtE=)
3: fgObtEnjhGSc2Dbcv69KzOyhLQg.roa (hash: +AsZFMBywBZBAtd5zEwLILx86Sgs0i4z2/GivURPyZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5d:55:46:d0:78:94:5e:a3:01:d0:5d:a6:b1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=13bf87e7c673356aef1c2f96edc6e7a952e21fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:e4:7a:06:ea:f1:3d:c0:ad:69:c7:39:6c:
81:c6:00:5b:6a:06:a1:7f:b6:e5:aa:ae:dd:8a:9d:
c6:29:a8:ad:29:a7:3f:ba:0b:da:44:ff:87:b9:b8:
65:cb:a0:20:16:3e:d4:b1:e0:a0:6b:cb:1e:87:b3:
de:3a:f5:17:d6:13:fb:06:cc:9b:0e:52:c6:8d:b5:
e7:0e:e1:f3:7c:f3:3a:3b:cb:91:61:b2:db:aa:3f:
04:1e:b9:c4:30:c5:c5:fd:e9:08:72:50:7c:b4:4a:
23:fc:3b:83:91:8b:44:25:ef:e9:3b:c6:5d:b1:f4:
49:07:0b:4a:45:90:ef:fc:f8:94:ed:8a:b2:75:4f:
57:6d:e9:44:4b:8a:b9:76:0c:02:3d:79:ba:af:52:
ad:bc:c2:55:1d:03:26:c1:30:19:e0:0b:91:91:ea:
3c:9d:3b:0e:be:3c:f7:60:bc:68:9b:1b:41:6b:45:
4b:75:e8:27:c5:b4:cc:2c:86:e0:37:da:10:c7:7b:
29:ec:5c:46:0d:8e:05:14:8c:dd:1a:68:08:5c:43:
08:36:0f:23:64:a4:a4:c4:ee:f9:ea:5c:c2:bc:04:
49:15:5f:0b:bf:ab:b4:f5:ca:e6:71:b3:4c:9f:c9:
4d:8c:47:02:e3:83:4c:a9:a2:43:b1:59:ee:9c:f4:
5b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BF:87:E7:C6:73:35:6A:EF:1C:2F:96:ED:C6:E7:A9:52:E2:1F:B9
X509v3 Authority Key Identifier:
keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:1c:bf:39:11:54:72:3c:bc:d5:f3:02:06:27:90:f9:7f:b6:
72:7e:5c:fe:d0:73:93:ea:dc:0b:27:e9:f5:71:08:44:c0:7d:
f6:9f:f9:9c:96:b9:6a:3f:4f:ce:c7:d1:fb:3e:c9:a9:31:33:
49:2b:32:ac:85:a9:47:58:eb:dc:b4:d2:26:32:2a:dd:68:f6:
61:ab:d6:fb:0e:ed:71:e4:e9:0a:d9:bd:af:b9:ed:b4:3a:5b:
af:1b:e5:7a:2f:b5:b5:1d:56:2c:d3:07:f9:9e:c0:bf:23:a5:
55:36:c0:c8:00:fa:67:ec:f5:57:25:8c:6d:c3:8a:e5:07:9e:
15:6f:e8:96:7c:4c:cb:8e:73:a9:1e:dd:92:13:d6:28:38:d0:
5b:e9:25:06:ef:1a:1f:69:56:03:4e:44:60:2b:2c:0b:21:24:
1b:13:9a:7f:52:83:c2:93:34:19:8a:7a:d0:49:f1:da:25:94:
3a:d3:e4:31:fc:32:e3:14:4e:f9:9d:2c:4e:88:ac:ef:75:fb:
1f:18:98:59:7f:cd:63:44:74:3b:73:88:8a:bd:e0:2b:d2:ee:
cf:d5:e2:21:3f:93:f5:aa:77:ae:70:13:c0:78:0d:fe:a5:ee:
9b:70:24:f5:3a:71:87:4e:76:c9:dd:a4:95:23:e6:06:09:aa:
47:e8:d7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:44 2025 by rpki-client