Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
File: BAfWwkhET2tcN42w_-wPiZJW66M.mft (raw, json)
Hash identifier: aW+uPSWZhVtChqRbi3EZQIxH9dCiRe4c4NYmi+S8N4Q=
Subject key identifier: 5A:CC:75:A3:C4:39:2A:36:57:21:37:FC:AC:E6:74:13:C5:3A:74:3A
Authority key identifier: 04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
Certificate issuer: /CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Certificate serial: 0194BCE0670ED7336CE097264E550FF13944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
Manifest number: 06FE
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: BAfWwkhET2tcN42w_-wPiZJW66M.crl (hash: Q+Z9XqaE8WDiW3Hv0TDW+0dbNbSjAf5XeOYKeavtOng=)
2: QpIKO4ejjPjXaNQ1_KyJkWKevB8.roa (hash: e6W0MKDyzgf7+BDF2Ho9KsY3xBRYMIFdcPH8WpxhKmo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:67:0e:d7:33:6c:e0:97:26:4e:55:0f:f1:39:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=5acc75a3c4392a36572137fcace67413c53a743a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:ff:fe:8f:91:db:16:8a:33:8f:90:26:94:
43:83:fe:fb:97:20:d5:7c:18:c5:f3:82:9e:c7:06:
a7:a3:e2:af:f8:05:62:45:7d:56:1a:7b:47:96:33:
c2:89:f6:e7:b7:ec:98:ea:37:eb:15:fb:3a:6c:6a:
56:2a:db:76:34:32:ab:6f:c7:58:c6:e2:64:75:76:
d7:c7:f8:fb:e9:29:a0:42:db:33:08:f7:bc:04:63:
7e:f2:0a:82:5c:42:77:79:f5:b2:62:08:8d:76:2c:
57:b6:2d:c4:d2:b0:a1:d4:b0:ac:d4:95:ae:60:b7:
78:83:fa:b8:e4:4a:9a:ad:5d:1f:09:fd:e2:4d:a0:
c6:36:70:cd:d8:a1:0a:6c:bb:77:a1:3f:a1:15:00:
9f:97:43:cd:3e:6c:83:a4:ff:b9:59:e2:5e:b6:e0:
66:00:4e:e4:90:16:f7:f5:85:37:9c:a8:f2:74:6c:
04:92:79:0b:c0:52:d9:53:76:99:9c:ba:89:d0:45:
64:3e:85:03:c1:84:f2:3c:35:67:0a:e9:11:cc:43:
a1:6f:16:71:df:9b:35:b8:1d:f6:e7:50:5f:7d:1b:
d6:c7:51:31:5b:ac:eb:aa:93:45:67:35:1f:32:8a:
15:21:d0:f8:9e:cd:2f:b1:b6:6b:a4:db:03:7f:d2:
7a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CC:75:A3:C4:39:2A:36:57:21:37:FC:AC:E6:74:13:C5:3A:74:3A
X509v3 Authority Key Identifier:
keyid:04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7c:f6:37:b4:10:f2:5f:78:91:46:ee:7d:10:fd:74:6e:1b:
f7:ab:57:29:09:5f:a1:b8:18:6a:f1:1f:27:e8:8e:17:9c:bf:
2f:b6:f5:f8:0e:83:0b:e0:2a:2f:05:a5:3a:59:7d:21:b3:4e:
2e:49:7a:d9:11:22:c6:20:91:93:11:d5:3c:3b:70:13:ab:63:
c4:a6:8b:75:f8:0c:0c:85:34:fa:54:67:fd:aa:ea:60:78:ef:
b1:68:29:16:8b:c7:33:23:b6:c9:3b:09:72:85:46:36:33:eb:
89:0c:a8:f3:19:0e:ef:38:8e:2b:93:7a:b0:d0:33:f7:60:e6:
80:77:6f:a3:f8:3d:36:26:23:3a:c1:ba:c7:76:97:db:56:42:
2c:a2:e1:4e:3b:39:d0:47:ec:f8:60:0b:f9:3e:e1:74:e6:b9:
23:49:fc:b1:a0:c0:c8:01:79:b6:fc:d3:c2:c3:09:45:7b:44:
3a:0b:9b:8f:3e:7a:70:fb:80:67:c3:5a:fd:08:2d:7b:2a:eb:
70:f9:95:14:93:b1:02:44:2d:5e:07:58:81:5f:3a:d9:f1:76:
a6:ec:c3:3b:0e:c6:97:64:a1:3c:42:7e:15:2c:29:f5:a9:99:
d1:79:cf:03:87:29:61:fd:0c:b1:e7:8c:07:db:7a:41:97:b6:
32:78:82:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:04 2025 by rpki-client