Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft
File: 6P36cUAM43C3X3N3gEhXTkYnQxs.mft (raw, json)
Hash identifier: hZMmIESQFU6cVuYdtrfqiyRTFKH17gnBkqyJz3Zx+bA=
Subject key identifier: B1:15:32:6F:C0:2F:D0:90:CC:DE:D4:51:FF:DF:7F:00:79:95:C1:E9
Authority key identifier: E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B
Certificate issuer: /CN=e8fdfa71400ce370b75f73778048574e4627431b
Certificate serial: 0194BC05080C2A7FAE9F454921E27DD97A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft
Manifest number: C8
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: 6P36cUAM43C3X3N3gEhXTkYnQxs.crl (hash: pHs/JhZyOz877C4nmDwax6sQAFxBvmtjMS9VmAcUW9k=)
2: SFK2b_vmIkLWDU_i-BkLji71FEk.roa (hash: P/e3nZJRHwq7a4VZvWLqRGgl5JZQml0sLv8iElODBF0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:08:0c:2a:7f:ae:9f:45:49:21:e2:7d:d9:7a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8fdfa71400ce370b75f73778048574e4627431b
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=b115326fc02fd090ccded451ffdf7f007995c1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:df:86:de:b0:76:8d:ee:59:e8:97:0f:4b:
cf:b6:bc:01:71:bc:69:27:43:29:75:ec:aa:2b:61:
17:f5:cf:af:2b:0b:1e:5c:71:bf:58:77:f3:65:20:
60:83:ee:fd:9a:f6:64:f7:7a:7e:08:fb:ae:bd:55:
49:3d:d2:78:5b:0c:d4:ab:57:2b:ad:83:0d:a7:64:
0c:ed:02:93:69:64:1e:be:3f:65:90:d9:d5:5c:c1:
a7:8c:b5:b1:72:db:d0:36:09:aa:bd:69:d2:e4:5e:
9d:5c:76:dc:79:61:e5:f7:ba:64:e3:61:51:bc:73:
29:b0:5d:9d:e5:02:84:47:7f:a8:c1:74:ca:ca:6d:
47:8a:b4:94:40:c2:1d:53:d4:5c:b1:25:59:49:50:
34:54:19:e8:6e:a9:2b:2a:12:d7:86:77:47:95:30:
ca:f0:48:bd:40:0a:a4:97:82:2c:45:e0:bd:8c:53:
8a:e0:c9:a2:05:7f:6c:ba:71:e4:de:16:80:41:7d:
dd:d7:15:d3:6e:38:73:91:36:94:f4:cf:70:da:5d:
e1:cc:e9:5b:a4:57:14:27:5e:99:14:c6:27:2e:37:
b1:32:68:7b:ef:01:5f:29:8a:5b:a1:b9:3b:fc:02:
fb:72:cf:9c:9c:a5:9d:f8:91:cb:47:85:29:9b:36:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:15:32:6F:C0:2F:D0:90:CC:DE:D4:51:FF:DF:7F:00:79:95:C1:E9
X509v3 Authority Key Identifier:
keyid:E8:FD:FA:71:40:0C:E3:70:B7:5F:73:77:80:48:57:4E:46:27:43:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6P36cUAM43C3X3N3gEhXTkYnQxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/55be75-0e0a-413e-89cc-378a3e7bc083/1/6P36cUAM43C3X3N3gEhXTkYnQxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:64:ea:bf:3a:0c:8b:38:84:90:fa:d0:38:b8:74:e0:5c:f2:
0c:8e:5e:f3:8c:b0:4c:71:96:c2:53:0d:61:6f:23:66:f9:be:
03:82:85:b7:49:2f:6d:a8:6e:41:e0:11:3b:5c:9e:83:8b:05:
8e:73:f6:f6:ad:69:81:6b:85:7a:f5:79:4b:ed:c7:4a:e2:64:
f2:4a:05:f1:b8:93:c8:b7:83:b1:74:f9:4e:c0:7d:34:86:07:
e6:ba:38:d9:b1:10:27:da:23:08:a4:6f:3d:e2:67:cc:59:e0:
55:c6:e4:d8:fc:c0:b6:05:74:2b:59:9d:15:15:a1:af:f1:d6:
c6:8d:06:5b:14:94:8e:ea:e4:52:73:da:2e:5e:f3:74:85:b0:
27:06:bd:34:4d:89:a3:6a:f0:37:82:76:6b:00:57:b7:5e:e2:
2a:b8:fe:c3:45:cc:47:22:c8:e2:2c:ca:a4:55:a7:69:eb:f0:
64:67:48:57:cf:8f:07:d0:b0:40:cd:a5:4f:92:4b:02:e7:8b:
12:31:03:ed:8f:64:ba:6a:de:8c:7e:57:1d:75:87:f5:24:e0:
f9:5e:20:09:ad:4e:bb:3c:a0:64:6c:a3:35:51:a6:91:b9:95:
6f:d0:7d:cb:35:c7:23:ca:0d:f2:ea:ef:50:23:9f:a9:20:28:
38:57:1f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:29 2025 by rpki-client