Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
File: a4QIvvwC39bmGQhUh4WgCKS3TWc.mft (raw, json)
Hash identifier: ZNF9w+9mpX7WHatIjkNBBdaWHsAZVem6Pu121vjmqJo=
Subject key identifier: 73:B6:D6:C5:56:27:25:04:78:BF:F1:A0:C9:8B:46:A1:9A:1A:A8:15
Authority key identifier: 6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
Certificate issuer: /CN=6b8408befc02dfd6e61908548785a008a4b74d67
Certificate serial: 0194BC73329FD3F7C41E84CCD6FD5F186C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
Manifest number: 087D
Signing time: Fri 31 Jan 2025 13:00:53 +0000
Manifest this update: Fri 31 Jan 2025 13:00:53 +0000
Manifest next update: Sat 01 Feb 2025 13:00:53 +0000
Files and hashes: 1: XG_GoCIjsfzx85ZAfU48cGk_g2A.roa (hash: O4zvtPOigYM3HdyO+PNnJwZMHPFxCAa0+qt7cBa9RoM=)
2: a4QIvvwC39bmGQhUh4WgCKS3TWc.crl (hash: XMWYdgbfIAZ4ciPQPIhodCF3nr7mcKpddfz6D3qUGaY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:32:9f:d3:f7:c4:1e:84:cc:d6:fd:5f:18:6c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8408befc02dfd6e61908548785a008a4b74d67
Validity
Not Before: Jan 31 13:00:53 2025 GMT
Not After : Feb 1 13:00:53 2025 GMT
Subject: CN=73b6d6c55627250478bff1a0c98b46a19a1aa815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:f6:5d:66:ca:cf:e5:a5:7e:f5:40:8d:aa:
f1:29:8c:62:f8:d4:e3:fe:4b:d0:d0:bd:1b:25:d3:
1e:74:7f:c7:15:fc:9c:8a:59:0c:d3:0e:5b:23:07:
01:94:db:68:22:a3:8f:90:54:c7:67:a5:ba:89:e0:
33:3a:61:6c:81:54:be:86:0f:a7:1c:8a:03:db:89:
0c:8f:50:a5:7c:e3:8b:83:4c:5a:c9:4d:5d:c1:40:
4d:be:08:e9:36:df:55:4f:97:fa:f4:74:48:4c:a4:
f2:74:c4:c8:10:e2:ec:b5:83:f6:08:bc:28:12:b9:
e9:20:9d:f0:84:69:38:0f:2d:25:e7:4b:5e:ae:db:
c5:9b:47:63:77:5b:b5:8b:cd:40:e9:12:1d:72:e7:
bd:f2:e1:e0:71:5f:21:ff:a9:68:de:a5:4f:dd:c5:
a4:8a:a2:ba:53:09:8a:d5:e3:f0:0d:20:55:0e:ec:
02:a7:a6:99:01:0d:f4:da:6d:8d:e0:33:70:bd:97:
3d:55:22:fe:dd:21:cb:9a:08:4d:13:68:5b:dd:b5:
4b:9a:c1:21:46:0a:38:eb:c7:26:97:00:bb:ba:61:
a5:15:98:bf:85:15:2f:27:f3:51:f9:6a:e8:84:61:
6c:bd:5d:a2:f6:b3:24:c5:94:a6:ec:6c:7e:72:65:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B6:D6:C5:56:27:25:04:78:BF:F1:A0:C9:8B:46:A1:9A:1A:A8:15
X509v3 Authority Key Identifier:
keyid:6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d2:59:a9:70:cd:ee:f4:32:67:63:90:65:1d:b8:c5:f8:ce:
cc:8e:c8:12:e4:08:b2:2d:2b:e6:ca:25:c2:f0:97:11:db:27:
ec:fc:fc:8e:35:91:c7:bb:19:ba:f2:45:ee:49:e2:88:cd:34:
3a:38:3d:fb:32:10:5e:c5:d0:93:c0:a6:a8:0a:8e:b9:ba:71:
e7:6f:1e:87:6f:6a:86:8a:a9:f5:d2:e4:9c:65:c9:f5:71:41:
95:e5:ea:ce:93:db:9d:0f:16:61:51:4f:3e:e8:e5:9f:98:67:
6e:53:4f:76:58:e4:55:e5:a9:f3:aa:1c:a2:e6:2e:b3:73:3f:
ed:30:0b:62:ff:9b:95:6f:d2:7d:96:05:f4:13:3d:5a:84:13:
4f:84:66:2a:28:6f:c1:7d:8a:aa:8f:85:d0:e1:5f:e4:ab:d6:
15:b2:79:33:9e:d2:b1:e1:80:1f:4e:46:96:4a:b9:cb:cd:b7:
71:b2:51:2d:d7:96:0f:2f:a9:61:05:84:e0:5d:19:d7:3a:47:
d2:dd:82:01:da:c8:c0:5f:97:e8:64:ba:43:ab:eb:8e:1c:c0:
43:cf:78:5b:fe:a2:76:20:3a:ce:f1:2c:b3:53:f4:4f:f3:c7:
9f:36:f7:5c:31:80:f8:64:14:fb:2f:44:1e:d7:23:ec:f6:12:
94:cf:48:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:40 2025 by rpki-client