Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: a3RXZ97iseIqQ3e12nDMIIkHos2TUMw4Se5E/xK2jY0=
Subject key identifier: 6E:C8:0B:AF:89:1C:2C:CA:CD:41:F8:37:72:2F:F4:F4:26:C6:AC:15
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 0194BD17C69CE991F124B7E26AC0586FDDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 06E6
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: zXnYe5fm3nN4gnu4EI1JuPh9vdDVILNXHbvU2oiy89I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c6:9c:e9:91:f1:24:b7:e2:6a:c0:58:6f:dd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=6ec80baf891c2ccacd41f837722ff4f426c6ac15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:b1:a7:00:a3:7c:36:31:fc:50:a1:9b:55:
94:23:2d:92:f1:e2:a9:66:66:20:f4:c4:8d:16:bb:
de:b3:b4:9c:c8:60:78:98:61:6c:2c:87:50:90:ac:
25:ca:77:e8:90:2a:d8:eb:f1:2b:7e:09:a4:5c:fa:
2e:00:b2:19:c9:c7:cb:36:ec:e7:b6:ca:4e:48:12:
98:76:38:a5:ba:3a:e9:1e:70:70:1d:3d:0b:ea:11:
7c:82:4e:68:58:10:4a:a8:ed:9f:db:cd:0d:85:3a:
b5:72:e5:94:86:04:5e:0e:2c:e9:b8:77:74:eb:fb:
ef:c2:86:96:d9:be:20:02:f9:3e:43:60:93:96:77:
47:33:02:45:00:7d:de:55:ed:a6:19:e1:fc:ce:55:
99:e9:9f:49:05:c4:2a:32:0c:9a:4b:e9:ec:62:65:
e2:b2:a2:8a:32:c6:62:61:9e:d9:be:6d:d9:44:9f:
a8:ba:3b:4f:e1:9f:33:72:6f:da:21:68:5f:45:f7:
cc:9b:eb:8c:93:47:ea:47:91:8c:f0:ea:0c:8e:0a:
6d:42:d5:f7:24:81:d1:73:be:13:57:68:68:2b:12:
b0:30:5f:99:f8:bb:ba:bd:ac:68:60:e9:2a:e5:33:
19:92:0e:35:34:6f:5c:20:e8:81:71:85:25:99:58:
3f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C8:0B:AF:89:1C:2C:CA:CD:41:F8:37:72:2F:F4:F4:26:C6:AC:15
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:59:ed:8e:7d:38:fd:fb:5a:1e:d1:cf:b7:f8:d4:33:b1:58:
18:13:8f:2f:59:9d:d5:f8:b9:3e:44:a3:a0:79:ba:aa:9a:79:
e7:ae:3d:f5:f9:0a:85:5c:7f:ab:3d:02:83:2e:76:a1:dc:d1:
81:4f:33:55:bb:62:b9:19:25:76:0c:79:19:5a:aa:c2:8c:6a:
ee:20:53:9f:db:dd:8f:9c:4a:19:11:0e:58:58:3b:54:e1:9c:
5b:27:17:eb:49:a6:6c:11:02:c9:9b:ed:19:b7:fe:a6:dc:d5:
1b:35:b7:46:3c:13:07:e7:d3:16:63:52:0a:d6:fa:d2:04:15:
38:bc:18:dd:c7:c7:00:16:be:a4:80:50:6f:00:8d:53:b9:9d:
9e:44:0b:a0:74:aa:be:f7:7b:7b:c3:df:84:57:53:cf:fa:4a:
13:ce:2b:9d:f5:6d:07:d2:7b:06:92:57:21:06:a0:15:5a:da:
17:a1:b2:b9:18:e7:58:9c:ed:c0:12:8a:5a:82:93:66:d1:0e:
98:4f:f2:09:c1:65:38:72:aa:f7:2b:54:eb:06:f4:35:75:7c:
8b:99:f5:a9:49:c7:ab:31:24:4b:11:07:17:50:77:fc:3f:e9:
03:86:ff:55:80:ef:66:9a:ea:86:20:15:7f:ee:9a:21:01:bc:
bc:ae:5a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:04:59 2025 by rpki-client