Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier: eYD7si9sGKnE21YnnYwXoI9SYdBhEm84zgcq0GFNa2Y=
Subject key identifier: A8:48:27:D2:D2:CE:7C:93:0E:FA:97:A3:2E:94:16:C1:6D:CB:3E:19
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 0194BCA9BC1560912F7806FE31CAF76FE806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number: 0BF3
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: dtoAG5Ge3HusGw7+7Es/tyPs3raTuSccY+xzFTIgWDM=)
2: mmQZQMc3pi55Js-9aVzfnXjlBGY.roa (hash: 93uL4N1ZhKCAtYqh9gXaRNVs2vWfWmN+xYkYAO6a64o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bc:15:60:91:2f:78:06:fe:31:ca:f7:6f:e8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=a84827d2d2ce7c930efa97a32e9416c16dcb3e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b8:33:be:c0:ca:08:17:a6:63:b9:24:fb:c6:
4a:a2:31:83:4a:f1:b8:c0:89:68:8b:ba:0c:3f:c7:
44:6b:07:e1:92:09:c1:86:25:46:7a:59:e7:75:d3:
a1:62:c5:a5:34:b9:1a:bd:2c:3f:55:ca:5b:45:c9:
41:76:94:ca:2b:42:2c:08:b1:50:c5:0a:b6:b3:7f:
de:6d:6e:96:05:91:f3:6e:63:fb:31:f3:f8:99:f7:
ea:71:06:e2:f8:7a:51:75:1f:fd:74:45:f9:7f:1c:
71:2f:73:cd:75:9a:66:17:0c:83:f9:c9:17:e7:b4:
a4:18:8d:d7:e4:da:43:27:90:a5:7f:49:0c:1d:1a:
ca:c1:57:1f:46:34:b4:db:fb:f5:a1:f0:43:e7:57:
cd:8a:60:ca:db:85:3f:39:09:ba:4b:2f:97:77:05:
63:f6:91:6d:d6:6c:b9:85:01:59:a5:bd:de:f1:12:
06:14:f3:43:75:b3:ca:fc:6f:98:48:7c:02:c3:4c:
c0:83:1e:98:1b:77:98:d8:bd:84:c4:a1:d9:8f:94:
0d:d3:0a:eb:9b:32:75:17:8f:cf:40:34:10:53:ac:
21:fc:44:e3:56:0c:f7:e6:c1:07:1e:8f:e3:94:07:
1b:8f:8b:72:31:ce:fb:d8:d0:7a:e2:1b:a7:39:c8:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:48:27:D2:D2:CE:7C:93:0E:FA:97:A3:2E:94:16:C1:6D:CB:3E:19
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c6:55:1e:96:33:3d:00:6c:ea:f9:14:60:fd:94:c4:45:71:
52:93:01:d2:f7:6e:34:7a:47:d2:51:f0:0c:e1:1b:75:dc:94:
36:78:c0:6a:99:ef:c1:06:ba:15:37:79:0a:d2:5e:b1:70:b8:
11:ea:e0:c5:0b:3f:fa:21:cb:9f:ae:0d:b3:dc:dc:5f:52:ad:
47:d3:2d:51:78:03:30:af:37:aa:85:e9:3c:8e:36:b8:9c:5e:
b7:91:b6:93:cf:b2:ab:d6:47:72:e6:34:10:be:32:b1:c7:bf:
a0:67:3b:70:dc:4d:35:dd:4f:a4:b0:b8:5a:ed:a0:14:0c:00:
36:61:92:0b:1b:f5:62:fe:50:0d:83:d2:be:b7:79:9b:c6:c4:
71:b9:a2:ab:3f:06:33:27:73:f9:25:7a:6f:57:96:e9:9d:e8:
46:8f:e6:da:8e:d3:68:57:9c:b8:b4:ff:68:d3:81:32:04:17:
60:d3:fe:83:da:22:8a:c4:aa:db:82:c7:ea:33:ad:a5:6c:12:
ea:da:88:ff:e9:5f:50:82:11:73:57:e2:2b:4b:19:99:06:9e:
e4:84:f5:76:5b:83:e9:8f:84:ea:6a:00:85:07:be:4f:91:94:
e2:bb:15:ee:92:7a:8e:9e:61:0f:dc:d5:dd:a1:86:fb:a9:bb:
30:09:c9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:18 2025 by rpki-client