Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: eK82gPXQIObWdVEf0KFW/DyoHhDSKnXgpNm8O9My/yQ=
Subject key identifier: EA:F8:76:61:F3:12:8E:7A:B0:2D:AE:F6:B0:4D:72:F7:26:D8:8A:BF
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 0194BD858BCB289C96147BDAED0D702460C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: hOHAXJ2ziBn0/TXmsIhwfqChlgcfSQJD6p0uoA7RSaM=)
2: gKY4N4flGE3w8VGawvt5MmzbsEY.roa (hash: n6hPnIZKkrQ9PZ3CvwgI/ENozP0XURH/9HKr+aSdN00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8b:cb:28:9c:96:14:7b:da:ed:0d:70:24:60:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=eaf87661f3128e7ab02daef6b04d72f726d88abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:4d:fc:0b:0d:a3:38:45:aa:0d:8a:7e:8b:
77:c3:06:db:3b:0e:91:50:dc:35:c4:70:1b:d2:74:
86:95:ed:34:ea:15:bd:9b:c9:3f:d4:16:90:4a:1b:
8b:9a:20:3c:8c:b5:ec:e6:ff:6e:f5:50:fe:20:c5:
3e:10:bb:83:1f:7d:81:cb:01:f0:58:f2:0e:e9:fb:
77:ee:ca:24:d8:9e:53:97:16:98:3c:9e:89:2c:e7:
06:67:f8:54:b6:6c:c9:f6:3c:ca:af:87:45:85:89:
a5:c5:a9:80:5b:24:50:d4:73:64:b4:15:67:96:d4:
4d:e4:c3:47:f6:77:9f:45:77:9b:8c:49:4a:fc:2f:
e8:3b:79:9a:5f:4d:d7:41:e0:03:5f:12:48:12:7a:
a5:1f:94:8d:bf:5a:f4:38:c1:33:39:a5:30:62:9a:
89:2f:c2:80:a7:bf:3f:12:0a:51:ce:47:ca:e0:dc:
5f:42:19:61:b5:19:28:9e:4b:ab:c5:9c:38:b7:db:
06:8e:f0:70:e0:78:f2:7c:ff:b7:16:7a:35:ba:9c:
6c:27:36:3f:62:cf:8f:6b:b4:0c:d3:df:e3:87:e7:
f7:8c:26:5c:fc:41:63:dd:fe:27:ad:bc:68:71:c2:
25:48:a8:15:37:24:50:ab:3f:54:7d:33:91:1c:42:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F8:76:61:F3:12:8E:7A:B0:2D:AE:F6:B0:4D:72:F7:26:D8:8A:BF
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3e:ac:26:3d:7c:ee:7d:8e:69:35:b7:a5:df:1a:16:cc:d7:
8b:3e:76:35:98:ec:66:a6:2d:84:41:e6:db:0a:64:b4:04:d2:
24:2f:9b:02:36:8a:d8:8b:cb:eb:0c:d4:f1:e9:fe:eb:1b:17:
c4:a1:fb:70:23:20:67:ba:d8:ce:61:78:0c:3e:82:8b:87:4c:
33:3d:00:d3:fa:0a:8c:bc:8f:09:8e:30:e7:86:82:dd:63:5e:
d4:f8:95:bc:6a:7f:10:f1:97:c2:b7:0c:8a:ed:ff:fb:48:96:
f6:95:da:07:26:e7:03:70:41:a4:28:88:47:6c:80:32:e2:1e:
7f:f9:72:d3:af:15:32:79:8e:90:1c:9a:6a:c5:b1:92:ee:03:
75:b1:a0:68:bf:e2:58:03:d8:0f:34:82:30:d9:da:15:2f:4b:
27:12:30:6d:19:a7:78:21:c5:b9:57:f3:32:98:71:2b:37:61:
b4:49:6f:6e:1a:d7:23:01:93:b7:0c:db:7e:9e:2c:b7:94:0a:
1b:5f:41:57:f7:c3:71:1b:f4:c1:98:47:59:7c:65:6b:e5:fe:
9b:c2:f8:26:68:d0:c5:9a:60:46:91:b1:a6:07:b5:0d:1b:04:
12:d8:d1:52:8b:db:dc:e8:66:cc:be:4f:41:7d:c5:e4:ff:34:
03:21:ad:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:16 2025 by rpki-client