Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
File: v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft (raw, json)
Hash identifier: +NqefOH0diMJtbQ30fFRYR/WdADjY9EbwHKx9GW1m3U=
Subject key identifier: 67:24:32:1B:33:F2:9C:CB:B7:99:0A:CD:93:03:16:C1:D6:CB:9F:CF
Authority key identifier: BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
Certificate issuer: /CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Certificate serial: 0194BD857D4373092BC2D47685D23855F777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
Manifest number: 133D
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: RyCW3YF5iKkzrNHX6rZe54l5IMM.roa (hash: nnvkgafHFhfZcY1hKxlsPbFkmUe449pia8RGh1NFs+Q=)
2: aJ0uGpexjSkAa27B-n72oqb3t3I.roa (hash: H6fzloTmxNo2mJK6Qd1BL+h1srxz+hjXl3IHpHqT1Kw=)
3: v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl (hash: NazuCuEmSD1e21OM6CTk+g1bRHr9gZAK5V8XzZ6bWt0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7d:43:73:09:2b:c2:d4:76:85:d2:38:55:f7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=6724321b33f29ccbb7990acd930316c1d6cb9fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:26:99:24:ae:06:9f:79:c2:0a:cd:24:c9:6d:
76:d8:5f:cf:ee:c9:52:61:cc:ed:f9:92:f5:6a:f5:
de:31:95:ac:5a:c6:01:9f:dc:90:b9:3a:e9:91:b5:
b2:f3:4c:24:eb:6c:06:c3:7a:84:55:80:e9:47:a4:
fa:9d:0d:03:aa:0d:04:ab:a3:de:5c:d8:3c:ca:b2:
4a:9a:cc:73:b4:35:c2:91:ec:62:b6:d0:48:78:50:
36:bd:49:e9:80:5e:c5:fc:fc:3d:5e:d4:ad:9c:25:
cf:15:78:46:d2:99:8d:a2:8c:7c:8d:cb:be:2e:c5:
85:3e:ce:e5:44:b9:be:a5:47:74:6d:6c:4e:6e:cd:
09:24:66:09:a1:83:72:0a:3d:1f:01:2a:94:12:f8:
e6:1c:6f:76:c7:d2:5a:a2:6b:ad:e7:9e:df:a0:ac:
c9:46:5f:d3:a7:0e:df:01:20:73:88:aa:cf:32:7a:
c3:8c:68:7d:be:18:5a:eb:ab:20:22:e6:45:dc:ef:
e9:65:d6:97:1d:cf:fd:da:26:d6:75:55:7a:12:83:
c4:4d:d5:d0:17:6b:d7:ce:0d:bf:e0:39:46:66:60:
55:f2:8e:a7:50:24:9e:ad:8c:7f:de:dd:5a:6f:3b:
03:34:a0:57:8d:81:f6:c6:ea:91:d4:45:06:6d:5b:
c8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:24:32:1B:33:F2:9C:CB:B7:99:0A:CD:93:03:16:C1:D6:CB:9F:CF
X509v3 Authority Key Identifier:
keyid:BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8e:38:72:91:71:33:d6:4a:96:9a:93:1e:7e:ed:62:eb:f5:
12:4a:82:96:1e:d8:ee:7d:de:e8:af:52:5c:c6:93:de:de:80:
92:95:5d:72:d7:95:dd:34:8d:ff:4b:12:c3:b9:f1:f1:4a:6a:
7d:06:99:cc:b9:76:c2:48:0d:1e:49:92:16:4d:17:4f:b3:24:
d0:f3:4f:e0:14:f2:01:12:a5:1c:c1:6a:18:ff:88:2a:e4:1a:
1b:16:6f:0d:3e:14:c3:77:06:a5:16:83:1c:6d:e2:fb:4e:e5:
7c:b7:9c:c8:47:a5:65:12:97:25:bc:33:b3:69:64:4c:e6:07:
94:18:7c:26:d6:ad:23:3f:d4:98:05:4b:b0:fc:ec:96:10:02:
cd:9c:9e:47:58:19:41:34:7c:ab:11:e1:46:af:3b:57:4f:f5:
49:57:a9:14:02:4a:dc:1f:06:f6:1c:af:5f:7e:15:34:4f:be:
14:d5:bc:3a:d0:33:49:c7:d7:91:c5:6a:b8:a1:07:d0:63:c6:
e8:4f:2e:7b:6c:4c:d1:c8:31:9a:d0:30:e9:5a:c0:9d:79:ef:
b5:ba:24:07:83:92:97:ee:e0:6b:01:2b:00:d0:f0:9c:16:39:
84:7e:aa:da:71:ba:a0:01:7a:ee:ae:f9:3d:ce:7b:71:7b:f9:
93:4b:83:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:55 2025 by rpki-client