Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
File: cG8KFhshe5zv03gc4mEZUb5Bnbo.mft (raw, json)
Hash identifier: BFa2hj5yXUdQ/iBUZgbPilU1MmbO5/qmZNOEbZWMuZk=
Subject key identifier: 49:07:6E:31:33:F9:A3:5A:E8:A4:9A:8F:97:85:A8:CA:02:72:64:2C
Authority key identifier: 70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
Certificate issuer: /CN=706f0a161b217b9cefd3781ce2611951be419dba
Certificate serial: 0194BC72DC533062FC2B29D19961D09542E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
Manifest number: 055F
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: R-wXA-kWQa5PdCJfUeOG1Bar_7E.roa (hash: eg3vfMOt4/2VviBbur6gIcbu+ezOh6ft9BbXqbZkqec=)
2: cG8KFhshe5zv03gc4mEZUb5Bnbo.crl (hash: gMMjcJ6qmhEMahXaHSrlopMr15oeZgnjw0DbuqVRl/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dc:53:30:62:fc:2b:29:d1:99:61:d0:95:42:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706f0a161b217b9cefd3781ce2611951be419dba
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=49076e3133f9a35ae8a49a8f9785a8ca0272642c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:75:44:8e:eb:21:41:8c:09:b1:bb:c8:d5:
78:36:48:cf:9e:c3:9c:dd:4e:64:22:82:d3:1d:63:
94:bd:56:b0:e8:d3:e8:a8:c7:ab:4e:4b:7d:a9:19:
5f:5a:f3:9d:4a:a3:ff:0c:d9:8e:99:89:8c:00:9d:
49:52:48:d0:cb:40:ee:3e:9a:e6:c5:47:db:e5:76:
c2:51:cf:9b:35:af:cc:1f:86:5e:15:ed:78:61:e9:
46:21:f0:1f:38:ee:5a:4d:2f:59:fb:59:97:b7:0a:
6a:c8:8f:37:c0:71:25:98:38:ef:21:4f:db:cd:c1:
b1:dd:a1:ed:d0:ac:e6:32:d3:03:b3:b1:10:08:e5:
f3:c0:2a:11:86:f0:e1:2c:3e:90:cc:fd:c0:de:df:
8c:8a:9f:9a:ec:6d:9b:65:87:dc:b6:94:7d:7e:53:
9a:b6:a9:b8:9e:86:6f:f8:6a:cc:12:0d:ec:f5:ee:
3f:e9:1b:d8:e5:73:04:3e:09:0f:83:8e:1b:09:06:
0a:e0:60:65:81:32:fc:45:49:23:71:e1:93:49:1f:
6a:9e:f4:0c:82:f2:cd:b8:bf:24:e7:53:1f:55:03:
9e:a3:1d:ec:91:1c:4c:2f:28:27:06:46:05:1a:e1:
0f:b6:26:4e:a5:29:da:cd:08:74:88:2e:64:da:59:
9c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:07:6E:31:33:F9:A3:5A:E8:A4:9A:8F:97:85:A8:CA:02:72:64:2C
X509v3 Authority Key Identifier:
keyid:70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:3c:fa:93:26:59:7a:a9:f4:7a:fe:81:8e:63:c1:3b:34:50:
75:54:4d:26:c8:39:91:76:6a:03:f5:12:20:ee:f9:bf:73:c8:
09:ff:8b:f5:e3:db:cb:74:9c:d2:9f:52:a8:e7:72:fb:6b:32:
b6:a1:99:39:de:11:68:7d:b1:72:27:e9:6b:8a:a4:34:60:18:
5d:ba:57:a2:5a:95:7f:c6:91:0d:37:41:72:23:82:c8:a6:9a:
9f:84:44:b0:e0:b9:c9:dc:43:f2:65:65:2e:84:a1:fc:22:5c:
97:66:bb:6d:18:13:df:34:07:85:de:23:60:9c:b4:34:7c:9e:
11:5c:25:a7:1d:a2:d2:71:cf:d1:aa:78:27:1f:9e:7e:a3:bb:
ea:1d:c7:4a:98:db:2a:c9:a3:21:06:b2:98:43:45:90:d8:99:
05:31:ba:2f:03:81:4f:87:14:f2:a9:da:a3:ec:63:54:e2:bc:
46:fb:99:a6:c4:be:8d:43:b1:13:ba:5d:ee:81:0d:34:70:aa:
2d:93:46:6c:c5:45:f8:29:de:6d:4f:c7:8c:1a:97:41:47:a6:
b3:f5:52:c2:9d:56:7d:86:70:4c:88:b7:da:d4:87:20:25:07:
98:31:35:b7:ca:a2:7a:a9:ef:eb:ca:34:7b:01:76:d3:96:11:
ed:f9:f3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:23 2025 by rpki-client