Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
File: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json)
Hash identifier: JOeC0jA8xW2MMuQZawz5Du3FT0oeml+0deuUwQIIUEM=
Subject key identifier: 8E:96:84:18:1A:14:16:21:98:FE:A1:3C:75:36:C2:4C:86:D6:99:A9
Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
Certificate issuer: /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Certificate serial: 0194BBCEFA9EFF1EDC00C97F7E0EFB3035C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: bMVly6bB6Vc/cSIboSrSAs6TZkj/a5h5ykyHiFnRgV0=)
2: pBaxgCqTyeze3hcIp2M83HQrP4U.roa (hash: MsncevRB1zh5gU5+B31LnCwg/AwVLsxlHu2XQLm34Hs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fa:9e:ff:1e:dc:00:c9:7f:7e:0e:fb:30:35:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=8e9684181a14162198fea13c7536c24c86d699a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:f1:e2:07:e6:4f:aa:2f:38:f8:22:f6:75:
f7:c1:ff:e2:fc:af:b5:f8:d1:18:d5:29:c7:6a:40:
06:b9:93:ec:16:2a:29:0e:e5:64:d6:4a:93:3b:11:
f8:f4:8a:b2:45:02:88:3d:63:4d:3d:66:9b:3d:4d:
55:3b:f0:5d:04:23:27:60:00:8f:b7:60:3f:a2:9a:
a2:a1:09:7b:0d:38:06:b5:41:7c:a4:ea:5b:80:bd:
74:04:6e:64:93:ad:8d:eb:53:d9:9b:17:e9:83:c5:
cf:bf:4e:e8:53:20:ba:f2:4e:92:13:ac:09:5f:17:
41:64:db:b7:7f:7f:81:07:b9:17:11:e1:2b:5a:49:
21:50:a3:41:83:a9:5b:5f:5c:07:64:ce:8d:da:45:
54:29:f2:38:42:36:28:3c:b8:c8:d0:84:6b:37:6f:
2b:ec:f6:3f:de:fa:63:b3:d0:e3:31:12:39:8b:a4:
21:c6:21:dc:b7:10:d4:26:ca:ea:b4:d2:48:fd:c8:
f7:14:eb:bd:22:a5:a2:5d:6f:de:b3:6e:91:20:89:
f4:8b:61:3d:46:35:9b:e3:92:be:3d:33:ad:7d:c9:
88:e3:e8:3a:98:c1:99:19:4c:de:dc:b8:09:dc:7c:
92:77:1f:3c:64:66:27:a1:cd:ed:af:3f:98:96:af:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:96:84:18:1A:14:16:21:98:FE:A1:3C:75:36:C2:4C:86:D6:99:A9
X509v3 Authority Key Identifier:
keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:eb:3c:0a:25:ee:f1:c7:7c:04:ca:00:97:27:5d:23:a5:c8:
87:43:1f:7a:58:ce:c9:ac:19:14:c2:48:4e:8a:1c:05:5c:c8:
55:7f:21:2c:2c:8c:0f:fe:f4:2d:3e:ee:47:91:57:c9:9d:17:
b8:17:4c:86:aa:1e:bf:5f:c3:a1:df:1c:b9:cf:bc:2e:95:8b:
a5:ca:ac:dc:fc:90:0e:0a:19:ad:38:7a:42:67:5a:f0:1e:bb:
7c:e2:65:9e:24:f0:e2:07:73:2e:0c:50:e6:bb:f1:c0:d8:98:
f9:5d:f2:ba:2c:02:73:1a:a2:c1:8b:59:ec:3c:7c:d6:ab:9c:
c5:e8:70:22:b3:1b:1d:f3:5e:cb:04:63:93:80:c2:f6:4d:22:
12:d3:11:b5:b5:31:e4:d9:2a:16:ee:3c:fa:be:d1:65:8f:f2:
34:da:16:61:e6:20:41:3f:32:8f:2d:68:a6:5e:93:15:b1:d8:
b4:44:bb:7e:9c:85:d9:6e:b5:76:46:92:fe:c5:b4:77:dd:d4:
a0:15:76:f9:c4:3d:99:18:55:10:e0:ba:5d:bf:46:5b:da:ed:
3c:5e:9e:da:5f:b5:29:9b:06:b1:e9:1b:3d:f9:27:d8:83:c6:
63:2b:2c:89:ee:d6:8a:a1:ae:f7:e6:17:fd:7d:f2:ec:32:69:
4f:26:57:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:52 2025 by rpki-client