Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
File: b69IsCuX3C0xIlCqI0CDuMG7noE.mft (raw, json)
Hash identifier: AYpn7RgXZhWZ/ljBv6ALfjUIRnJHSjFeR/8RxpT5vOk=
Subject key identifier: 4A:64:CC:3D:34:64:79:B8:2D:3A:4D:74:80:61:2A:B3:97:0C:AE:BD
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial: 0194BC72F79D4BA6F074EB480BFA88C79CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
Manifest number: 0145
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: Yz1F2rqvJTcqG3g6V0vESHcoWQk.roa (hash: uqU7Z+1Ai65Iy0koLlSQKkjmTH9OHYbhCjqXFSnYbA8=)
2: b69IsCuX3C0xIlCqI0CDuMG7noE.crl (hash: pNEO0+s/weiBFCgo7PZxlslQkOuv//3ePan0d9zxlgU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f7:9d:4b:a6:f0:74:eb:48:0b:fa:88:c7:9c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=4a64cc3d346479b82d3a4d7480612ab3970caebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:b8:bc:69:54:31:1b:5c:cf:d9:4a:51:59:
92:e2:e2:88:4b:7b:d5:d2:ce:33:d3:43:63:65:50:
bb:6d:f4:65:57:a7:97:01:ae:d9:f7:13:95:7c:ac:
1d:50:b7:d9:cc:d2:4f:7d:14:9a:f2:04:5a:46:0c:
41:0c:83:df:32:7d:59:93:ce:db:92:8d:42:ef:fe:
d8:52:69:bc:26:f3:24:58:28:61:51:2b:da:a1:d5:
6f:4f:fb:6e:2f:b7:c7:ce:7a:24:a8:32:94:7e:aa:
78:b8:f0:fe:ef:93:5b:b5:34:fd:ac:6f:4b:ff:53:
34:e5:5d:93:6e:ae:02:e2:07:5a:12:b1:d9:5b:fb:
ec:86:11:40:55:21:8c:82:30:34:85:e4:32:3f:d9:
03:de:c1:0f:fa:d1:10:4a:65:30:e2:6a:1b:34:eb:
80:9b:78:a5:98:72:73:a0:9e:a6:6e:06:15:ca:9b:
fe:11:48:79:87:39:4e:e9:e2:45:fc:b7:1f:50:3e:
13:de:17:98:83:c3:ff:58:26:33:8f:af:e3:c8:db:
a5:cb:bd:08:42:d7:4b:f5:3e:6f:5b:5e:d6:f6:35:
32:10:38:8f:90:65:05:93:f9:65:9a:7b:13:69:6c:
32:d1:ac:58:81:33:a2:27:c2:0b:f9:d3:27:fb:94:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:64:CC:3D:34:64:79:B8:2D:3A:4D:74:80:61:2A:B3:97:0C:AE:BD
X509v3 Authority Key Identifier:
keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fb:3f:e7:45:96:ae:e0:dd:35:6e:1c:fa:6b:2a:3a:5e:06:
b2:08:99:ab:d4:ca:9c:d7:8e:ac:34:7d:bd:97:0f:61:78:ab:
79:6a:22:a3:0f:c2:96:7a:e7:cd:84:f7:f0:4d:fe:35:fe:1b:
ce:88:46:13:8b:2f:6d:db:38:f3:88:c7:04:ea:4d:1d:be:3b:
28:ce:59:f0:12:4d:44:db:df:c2:5b:af:c1:75:85:62:78:f0:
25:c3:92:f3:e1:e2:90:98:e6:17:b1:99:11:e0:4f:bf:45:5e:
06:8b:95:e6:f5:c3:34:ff:cf:51:fd:3c:f8:84:cc:3b:eb:d2:
1a:87:4c:9f:32:97:ce:fa:6b:e9:9c:63:d5:66:b6:23:2c:66:
48:22:d9:f7:2d:f7:1b:5f:8c:e0:14:95:69:36:e5:57:4e:78:
3c:2a:d6:6b:8b:fb:4e:91:43:76:27:b8:f3:9c:ee:73:76:8d:
43:54:f1:fa:bb:05:c5:7b:d5:bf:99:8c:42:11:7e:c1:d1:56:
84:ad:c5:86:b5:e0:9f:2d:fb:8f:eb:57:61:29:02:d7:6b:96:
48:3a:81:14:86:70:6b:8f:83:f4:9f:28:dd:e2:e7:f2:41:27:
85:24:bb:e6:ce:45:e1:e5:75:0e:95:46:2a:9b:f1:a2:e6:44:
34:9b:09:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:19 2025 by rpki-client