Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: 33H6n/tn5/FVse0lG38xCU5mU3bxo5hp2/fm2XYmIEo=
Subject key identifier: 99:52:BC:05:9D:7D:67:2E:DE:C4:76:BA:D7:14:3A:DF:F1:15:D6:80
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 0194BC3CBFE71F119481343EA79E4FCFD848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:25 +0000
Manifest this update: Fri 31 Jan 2025 12:01:25 +0000
Manifest next update: Sat 01 Feb 2025 12:01:25 +0000
Files and hashes: 1: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: gqTaOind8m0t+H4b7gi9KtW/GYl/dupJjk2uYXF+siQ=)
2: hnLpwyr61Y9rfW-orNijGQDSlok.roa (hash: JEbPbaPqAJUCWgWRtGXMytB73uHDdZ/eD28RxoLxK4I=)
3: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (hash: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:bf:e7:1f:11:94:81:34:3e:a7:9e:4f:cf:d8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Jan 31 12:01:25 2025 GMT
Not After : Feb 1 12:01:25 2025 GMT
Subject: CN=9952bc059d7d672edec476bad7143adff115d680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:51:be:db:e9:8a:12:bc:64:4e:a7:de:5d:
ed:b6:d6:c6:1b:1f:6e:a6:99:3b:a0:a5:c1:2f:1d:
07:aa:20:3f:93:f9:86:53:cf:3c:02:83:cb:06:a0:
43:7d:1e:ba:46:f7:ba:9f:c8:5e:c1:a0:7c:a3:0d:
b8:63:d6:0a:74:57:d0:6a:55:62:9d:4e:d7:fc:2b:
41:5e:63:93:2c:8e:7c:11:43:ff:b3:98:c3:6c:91:
4f:6f:70:29:b1:60:c2:b3:a7:81:1f:7c:9d:42:e7:
2d:74:c8:e0:9c:90:19:08:8f:c5:b9:df:cc:34:2c:
10:8b:09:61:58:89:ed:16:19:36:cc:76:e5:9e:4a:
5c:15:1d:e5:0a:8f:56:f3:90:47:14:17:da:be:d5:
4b:d9:a9:6d:69:d9:20:84:91:5a:de:d3:3e:c5:4d:
62:7c:e9:db:db:ec:b5:ec:c9:64:fc:b0:41:1b:f9:
9d:30:9b:d9:f9:fc:56:39:5f:c0:40:a8:cc:53:32:
06:dc:c1:c8:28:48:55:3b:52:6b:01:aa:7c:57:08:
94:78:4e:b2:ff:e7:18:f1:53:ef:ef:16:ed:c6:29:
e9:6b:42:04:e7:87:a5:02:c7:7f:c9:d4:62:76:34:
cd:5e:32:8d:55:e8:b4:cc:6f:97:7b:31:51:2b:d3:
34:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:52:BC:05:9D:7D:67:2E:DE:C4:76:BA:D7:14:3A:DF:F1:15:D6:80
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a1:6b:82:8d:7d:a3:fd:09:53:0c:90:7e:fb:40:b7:63:ba:
e3:c7:5e:4e:c8:d0:d5:40:1c:20:e7:67:4d:f0:4a:ba:e8:9d:
3e:29:18:c7:e6:d7:f5:ff:3a:38:ae:86:85:7a:ca:34:d8:ff:
b6:14:c4:6c:1f:b2:79:1e:db:9a:01:1a:7b:3f:be:1d:00:b6:
cf:c9:9a:35:d5:00:3f:ba:48:a8:a3:fe:75:8a:75:99:12:29:
0b:81:c7:95:e1:87:e3:b2:37:c9:ff:81:f4:33:c9:4e:2e:83:
5e:6d:78:5e:65:68:5f:c6:07:f6:de:14:e2:c7:f4:db:e6:c7:
91:7d:35:fa:80:ee:b0:34:cc:27:d2:06:f9:09:5f:61:3e:c3:
3f:57:f5:77:94:06:9c:bd:43:b0:c7:bd:91:26:46:cd:b0:fc:
a5:a3:2c:37:93:d5:8c:6a:39:80:85:55:fc:e5:29:39:21:69:
1a:5b:95:f0:8f:f1:51:57:ea:58:71:1a:29:f8:65:19:5a:f7:
98:6e:32:bc:64:d1:a4:81:b7:79:52:97:31:13:a8:06:df:67:
b4:9c:cc:f6:05:93:1c:e2:f2:c3:8f:96:9a:b1:db:43:5f:70:
80:a3:1b:91:bd:d6:65:07:29:99:ed:d3:83:06:a0:63:57:49:
69:79:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:19 2025 by rpki-client