Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
File: C6VqvctPbwyGuDLswT9eJJch1vg.mft (raw, json)
Hash identifier: aq05ot2zHKpINI4bfxpfM9UKwSA2mK/E5sRMbgkOobE=
Subject key identifier: 78:15:3E:DF:3A:5B:87:9C:F7:06:78:DF:1A:14:74:FC:FC:AE:59:10
Authority key identifier: 0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
Certificate issuer: /CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Certificate serial: 0194BD17FA232A5EC409A564E2A53D289DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
Manifest number: 0AD3
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: 10gRzD3VrAGl4bbzZAnzRnZ-9NY.roa (hash: lcACm1XYWQGs+OoRyS5RawPhw9wP7Mmy1MtCSpjZTr8=)
2: C6VqvctPbwyGuDLswT9eJJch1vg.crl (hash: 8w2GnCCrLEXL3ql7me9ljLXMQYUFzw0caBKXBkToNEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fa:23:2a:5e:c4:09:a5:64:e2:a5:3d:28:9d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=78153edf3a5b879cf70678df1a1474fcfcae5910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:12:d4:5f:e2:90:90:96:08:28:e0:24:79:
07:5f:9d:29:0c:1a:99:45:99:e3:f5:77:27:1d:d7:
39:1d:98:99:bc:bd:0c:74:df:6c:8e:5b:72:44:82:
e2:ed:27:29:14:f9:4a:ac:27:16:13:d4:c8:7d:71:
49:26:18:60:94:f0:a8:af:aa:02:3d:2f:2c:6c:f6:
55:61:a3:bc:d4:fd:59:1d:e6:74:ef:c8:f8:1b:1e:
f8:33:c1:36:7a:b6:38:7a:59:9a:30:08:e4:b2:11:
d3:d7:3d:95:d5:e3:9a:94:ac:46:32:0f:99:74:d0:
30:f8:f7:d2:f6:c9:67:99:3a:7f:f6:91:af:af:d9:
3f:ee:1d:03:a9:5e:04:39:22:67:f0:96:a6:4a:ba:
87:32:ad:d1:b0:ac:f7:ad:ec:e7:b0:87:c4:d7:11:
f7:b6:6d:4f:56:98:6f:b3:74:8f:eb:a7:dc:d0:2f:
41:21:b6:b8:02:ae:dd:d4:fc:59:df:a7:b3:f2:7b:
4b:41:6b:e0:1d:41:f0:c4:03:b8:03:eb:86:e0:ab:
4d:10:26:95:c0:9b:45:8a:ff:4a:49:05:85:fc:d8:
7d:5d:37:93:4b:c4:bd:e8:33:1d:4e:17:3d:cb:ec:
47:b5:fc:80:c3:4d:56:7b:da:a6:38:14:ea:b4:2c:
a2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:15:3E:DF:3A:5B:87:9C:F7:06:78:DF:1A:14:74:FC:FC:AE:59:10
X509v3 Authority Key Identifier:
keyid:0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fa:e8:9d:ce:2f:64:84:3f:d3:1c:b8:d3:a0:38:40:5c:e3:
39:8c:51:cf:9a:15:ab:c6:f3:84:99:08:63:84:7c:00:59:ee:
05:cc:cf:41:cf:22:61:38:55:1b:2b:d5:41:05:26:71:ab:4e:
e0:d6:fa:69:60:33:6d:05:c0:f5:8a:06:b8:27:76:da:87:d8:
0b:28:b6:a5:6d:d5:79:41:b5:37:88:f8:d7:5f:93:a3:e5:a4:
3d:e2:05:1c:e8:69:89:07:d7:09:49:0b:5a:e4:cd:43:88:72:
ec:85:32:96:33:76:fc:9f:3c:f6:86:84:30:e6:50:10:87:45:
a0:0a:f7:4a:07:da:85:72:52:89:d2:89:49:ab:50:71:ab:e6:
f4:05:fc:4c:cb:84:1c:f5:bc:14:63:82:4c:fb:c1:16:19:9f:
cc:f6:cc:3a:28:63:04:62:3a:97:57:90:5e:bc:ea:15:60:26:
ca:e2:60:60:1a:4d:9a:62:37:e5:b4:f2:9c:20:f5:39:cd:f3:
a8:46:b3:6d:d7:1b:62:d1:4f:c9:8c:91:84:30:37:72:9e:bd:
48:0a:1f:79:4c:2e:c2:20:a6:3a:67:21:20:31:92:3c:e4:2f:
cd:3e:94:54:ce:f1:c7:94:91:ef:d3:37:e3:ae:63:12:e0:2d:
3e:8f:71:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:05:06 2025 by rpki-client