Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File: b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier: 0fuOweAsarSaoy1eMOyuO6RV1FvLj2vlxwvrnL8N3es=
Subject key identifier: 17:08:39:7A:36:B1:4F:52:22:C7:F9:8A:3C:9E:A2:69:0E:6F:8D:2D
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial: 0194BD4E7F5396B4077D66B2B313A718D682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number: 047F
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: 1-lS6f9wSKHxOg6D2m2c9vfd7pZc.roa (hash: aStR6HaP0T4xDkO1lgRZTnmtqTCZZifP6GMOa/WBLIw=)
2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: WQyKNMRP5oRIm6Ebod/6LO4NumEHhHQnA07QuIW39tc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7f:53:96:b4:07:7d:66:b2:b3:13:a7:18:d6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=1708397a36b14f5222c7f98a3c9ea2690e6f8d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:4b:8d:8c:d7:9e:24:7c:ba:7f:76:35:93:
18:8c:94:64:eb:b6:b6:21:1f:a7:e4:cf:65:0e:da:
a9:55:16:b7:af:79:74:f2:db:e2:05:cb:f4:00:33:
80:aa:8e:2b:06:fa:a8:1e:e6:86:32:6a:fa:4d:da:
c3:d8:87:b7:63:23:d5:eb:f7:73:f2:4b:5c:8d:36:
20:31:2f:e3:05:03:03:d7:43:1b:f9:14:5d:f7:0a:
f4:72:03:fa:60:18:a7:e2:41:36:6d:7e:b7:88:06:
59:6f:d2:bc:4b:79:ad:f0:3d:bc:00:55:6a:5e:7a:
63:95:ca:f6:bd:c2:f1:10:3e:92:3e:7b:0b:e5:fb:
59:19:a5:0e:36:0c:9d:56:a7:cc:06:1b:e8:28:18:
07:f1:37:fd:4d:f7:71:4b:1b:c8:b2:11:f2:76:56:
a9:cb:68:11:42:c1:3d:88:cf:ec:69:a3:73:5f:84:
ec:da:2e:15:e8:1e:0b:71:ed:58:14:09:ab:8f:92:
05:dc:e9:53:6c:e3:4f:b6:d3:df:e3:17:46:c1:69:
04:a7:22:40:82:32:11:20:eb:73:cd:43:b0:a8:37:
0b:43:18:02:e3:d7:73:b3:60:db:fc:fd:61:19:14:
4b:80:22:b2:b1:8d:b4:ca:f5:1b:26:55:63:99:c3:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:08:39:7A:36:B1:4F:52:22:C7:F9:8A:3C:9E:A2:69:0E:6F:8D:2D
X509v3 Authority Key Identifier:
keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c1:cb:40:61:c4:59:25:16:82:93:b5:53:0d:43:55:02:dc:
74:89:af:72:27:5f:6b:88:94:f9:bd:b3:34:71:12:aa:34:af:
cf:21:63:59:69:bf:7a:d1:f8:1f:ef:0a:be:2c:d9:31:cc:bf:
83:d0:2a:fa:63:7c:d1:27:05:b5:38:75:ea:eb:4c:ff:61:01:
20:e2:aa:2f:f0:25:0a:04:3b:7a:c4:47:42:d4:0b:4a:4f:7d:
04:12:84:0f:28:1b:7e:46:eb:58:5a:94:66:e2:83:55:de:31:
19:ba:51:25:3a:d6:87:78:dc:55:1c:95:8a:9c:f5:f7:a2:5b:
43:26:71:98:99:73:b6:6e:47:36:43:55:d1:fb:81:5b:1d:0e:
7c:4e:5d:a8:27:89:00:2d:a4:da:4e:f7:d5:47:01:df:33:89:
cd:ac:39:2d:56:c1:04:db:27:48:02:18:18:d2:aa:e0:a2:99:
61:c7:d3:94:35:3f:53:2d:34:07:38:e8:e9:a5:33:34:c6:d7:
31:fe:22:4b:3e:a9:03:10:c0:bb:e0:25:26:a1:5f:ad:da:01:
93:ea:5d:32:ff:ff:f1:89:5a:17:46:63:ac:c1:e8:0d:0a:60:
e3:6a:c5:e1:6a:6b:e9:72:d0:f8:6b:3f:db:65:b1:e3:98:3c:
b8:29:f5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:59 2025 by rpki-client