Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json)
Hash identifier: zgp1TRVfKB6yP6jHach9SH6gdEtyojkFAgqUcGn3mvU=
Subject key identifier: A9:10:0A:0F:C1:8B:CE:11:AA:EE:6E:5E:51:09:49:E7:35:54:42:1A
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 0194BCE0E157AEC626810E8BD03A71EEA660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
Manifest number: 10E6
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: 1TcCUmdFrJ4xY1w7Cm9Ii2p2OAI.roa (hash: qmEuHaUzI0FK9017FiHCoxm3Co2AbQRt6mNOCsB01Zg=)
2: 4TefOlatmM0RZvlgyykepaTA69w.roa (hash: oK3ggt3FwEGdGg67HpifWxggQ4sHuczhuCdiLpHFNGo=)
3: 8AIOf5iiWGq0P893PCbTNf2BkGU.roa (hash: HBMubVYts6z6OX4Jo+t8Ek09rhVu9H6F5CshJadR9AA=)
4: AIEW49j5InMuprcIv1re5ELo7Mg.roa (hash: CspD88WXE/VTrfWO2t59apJyKXsmRJQByqBIfAYqYok=)
5: NCuZRLXUSqeQd0-K94k8sdWt8i0.roa (hash: 9KnkKk3vCESK/jiryTSBEmdsg4CHDO3QXfIZjaFh0FM=)
6: On5lyzSET0ydKmVVOBEDylk81C0.roa (hash: pnnvW0nlSJDPJK8HFPyIdW6FPPTBrIYteIEK/Q4CTBU=)
7: VDBZ-Do7oLcSjkfG0QXXLZFsn18.roa (hash: tsSmWQNC/m3Eo2x7t6PBKV0awmBGlt2M1agXJLIK2d8=)
8: WrznMHjZ-TWido1gLYI1bfVUCu0.roa (hash: ihQrw9/7rFTMBQ43NuItjX9UIXKmTvOZATZckZMKMRU=)
9: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: 3pQhXO6PVVSRlTCQppJEVEBKVMCIjqL0+wKB1OtOoAo=)
10: eIFvvK-ivxwVefbgEMRWrAvh218.roa (hash: enbiuy39QSMflYfm+7UJdD/VijdNzRJOnnOULTcOwog=)
11: lRDpcMs9bdL5LekISXn8HOYdt5w.roa (hash: wQgu4dQRpBf8xSuiFs4AOLGSs9pN4U3S1WwC8RUnajc=)
12: lytgc_AFskoSPGUZi6kP67WVCLU.roa (hash: dnsTqSN8v/NE3YKVgJGW35iPeddPANKJv7U+UECznkc=)
13: sCxYlTWiDhdRMcngf850A6XqaOE.roa (hash: kqrC9Mj0ll887+4wrCmPGnjHuKfBNUmVpy0g2oMFtCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e1:57:ae:c6:26:81:0e:8b:d0:3a:71:ee:a6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=a9100a0fc18bce11aaee6e5e510949e73554421a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:92:81:33:28:48:7d:a3:85:07:4b:a5:ce:
c3:ed:18:f7:3f:94:61:32:06:27:1b:0e:09:b4:f0:
9d:45:d7:a0:48:4b:08:59:9b:1f:f1:e1:ef:2b:97:
1c:2a:fe:20:e2:7f:70:38:0c:a5:8c:ad:98:58:f2:
80:0c:1c:1f:93:24:c6:ec:db:4f:e7:cb:bb:bd:02:
4e:eb:20:50:0b:f6:bf:06:8e:29:ac:46:02:19:81:
bb:c0:81:de:e4:6e:47:aa:09:c1:c4:a7:6d:e9:84:
37:a8:e3:ea:13:d5:ee:bd:c0:18:4b:df:af:53:fb:
ab:22:ad:95:03:35:7f:cf:33:48:12:a4:ee:00:db:
9b:52:14:12:03:63:49:27:0f:13:ee:37:b3:1c:81:
1f:ff:ff:d6:66:e2:22:7f:e9:d0:5e:b5:fe:01:2f:
cd:0b:88:c4:79:77:5d:08:7c:18:08:89:0e:b8:9d:
cf:7d:de:2b:9b:18:b2:f2:2a:6a:e7:da:c3:39:a6:
74:c0:20:27:c0:02:bc:91:0d:2e:46:f0:fc:85:d5:
13:ba:cd:ee:d2:cd:24:01:2e:0c:12:da:3e:25:c1:
0a:83:06:f0:48:61:1e:ec:ab:40:39:ec:b6:bc:61:
6e:ba:46:9e:61:80:1a:a5:52:81:b9:ab:1a:bc:89:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:10:0A:0F:C1:8B:CE:11:AA:EE:6E:5E:51:09:49:E7:35:54:42:1A
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a0:9d:d4:98:07:19:54:98:33:09:c4:48:61:97:6d:e1:31:
dc:1c:95:ad:76:c6:d8:30:71:ab:97:91:b3:c2:0d:7f:ad:19:
cb:14:81:93:6e:c0:ca:ce:fb:78:16:9f:29:20:8f:56:46:a8:
ac:bf:97:e7:49:53:dc:c5:86:1d:b8:ab:07:fa:d8:5f:fc:d5:
07:dd:7e:3d:e8:ea:81:b4:ee:b9:c4:68:a7:be:0d:1b:42:f4:
3a:d3:93:78:5c:69:2d:20:1c:fb:f9:6b:bf:fc:89:18:74:81:
eb:be:67:c9:51:3f:6e:73:99:35:ba:d0:58:63:65:e1:65:c4:
62:d6:e1:92:af:f6:97:1d:72:d6:09:ce:f0:cb:38:4d:d8:fc:
67:41:56:e9:8d:98:fb:21:a4:d8:b4:18:47:a2:24:ca:1d:2d:
29:78:0e:b9:c8:0c:75:30:e5:db:39:8c:97:33:c9:ec:4a:bd:
6b:2b:a3:67:de:39:c3:23:eb:e5:0a:72:76:c6:63:58:89:f0:
ab:3f:87:b1:fa:60:fb:d1:53:34:ff:b0:65:76:54:41:c0:63:
ba:30:d7:d9:2d:c9:76:41:50:0d:f8:03:b7:8d:34:36:10:e4:
07:8e:4c:d5:bf:1b:4c:65:ec:df:90:48:2b:f4:c7:32:d5:19:
53:e0:fb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:12 2025 by rpki-client