
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
File: B6alie6EioBSI4GRuYA153USJyU.mft (raw, json)
Hash identifier: CYf1hk/eHDxy0Asg3eitl/MU9jh0tOC+JmAApRH6vOk=
Subject key identifier: 19:34:5E:39:B0:6C:CA:87:7C:2E:89:39:F9:24:F5:A4:61:3B:D7:F6
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Certificate issuer: /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial: 0194BD17AB4BF986021E8591D8605B1187C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
Manifest number: 0AA7
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: B6alie6EioBSI4GRuYA153USJyU.crl (hash: veJIhsd5gMi/NJpJSzKK6vCpqx4NTCH+1AENmBinxXk=)
2: HKdVcnfVobsdIXBp0QDt_Z0qTCg.roa (hash: HCRvOv3w8ga9OyNraAL7FomJBvkDq6oZ4SO2+hazIX0=)
3: QgKNV9zio7_KJKqkxNylTPo9ito.roa (hash: C7Gy0Q0jr3eJ97+uiWRJMvv+ZlpliYQOaljtVeZHGJ0=)
4: bJ3Yt6dDHk8Pm8b3mw9JOEx9PEM.roa (hash: Q+f3a2oxT0KKWV1uGYhiJcbNDy66Hv8e1IwzRSkuGAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ab:4b:f9:86:02:1e:85:91:d8:60:5b:11:87:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a6a589ee848a8052238191b98035e775122725
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=19345e39b06cca877c2e8939f924f5a4613bd7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:28:49:6d:17:6a:5b:7b:b2:d8:eb:a2:ee:
9b:87:17:b3:4a:1b:8e:00:37:95:4f:8c:2b:8d:08:
51:6e:24:62:b0:ef:7c:13:7b:f4:08:b3:f3:18:6f:
cf:79:33:78:90:cf:e4:a6:39:7e:f3:37:ed:d8:34:
96:57:fc:bd:13:88:d4:b1:35:24:df:f9:20:b8:81:
b3:d2:26:f7:99:fd:3f:ba:48:0e:d5:70:91:25:02:
6b:dd:18:d0:fe:0f:82:74:b9:d2:a4:b8:92:3d:39:
46:2c:65:64:ec:a2:08:6b:6b:09:46:1d:c2:48:fa:
a4:ce:8e:49:f5:99:73:b2:69:20:15:5e:78:14:d7:
f0:c9:3f:f4:0d:5a:19:5e:c8:86:c9:aa:7d:aa:ff:
88:bc:8c:26:98:25:fd:a8:b2:f2:1b:9c:d7:9a:b3:
19:a5:17:20:44:94:1e:f9:b1:f4:5e:2e:08:bd:2e:
7c:10:cd:c0:27:47:f2:c0:84:4c:1e:e5:20:5d:6c:
e4:9f:ca:1b:da:62:0e:05:ac:5f:79:6c:7b:3a:8f:
58:fd:40:7d:91:9e:03:f4:c7:e7:a8:da:70:c5:0c:
1b:79:03:9c:ca:63:49:6b:39:e5:55:e4:dd:84:dc:
3c:17:45:4b:0d:8e:85:d4:e8:44:b4:c8:00:d2:46:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:34:5E:39:B0:6C:CA:87:7C:2E:89:39:F9:24:F5:A4:61:3B:D7:F6
X509v3 Authority Key Identifier:
keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5a:b3:34:0d:69:e6:3b:82:70:11:97:a3:55:cf:07:ad:59:
24:85:15:aa:ba:bd:3f:96:17:10:29:92:87:43:25:4e:1e:1a:
3d:54:a2:f4:8c:77:7b:91:b1:c7:53:d2:6e:c8:c0:f3:aa:cf:
38:91:3a:48:27:38:43:d9:cf:2e:dc:2b:31:3e:05:d0:62:9e:
4a:59:a1:b1:82:d3:7b:f4:11:e4:5a:c0:b9:a3:8c:b7:3f:0b:
a2:da:6c:46:d6:ba:f3:6c:25:71:fb:b5:67:03:d4:3f:19:24:
88:b8:42:73:aa:a0:8c:40:46:3f:e1:c9:f0:23:6a:09:40:a6:
36:25:6a:12:d9:e0:28:90:97:55:d9:e5:33:31:77:82:74:b3:
a2:c5:64:b4:01:09:34:96:5f:b7:be:66:52:f3:06:43:c4:c0:
77:69:cf:7d:ac:15:b6:e1:84:15:7a:f9:86:9b:1c:13:60:3a:
6e:17:cb:76:54:0e:9a:33:af:f4:99:f0:73:ae:45:c5:4c:22:
48:3f:1f:68:1d:5b:47:56:f7:b9:34:59:03:d0:da:0c:84:21:
2a:43:a0:5e:23:23:02:cc:aa:5d:b7:58:2a:6a:f3:7f:a7:65:
8b:4a:89:77:9a:b5:63:03:54:24:49:ad:c4:be:d5:65:1c:fe:
83:91:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:17:42 2025 by rpki-client