Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
File: v38LbdEqN0vCk1y-nfYeCTtVvvY.mft (raw, json)
Hash identifier: +Lfrh9QfNV+d5Q7EM/Yu8ANtuntKW6pxrFdnr0wLEhE=
Subject key identifier: 2B:3E:B7:57:01:D0:44:BC:45:9D:B1:EE:E3:38:5D:8D:3D:88:93:E8
Authority key identifier: BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
Certificate issuer: /CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Certificate serial: 0194BC04C6F656A59F615983F7A7BD46E94A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
Manifest number: 08A6
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: BFvGU9aoz7rWEn9pDQTts3L78L8.roa (hash: +uFs0aOYRrvBvDpuqjNUWAjstxrFKIih9wDuEmZp20g=)
2: v38LbdEqN0vCk1y-nfYeCTtVvvY.crl (hash: OAxdyfqRuxbR+8bwGzLejao91f6MaT5+U8Zghr0vpzQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c6:f6:56:a5:9f:61:59:83:f7:a7:bd:46:e9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=2b3eb75701d044bc459db1eee3385d8d3d8893e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:79:a7:62:6c:2b:b2:39:eb:16:37:b1:c9:49:
79:17:3c:ab:b6:44:fe:47:9c:1e:5b:3b:47:55:0e:
11:19:fc:0c:c9:80:96:00:03:7a:6c:17:b3:18:b0:
da:3e:08:4a:f8:6e:8e:a4:7b:07:2e:5f:a0:95:be:
3f:f2:ff:cf:f7:c4:38:fc:ef:e5:c4:36:17:56:5c:
e5:57:1e:55:e5:42:77:36:d2:35:25:16:ae:1b:16:
12:64:e5:cb:82:ec:6d:70:cd:41:85:54:af:09:4b:
a5:88:f3:f3:69:40:77:dd:44:90:75:d9:5e:17:56:
2d:74:a7:03:d0:fc:7a:95:e9:85:54:61:6e:07:7d:
b7:ef:fb:78:a8:d1:ec:b3:ce:a9:ab:ab:7c:36:c7:
0a:d6:5e:77:17:21:ac:6c:97:06:01:a2:dd:b3:6f:
30:7f:dd:2b:f2:29:e4:ad:77:44:2a:ea:ca:f0:0a:
aa:25:c2:4b:f3:e9:d2:54:c1:36:50:3e:cc:0b:49:
c0:00:30:1c:be:7d:6d:d5:b0:94:66:95:88:24:3e:
5f:58:34:28:5c:e0:5d:16:39:bf:ec:c2:47:7b:97:
e9:3b:ab:58:94:00:ce:d6:24:71:e7:e4:e7:08:32:
83:11:65:d7:e4:ef:d9:0c:53:f2:d5:2a:b2:85:bd:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3E:B7:57:01:D0:44:BC:45:9D:B1:EE:E3:38:5D:8D:3D:88:93:E8
X509v3 Authority Key Identifier:
keyid:BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:aa:1b:5f:7b:95:09:c6:45:e9:d7:cd:82:36:70:e3:be:8b:
14:e7:5c:87:a0:3e:ce:78:cf:6d:4f:18:e1:9a:eb:a4:94:0f:
6d:65:73:e1:2b:71:55:d2:f0:c3:c3:50:3c:bf:e4:c2:16:29:
36:ec:24:dc:54:e3:2a:8d:69:80:f3:46:2c:89:c6:bf:73:2a:
be:44:55:f6:57:be:e8:b6:0c:b4:5a:a5:43:d6:cb:a2:54:67:
a6:bd:3f:19:b1:c1:37:6a:76:6d:b0:1c:28:cc:06:b2:04:96:
34:b2:c1:99:89:da:a5:b3:05:57:32:53:ae:fc:be:65:f7:a3:
ad:cf:c0:6f:51:e5:bb:46:e3:28:31:5c:24:1e:aa:60:53:c7:
88:9a:93:8b:3e:bf:c0:8c:db:83:10:07:d7:ed:2b:b7:71:c5:
e2:f1:87:f5:6d:57:70:33:e6:da:80:a0:f9:1f:af:cb:ff:4a:
9e:f2:24:40:9f:e9:7b:d3:4f:de:4f:3c:64:91:ca:b9:18:78:
9c:90:50:3c:46:db:09:db:e8:7e:fc:96:e3:f3:6d:bf:f4:41:
35:f8:b0:5f:dc:98:ca:78:ad:17:4b:ad:9e:94:1b:77:0d:34:
b2:61:3b:83:68:9d:e4:c7:a3:8c:75:e3:47:1c:23:7b:85:47:
c4:3b:e3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:48 2025 by rpki-client