Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
File: v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft (raw, json)
Hash identifier: Y4TR9zDrPSv0w5O3Mrwy2vw6waOHmmVCT7aqtZyRg3c=
Subject key identifier: 0D:07:13:68:A5:EE:D2:91:B4:63:2D:9D:29:81:9D:8B:22:70:FF:93
Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Certificate issuer: /CN=bfabf5a474afe7212331670e831e119da38f284f
Certificate serial: 0194BD17824CCEAA98249F69B51789C2E6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: GhyJElhSMkb21ni84p3HgeSkxTQ.roa (hash: KwUCFvaWxHo9sPEoV9+enTpSMnw5D6fXp7AzPwgg1sY=)
2: v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl (hash: RnnBfuhaqlmwFyvCDKtcrdN0nMKgKyDxYYv+Ql5Dgew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:82:4c:ce:aa:98:24:9f:69:b5:17:89:c2:e6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=0d071368a5eed291b4632d9d29819d8b2270ff93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:bc:de:36:ed:b5:76:e4:6f:a7:2b:0d:83:
37:22:80:c2:00:51:d8:95:4a:df:ff:89:0b:12:77:
1c:c2:29:8e:18:58:a8:c2:32:04:9e:fe:27:06:1d:
9d:7c:ac:d1:8f:96:18:fc:3b:03:31:d4:68:2e:66:
58:5a:b1:33:e2:d1:1f:3e:13:91:03:ea:00:2b:59:
29:df:7a:a7:c2:e7:6f:36:ac:b3:1f:20:f3:94:71:
4f:72:a2:26:44:53:f7:10:9a:5f:06:ca:a7:09:fe:
34:8d:81:ab:2e:c1:33:48:cc:a5:ed:ec:64:3f:b9:
16:fc:b4:91:67:91:18:fd:29:c8:e1:eb:5f:52:91:
f1:92:ac:9b:87:96:37:d7:16:2a:fb:68:5d:6c:06:
f7:22:73:cc:a7:46:9a:9f:39:32:5f:37:12:a6:ce:
75:27:4c:f4:cd:a7:03:03:60:d1:21:d0:53:96:95:
1a:48:78:a3:22:f7:61:7b:56:ab:5b:82:a7:53:19:
eb:61:2a:49:c5:6d:2e:a6:16:95:f1:13:54:13:84:
9b:d5:06:e2:b3:d4:54:e4:37:f3:05:fa:a0:13:78:
00:6b:16:f1:0f:f7:9c:2c:9f:72:9e:4b:f5:b4:26:
11:1b:6f:ac:8a:ca:6a:7e:8c:18:8a:fa:95:58:50:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:07:13:68:A5:EE:D2:91:B4:63:2D:9D:29:81:9D:8B:22:70:FF:93
X509v3 Authority Key Identifier:
keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ff:06:05:fc:12:cd:a2:ab:9e:f0:98:c6:6b:b7:d2:75:65:
36:74:80:c8:21:ac:05:21:76:f5:85:42:97:0a:81:d3:20:c9:
f1:42:61:f1:9f:ed:da:10:99:ab:37:f1:a0:07:b0:83:5d:f4:
7e:44:24:94:2a:56:db:f4:8a:76:12:5b:20:18:09:2b:92:8c:
21:cb:cf:9a:06:bb:a8:08:64:c9:12:97:9d:37:68:b7:a9:4c:
00:20:39:88:c9:9e:b8:b6:6d:a8:b9:b2:33:20:53:64:d7:aa:
23:8d:d9:4e:fc:9f:bd:bc:58:4b:4a:8b:a1:04:ee:43:26:fa:
ea:11:31:11:f5:17:e1:02:2b:4e:0f:90:8e:fc:f8:79:21:c1:
98:19:c7:e6:11:d0:6f:81:21:96:15:a7:fb:cc:88:a5:b5:b9:
c3:cf:c1:e0:95:51:6d:43:80:3a:07:11:54:c9:b3:18:a6:e6:
8b:77:34:63:c6:16:01:a9:7a:29:aa:a4:b7:dc:d1:06:43:90:
81:a2:23:eb:56:69:d5:96:07:c7:da:33:37:7f:34:a3:9f:00:
e6:70:21:0e:c7:08:7f:ab:1f:cd:3b:57:4a:e1:0e:97:f0:a9:
3b:d0:87:f6:ce:37:04:8b:b6:ac:e7:ba:71:51:01:84:20:19:
ca:c3:31:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:34 2025 by rpki-client