Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File: 6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier: ExDdhAIT62iRRA4wLBaaUaatS7q3HHyQ/nJoWa5WHmA=
Subject key identifier: 10:23:57:E6:BB:FF:D8:B1:56:AD:21:A7:C4:B3:27:9E:B1:95:F5:14
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer: /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial: 0194BCAA21D89B585B07818D1ABE34A720AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: 5EXO9UiepL6Zq1llBjLLIrL5oUg.roa (hash: f7qlXZI97BeR4x4m6/QuC0gLJcnSYhH/2MDokTxi6Pw=)
2: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: NQVrAcuNIxqQhQrTffPWf2uMRvAZCsTAdl8L1KbkLb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:21:d8:9b:58:5b:07:81:8d:1a:be:34:a7:20:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=102357e6bbffd8b156ad21a7c4b3279eb195f514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:3e:aa:d8:bf:35:1d:ee:fc:fc:2e:97:1e:
72:49:0e:01:6d:46:55:27:71:8e:92:77:f0:6e:41:
8e:fa:01:bf:30:2d:38:b3:38:cf:09:43:0f:c1:2a:
3b:e2:b3:fd:ac:14:32:0f:9f:f5:31:54:87:27:ae:
5e:25:d8:7f:5d:9f:43:a1:d9:94:63:1d:7a:16:c6:
9f:17:1d:0e:7c:8b:de:4c:63:7f:28:c9:60:4c:ea:
1c:63:ac:18:0e:52:01:9b:0a:6c:22:36:8f:78:19:
35:55:85:36:d5:6a:4d:ce:eb:cd:45:53:2b:22:cf:
c2:80:d8:b4:9c:ed:8a:13:bc:b1:b9:10:6e:a2:e3:
05:54:76:22:2c:bc:c1:47:22:f8:2d:de:c4:e1:d8:
ed:6a:1e:d0:d3:f8:cf:f7:67:f4:db:28:88:09:c4:
8d:4f:93:a0:de:b1:71:24:89:d9:16:a6:0d:da:73:
20:08:18:db:ad:c9:d5:e7:06:84:72:c5:c7:5a:33:
8e:41:ff:a0:f5:22:7f:6b:70:4f:46:f3:9b:12:8e:
98:a4:21:8c:8d:03:86:16:c1:6a:5e:99:69:ec:45:
0c:bc:f4:d5:a8:f8:f2:8b:f8:95:74:9d:a4:30:ce:
e5:fb:43:b3:bb:08:09:de:03:9d:78:a5:c9:c0:47:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:23:57:E6:BB:FF:D8:B1:56:AD:21:A7:C4:B3:27:9E:B1:95:F5:14
X509v3 Authority Key Identifier:
keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ab:39:3b:fb:8b:1b:aa:bf:c7:82:80:b6:90:bc:09:04:c3:
a5:d8:6a:52:ac:a2:02:6b:43:2c:a4:47:2b:9e:6d:26:e0:df:
b2:6d:89:46:f7:db:2d:3b:e1:7c:f7:6b:4b:d3:f6:49:1f:7c:
71:65:10:e2:27:8c:01:1d:8e:92:8e:d8:1d:3a:aa:f2:04:29:
f9:77:ed:27:fd:61:16:40:30:a6:36:1d:f8:07:a8:fe:a6:bf:
6b:66:aa:8e:c8:bf:db:8b:d3:a0:7d:97:73:c4:49:77:d8:38:
34:f1:6d:d1:01:a7:01:03:aa:e2:71:c3:d5:b5:09:61:a6:6a:
99:07:9a:e9:9a:ec:5f:db:5e:b4:82:54:f5:79:e5:4b:34:15:
f3:dd:c2:db:87:12:89:92:9d:c8:6f:d4:b0:b9:c7:ba:3f:e1:
7e:67:8f:39:60:38:6f:94:37:26:f0:21:f4:18:cf:b7:dd:fe:
61:40:54:9a:f4:37:b1:eb:05:b3:1b:cb:bd:11:5c:eb:9a:53:
f9:d0:1e:0f:2a:ab:04:6c:d0:cd:89:19:8d:0d:2c:40:43:75:
ce:71:c8:1d:8a:e7:07:40:e4:1b:f6:8d:2c:bd:de:e3:be:82:
90:90:c3:1f:40:84:fe:1b:d6:f2:d1:46:82:97:c4:10:f3:33:
66:96:68:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:07 2025 by rpki-client