Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File: blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier: 2nK7XsMBXn4didT7ajMKqlWDJYJRMgP9aTEhgkGZY7k=
Subject key identifier: E3:63:22:78:53:CD:7D:6A:48:D9:85:70:AD:D0:F2:3E:4A:BC:78:57
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial: 0194BCA987766E518B60BB1C678885134C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number: 1409
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: oXn+r6kQW9GRN9k84MLeZJIfinW0k/7i3Fjbjcri+Jk=)
2: pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa (hash: lA0EoJbAgOHytg/Q3yX/rveAnxbQAYlQALMvfLmzZeY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:87:76:6e:51:8b:60:bb:1c:67:88:85:13:4c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=e363227853cd7d6a48d98570add0f23e4abc7857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e4:ef:ee:e2:1f:ef:83:a9:08:b7:f7:63:11:
e5:f7:b4:59:5b:e8:87:56:44:9b:e0:e5:a6:ac:c5:
56:9d:6e:c2:59:30:a6:c3:ac:61:fa:a2:3c:97:13:
b4:37:a7:a7:31:95:91:55:ec:fa:f2:58:ff:40:75:
5d:67:b8:dc:0a:2e:3d:39:70:4e:32:e1:52:d1:c3:
1c:d1:0c:14:af:88:c3:bd:2d:bf:e9:e2:8e:77:78:
cc:7a:09:1a:c5:45:7f:05:93:28:7f:f6:dd:41:ff:
36:b1:0c:f7:2c:33:24:e6:44:7d:2b:dd:30:78:f0:
c4:c3:96:26:84:44:f0:85:54:af:a9:8d:22:97:88:
d0:37:0b:b4:93:6b:4b:5a:5c:9f:d6:f8:df:e9:ea:
fc:59:d7:c4:0c:77:65:5e:0a:30:2b:27:35:96:c0:
89:13:0a:09:f6:61:ca:1d:88:bd:07:d7:64:3a:55:
22:48:d8:3c:02:6b:02:50:c6:0d:91:37:f8:1f:a8:
14:73:1c:59:9b:12:be:9e:cf:90:2f:9f:3f:d6:5b:
e1:72:d4:82:a1:88:a0:34:51:16:6d:0d:66:44:7d:
7a:78:a8:39:88:93:28:63:26:9f:56:f2:aa:47:d8:
77:b8:2f:f0:ec:2f:93:5e:d9:8c:e4:02:e9:40:19:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:63:22:78:53:CD:7D:6A:48:D9:85:70:AD:D0:F2:3E:4A:BC:78:57
X509v3 Authority Key Identifier:
keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e2:59:c3:df:86:6f:d6:87:1b:50:08:be:dc:53:fe:0e:bd:
b7:41:e0:58:f7:f8:d0:78:a2:26:d1:98:1f:86:46:2b:07:9c:
c6:a6:1c:4b:f7:4f:d0:bf:03:65:a1:89:0c:db:82:82:ab:93:
29:0c:c1:d4:6e:6c:f9:32:cd:64:ed:dd:7c:5f:b7:76:db:d9:
79:9c:ca:b2:8b:6d:5b:83:b1:55:cc:41:99:ae:7e:dc:67:0f:
5d:8b:c9:b9:a3:85:57:e9:17:11:ce:90:75:4e:9a:10:a9:51:
86:20:95:db:bb:2f:a8:71:02:9a:93:64:3e:a3:b7:dd:26:3a:
19:11:87:08:a4:76:a8:f3:95:21:a0:8b:45:af:31:bb:42:54:
15:cc:0e:df:80:cf:e4:1c:31:a4:63:af:93:1e:49:17:cb:37:
d2:a1:1a:59:ef:3c:42:61:33:47:9e:c3:2c:6f:9b:62:f1:81:
ac:d6:41:f1:c5:1c:5f:a5:ba:37:ce:4f:ff:44:65:38:b6:12:
6c:54:da:85:83:5c:15:d6:c2:13:90:c0:15:cd:52:f3:52:0b:
43:53:47:68:1f:86:ff:b4:64:5c:f1:1a:70:e1:67:cc:01:fe:
5b:6b:2a:f9:57:62:1d:95:56:bb:f6:5e:d4:c7:4c:ca:6a:d9:
c7:4c:09:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:14 2025 by rpki-client