Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
File: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft (raw, json)
Hash identifier: uIVlSmAfZqqak1BR2dH2dCaHtT1dNsK2nH/3KMNVZ8Q=
Subject key identifier: 35:A3:86:F0:DB:7A:44:F5:71:4F:F9:3C:E6:45:8F:82:91:4D:C2:D6
Authority key identifier: 6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64
Certificate issuer: /CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
Certificate serial: 0194BCE0C3B33DD29C1E271601E2402AD3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl (hash: O0iRjBQVwYppWGy+5ebbP71auFp+Mi6rQcbD+G9rK38=)
2: gL_kuMaqCBJwQIMIS7ldG0BgqS0.roa (hash: aP7wklS1c2nj/ZqiWpRJ5vMpKjr7pu6Ax9+m6w/ftd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c3:b3:3d:d2:9c:1e:27:16:01:e2:40:2a:d3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=35a386f0db7a44f5714ff93ce6458f82914dc2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:83:e1:e5:c2:1c:b1:6f:75:05:2e:1e:e6:
0c:ee:e9:ac:10:94:97:ea:06:38:06:9d:d7:de:4b:
b9:a9:21:67:e4:c7:54:f0:4d:02:81:2d:d0:ea:d9:
96:53:91:7a:f8:a5:36:fb:8a:28:44:0e:82:6c:d7:
65:a1:3c:6d:26:cf:2d:47:ad:17:65:00:dc:5e:cc:
17:d4:79:a6:75:6e:e2:2d:94:1f:0b:51:7f:99:b8:
7f:69:30:08:9a:30:3b:87:cc:ed:9a:47:46:fa:e2:
5c:6b:59:a3:8f:18:81:b2:23:cf:f0:8d:bd:eb:75:
9e:11:51:11:98:3a:3f:1e:d6:1f:8e:4e:89:a0:65:
2b:91:d3:ed:81:78:59:91:5a:63:66:e2:99:d1:d7:
f9:51:9e:f5:9d:64:ba:67:01:e0:bc:7a:a7:3f:55:
94:9e:93:0b:26:1b:92:69:aa:d9:de:00:ea:66:00:
ca:79:f6:99:33:fd:4b:88:43:96:67:46:68:88:17:
1e:32:46:14:06:14:4e:c1:95:69:1f:75:1c:3c:cb:
2d:1e:58:0f:d4:68:ef:1f:cf:17:1a:af:15:ad:0e:
63:fb:2b:66:68:d3:5c:7c:24:d4:05:f2:19:64:34:
4f:63:63:9c:c4:05:88:ad:63:13:a9:d7:48:41:7f:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A3:86:F0:DB:7A:44:F5:71:4F:F9:3C:E6:45:8F:82:91:4D:C2:D6
X509v3 Authority Key Identifier:
keyid:6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7f:f1:75:5e:42:f6:06:5f:9d:25:6c:04:1e:4b:f6:ba:d2:
be:a2:9c:2b:c6:5c:69:d4:8c:35:f3:e1:a0:c4:01:4c:06:69:
d4:c7:9e:a2:da:f6:4a:34:0a:fd:31:ce:53:21:53:2d:58:7f:
66:85:6b:24:09:64:c4:79:38:b9:dc:48:07:8f:56:e6:c0:0f:
c4:88:e0:c9:04:a6:f8:74:aa:c2:2f:73:2e:98:85:22:b9:02:
07:c2:5b:46:e0:be:bb:bf:ff:6b:a8:5b:6a:eb:6b:84:28:4a:
ff:b7:eb:d4:54:06:c6:e1:ad:48:8a:4f:5f:52:de:e8:ae:3b:
c8:96:fd:f3:af:db:f0:a8:4f:06:a6:9b:a8:26:21:2e:42:09:
54:7f:33:28:0b:5d:87:e8:a1:37:69:5b:86:30:6b:68:1f:43:
3c:05:e4:20:48:04:94:28:f7:62:38:c4:52:00:63:a0:1f:d0:
d7:ed:b9:b7:e4:35:7a:95:e4:1d:f1:c4:44:5c:99:73:c4:30:
c3:f1:3f:c8:10:c5:61:77:16:9c:e0:a4:1f:36:15:fb:8d:63:
ba:35:77:39:1c:c0:f2:97:f6:a8:32:9d:82:fd:4c:8f:f8:aa:
f7:5f:9d:9b:7f:c2:ad:3e:2a:f8:c3:18:19:11:63:13:73:12:
c7:b5:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:24:14 2025 by rpki-client