Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/bB9GgejH55bRvFrZhnBdmYqK1O8.mft
File: bB9GgejH55bRvFrZhnBdmYqK1O8.mft (raw, json)
Hash identifier: e79I3ueb8fDnW3FiF+SZmPGHW7Czn+K49W93XZ4J4Yk=
Subject key identifier: A6:9B:6A:C0:60:C9:D3:B6:38:AD:85:0C:68:30:00:F1:5D:4B:C4:30
Authority key identifier: 6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
Certificate issuer: /CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Certificate serial: 018E136D5022AE64FA601827A09BC798C00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/bB9GgejH55bRvFrZhnBdmYqK1O8.mft
Manifest number: 0614
Signing time: Wed 06 Mar 2024 11:01:54 +0000
Manifest this update: Wed 06 Mar 2024 11:01:54 +0000
Manifest next update: Thu 07 Mar 2024 11:01:54 +0000
Files and hashes: 1: bB9GgejH55bRvFrZhnBdmYqK1O8.crl (hash: cmxHeFuVAaa0hMZ2nrinrslP5Gy2Rt4MI2OYlyXr20Y=)
2: fBvWVp34p2xajWp-Lqp_rnTH1-w.roa (hash: kOFgWCuSUSlaobu3AxuRqpJRiFYER/nc9FYE+ZeSUmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:6d:50:22:ae:64:fa:60:18:27:a0:9b:c7:98:c0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Validity
Not Before: Mar 6 11:01:54 2024 GMT
Not After : Mar 7 11:01:54 2024 GMT
Subject: CN=a69b6ac060c9d3b638ad850c683000f15d4bc430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:7b:62:39:09:dd:79:20:1a:81:99:d9:01:
dc:74:ac:63:09:25:51:16:4a:73:00:d0:2b:53:24:
39:4d:e8:af:74:7e:56:66:e9:37:85:65:4b:bd:2d:
b5:95:cc:32:f5:77:d3:5e:60:67:0a:8e:23:61:ec:
22:39:b2:6f:db:88:79:41:21:0a:70:c3:00:c8:e4:
98:9d:39:27:ed:1e:37:d7:80:27:33:ae:65:f3:05:
9d:52:61:b5:e5:b4:e4:4d:e1:73:0c:00:77:21:f2:
5c:43:e0:31:ac:67:2b:0f:5b:36:62:29:7f:62:05:
d7:4b:38:e1:22:e5:b4:40:fb:0b:5e:57:dc:65:10:
d1:0d:3b:e7:22:71:27:e4:59:1b:35:a2:61:20:64:
fd:8b:10:f1:2d:a2:46:70:7c:b9:19:21:f9:78:95:
77:be:e1:fa:a3:5f:b3:8c:2f:d0:ff:85:93:3f:67:
34:33:8e:05:cc:bd:26:73:a1:77:3b:db:fb:dc:19:
1e:af:3c:bd:e1:c0:52:ed:41:57:ce:2a:2e:e0:8e:
f6:23:be:c1:5f:7f:7a:99:52:82:38:e7:b6:4a:6d:
26:c1:e8:23:b0:bb:af:b0:d1:51:83:a5:f7:57:73:
05:d0:80:dc:ef:87:0d:92:de:73:b3:19:55:ac:8b:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9B:6A:C0:60:C9:D3:B6:38:AD:85:0C:68:30:00:F1:5D:4B:C4:30
X509v3 Authority Key Identifier:
keyid:6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/bB9GgejH55bRvFrZhnBdmYqK1O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/bB9GgejH55bRvFrZhnBdmYqK1O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:04:77:72:b9:bf:fe:21:e5:64:cc:79:32:ce:93:fc:ac:4e:
49:54:c3:4a:75:d0:b9:0a:1f:03:3c:18:7d:8e:8c:ce:0a:59:
00:28:98:72:f2:a9:dc:54:1b:21:04:40:ee:03:7a:a1:98:a6:
43:a3:e4:26:c2:a6:b1:82:11:57:29:52:4f:16:09:2e:3f:1a:
19:28:ca:a0:88:a8:c2:9a:a3:17:31:9d:87:3b:dd:e3:24:d8:
2d:2e:2f:1c:73:74:1c:ae:4a:36:34:ba:b8:ea:86:90:a4:3a:
73:54:bd:39:2f:ec:ba:89:2c:61:df:90:ef:31:3e:33:1c:28:
fc:90:77:73:01:86:8b:4c:58:63:76:79:7d:e1:80:02:61:fa:
6a:37:a9:fa:c6:73:48:2c:a9:2c:c4:51:46:69:d0:dd:50:16:
9f:bc:73:9b:27:38:8f:8c:27:c2:bd:4b:27:25:84:fb:b8:0d:
f4:93:d2:6e:4f:d6:5b:f8:c1:1c:1c:f9:cb:e4:77:ef:6c:b3:
d6:58:fa:10:90:33:9b:21:88:3c:58:96:e0:5d:02:a5:64:61:
4d:54:c4:59:5f:bb:9b:00:9f:37:c2:98:f7:9e:c1:ba:74:e7:
e4:ab:4e:31:c4:42:06:94:29:97:85:b6:e8:0b:ea:e8:2e:cb:
dd:cc:31:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:55 2025 by rpki-client