Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
File: 6_q_pigGP2uOmIhWb18_z6eYxiE.mft (raw, json)
Hash identifier: CZ7pvu2XtIrf/CT5tvuF5kkxw1+UCpSnzkC1PtT3xm0=
Subject key identifier: 13:05:1B:C6:3F:DE:48:31:AD:79:BE:A0:30:82:69:64:88:43:DD:DD
Authority key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
Certificate issuer: /CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Certificate serial: 0195E07D3A8604558A9B9075ACCE5C47138F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 06:00:57 +0000
Manifest this update: Sat 29 Mar 2025 06:00:57 +0000
Manifest next update: Sun 30 Mar 2025 06:00:57 +0000
Files and hashes: 1: 6_q_pigGP2uOmIhWb18_z6eYxiE.crl (hash: oVc9HLkChfWrtNWzcZhZy+oJsrKDdkKrEEuX48kdXTo=)
2: AIXAkzQ6j1H4vDys92DgTtbZMfU.roa (hash: L70XBA2ZYZMbs8rrHlsDFi4oq4yazeU/qamDAKsCZpk=)
3: ZzRb0bQEgazL7HxVYHs8-oAp0ls.roa (hash: oc13tf5lv2iUwPb0W8XfA1fFyqRxMCHq6DS/PUWkQrk=)
4: lXE36GImgEjcIvll3Tsmm36DobI.roa (hash: 1XMrxaMNY7arjhfdTsQdkEwlFczG7UA5ws+6pLEfvQI=)
5: toyWhkRvkxKa6m966kQQ3xAkwaU.roa (hash: ISpJmO2wzvTIsH3h+7s+KHFt2K5Zecirs/zcr6D0Qtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:3a:86:04:55:8a:9b:90:75:ac:ce:5c:47:13:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Validity
Not Before: Mar 29 06:00:57 2025 GMT
Not After : Mar 30 06:00:57 2025 GMT
Subject: CN=13051bc63fde4831ad79bea0308269648843dddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:40:31:a4:4e:0e:09:98:f0:05:13:d3:2c:e3:
43:e0:15:26:a5:1d:8e:17:6f:72:16:d8:20:c2:23:
06:e4:30:eb:4c:88:00:96:60:2b:66:9a:a2:ef:d0:
6e:a0:c2:a7:7a:2e:c1:30:81:08:be:01:0c:14:65:
c9:c2:6a:3b:20:cc:f5:e7:b8:03:e2:c4:ba:f0:a2:
af:df:b9:90:25:36:15:81:a2:d8:06:24:95:70:b8:
89:0a:70:ff:54:64:b0:a1:c3:e9:90:b3:c4:05:ee:
50:84:7c:48:a8:94:73:7d:a7:01:09:71:54:eb:5e:
09:a2:a0:d0:21:f6:87:b6:ad:0e:5b:df:d4:2b:61:
13:43:fb:ec:ee:ec:a2:9b:ca:af:f0:dd:ca:50:f5:
90:a8:f4:a9:50:89:e7:56:4a:72:78:ef:1f:12:2f:
fa:ba:dd:96:6e:29:cc:6d:31:ce:bb:18:a4:89:76:
c3:18:b8:11:73:d3:97:9e:8d:1a:9f:17:81:07:94:
f3:4a:70:e7:56:bc:1b:f9:88:4a:85:d6:f4:58:64:
d5:ac:f8:1c:09:13:c1:db:4f:f7:94:b5:d7:1d:55:
a3:6e:98:27:50:57:7c:2e:fa:80:5f:b8:10:5c:0b:
a2:17:22:77:69:b5:67:02:05:4f:c7:88:ef:e3:b1:
64:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:05:1B:C6:3F:DE:48:31:AD:79:BE:A0:30:82:69:64:88:43:DD:DD
X509v3 Authority Key Identifier:
keyid:EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0c:d5:f8:1f:b9:b5:b8:ff:05:d1:81:3b:17:b6:16:48:5c:
6a:00:5b:fc:1a:21:9d:03:eb:15:ab:e7:65:44:a7:73:04:f6:
b1:e8:95:14:00:06:ab:91:1d:d5:3c:3d:fa:1f:2d:e0:fe:00:
1d:2f:3e:81:76:bf:4e:7d:a0:ed:8a:eb:07:e6:b7:a8:2c:f0:
a1:5d:24:05:5c:91:ed:9a:0e:ae:c8:21:2e:97:62:24:86:87:
91:e1:7b:6c:eb:f5:3b:32:14:59:2e:ce:64:32:c3:a7:3b:18:
d2:5f:22:46:cb:94:93:4b:5e:e5:5a:32:da:60:56:ac:04:12:
bb:86:0a:a3:71:e1:1e:8d:b1:56:c3:5a:ea:25:29:b4:10:9f:
8a:95:a7:52:cb:2a:ad:75:a9:b6:79:6c:c8:fb:ed:a1:30:af:
92:34:45:03:c4:d7:01:1d:ac:64:e8:ed:e0:9a:39:5f:98:32:
08:3d:ed:de:40:96:bf:c8:fc:42:22:48:66:73:5f:33:4d:70:
ab:23:2b:c2:27:e6:f3:47:e4:f7:67:7d:76:cb:e4:d7:ba:62:
89:81:9f:8c:30:d5:90:a7:ea:c8:a5:97:ed:8a:f9:0c:15:f0:
2d:79:f8:ef:b9:ee:50:8b:21:87:90:89:1f:f1:bc:11:84:7f:
4e:7b:12:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:39:11 2025 by rpki-client