Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File: 6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier: lG1LAiu237ySxMdZT8a/BSmwy+a08r3jJCw9Kn5dxng=
Subject key identifier: 9F:F2:54:83:9A:AD:77:CE:AF:C1:32:09:69:A5:8D:3D:58:97:B4:B2
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer: /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial: 0194BBCDFEF9C536F33F871D54F0CC53D0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number: 0C51
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: KCL/91ARm9vVmezNLT/QO+FQBfptpN6puf+zSHd/ncA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fe:f9:c5:36:f3:3f:87:1d:54:f0:cc:53:d0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=9ff254839aad77ceafc1320969a58d3d5897b4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:21:e9:a1:ed:65:78:1f:a7:62:12:d2:0a:
75:49:12:1e:3f:0b:07:e5:0c:b3:f3:9d:86:12:8d:
5a:c8:bd:9d:03:ec:11:d4:77:c1:cf:a5:a9:89:bb:
5e:6a:4b:b7:22:e5:b7:f2:bf:e2:85:c6:37:ac:f3:
dd:84:78:67:90:d1:96:84:3f:28:3d:7e:f7:97:05:
89:fa:c1:e7:c7:06:1e:9a:44:e9:62:93:25:48:b0:
05:4a:5d:f0:58:8d:46:0e:25:1c:2f:96:c5:51:67:
f2:52:00:50:d6:c6:f9:b7:9b:51:40:6b:65:45:36:
65:b2:3d:b9:b3:0d:3d:78:08:91:b4:6a:97:e4:97:
e5:3c:4c:ab:02:7f:ec:2d:b7:df:c7:fc:34:2b:58:
39:20:a7:38:d6:df:79:8f:c1:59:79:f7:a7:52:db:
56:43:d8:bc:e4:89:59:63:00:b7:e9:b8:ba:f8:8e:
ec:3d:72:fe:fb:ce:1f:cf:f2:d9:58:96:0c:9d:3c:
ec:4f:51:c5:6b:c0:db:84:33:a0:15:d2:d5:69:a7:
d9:db:44:6d:2f:96:e8:fd:ec:c5:2f:c6:37:64:a9:
c1:b1:2a:66:f2:42:d3:2b:79:8a:e1:40:f6:7e:c7:
fc:c1:4e:ab:e4:f8:71:82:4a:9a:69:4e:6e:ba:8a:
e8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F2:54:83:9A:AD:77:CE:AF:C1:32:09:69:A5:8D:3D:58:97:B4:B2
X509v3 Authority Key Identifier:
keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3a:7b:a9:11:60:44:07:0f:c0:30:df:96:08:0d:01:26:4d:
23:f5:e6:49:5b:4a:79:3f:52:ab:fe:ab:1b:d0:a3:ed:89:ec:
17:b2:98:4d:f4:e1:52:11:f7:69:95:b9:4f:c7:8b:4d:88:89:
f2:75:7e:e8:e2:0d:8f:01:6e:6a:d4:37:42:cf:74:aa:d7:c4:
b2:52:62:a7:a0:1d:99:ec:05:07:58:8e:22:6a:43:dd:47:64:
62:76:5d:a0:08:d5:fc:30:e0:95:f1:fb:ae:5c:85:9e:bc:2d:
55:57:39:19:c2:6a:cf:4f:06:00:93:42:d6:30:37:97:ef:fc:
67:2d:cf:e6:39:b1:e0:ea:2a:e3:22:c7:52:60:4b:43:4e:f4:
52:13:1c:29:17:bb:de:83:e2:fa:85:a9:89:27:1c:c8:b1:e3:
59:31:f8:b1:95:ec:a8:8e:13:2e:83:26:98:26:6b:c6:35:c1:
05:89:61:74:a3:cb:c0:ce:ee:b3:d8:ab:bc:84:95:df:da:27:
6d:51:56:f9:9a:e3:42:3b:a0:be:c6:95:01:2d:bb:23:57:52:
50:8e:74:cd:a2:91:da:70:d6:90:1f:e0:2f:96:1f:54:6f:ee:
88:8b:10:3d:aa:83:b5:58:1a:1a:67:bc:d1:59:45:1a:08:40:
f1:b0:84:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:33:14 2025 by rpki-client