Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a5d3c1-bd5e-4356-971c-098a02929089/1/a5HhwatXAlaAjt-5y3VZxV3PrWE.mft
File: a5HhwatXAlaAjt-5y3VZxV3PrWE.mft (raw, json)
Hash identifier: yUX6uKIq9wHI5q5GpMg5yzbnSB5h/V+2K+PVBxzXpgA=
Subject key identifier: 6F:C8:9D:E8:23:9B:6A:4F:D2:1A:F5:F7:A9:15:EF:DD:F1:24:CC:0F
Authority key identifier: 6B:91:E1:C1:AB:57:02:56:80:8E:DF:B9:CB:75:59:C5:5D:CF:AD:61
Certificate issuer: /CN=6b91e1c1ab570256808edfb9cb7559c55dcfad61
Certificate serial: 0194BD17D2418AF4559EC585462027591935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5HhwatXAlaAjt-5y3VZxV3PrWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a5d3c1-bd5e-4356-971c-098a02929089/1/a5HhwatXAlaAjt-5y3VZxV3PrWE.mft
Manifest number: 07EA
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: a5HhwatXAlaAjt-5y3VZxV3PrWE.crl (hash: gtEq4lAkBkm16RHG4chpwSeCSIh4tPAis98LrumAi4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d2:41:8a:f4:55:9e:c5:85:46:20:27:59:19:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b91e1c1ab570256808edfb9cb7559c55dcfad61
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=6fc89de8239b6a4fd21af5f7a915efddf124cc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:22:00:80:5d:0e:38:91:bc:02:9e:b8:e7:
ce:26:8d:4d:23:f1:a7:b2:0d:42:e2:c3:58:5a:b8:
41:da:4b:91:df:d0:7f:3d:7e:7a:31:21:75:de:cf:
c8:5c:a3:ca:f1:fa:1c:da:10:ad:2a:b3:18:4d:4f:
35:56:35:05:47:48:57:81:40:44:15:63:d1:c5:3c:
76:89:4f:8b:23:40:8c:f3:41:ee:35:e9:b1:a8:2d:
23:dd:9c:9d:c9:47:ca:14:10:8e:da:e9:a2:1e:67:
e4:9f:40:cd:b8:d0:20:7f:e9:4f:40:ee:98:79:20:
ba:12:e2:84:21:3c:47:8d:5b:a0:96:94:52:e8:e0:
0d:65:a7:d9:d3:01:04:02:eb:eb:3b:86:bc:37:6d:
14:21:e2:4e:7b:1c:12:93:f9:6d:fb:85:50:4e:6e:
c3:07:2d:ae:8d:5f:25:c1:5c:df:86:07:ce:01:0b:
4e:a1:b9:c5:05:77:d7:8a:5e:15:31:37:0f:8a:c3:
2c:77:90:08:84:48:6f:69:7b:4b:d4:60:7e:50:ff:
33:b3:ba:b5:83:b3:32:9a:a7:09:64:05:78:07:63:
68:04:52:e8:b1:12:03:0f:80:9e:b7:ee:97:bf:13:
8d:58:9a:2f:7f:2f:64:2f:2c:3d:ce:14:23:7a:07:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C8:9D:E8:23:9B:6A:4F:D2:1A:F5:F7:A9:15:EF:DD:F1:24:CC:0F
X509v3 Authority Key Identifier:
keyid:6B:91:E1:C1:AB:57:02:56:80:8E:DF:B9:CB:75:59:C5:5D:CF:AD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5HhwatXAlaAjt-5y3VZxV3PrWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a5d3c1-bd5e-4356-971c-098a02929089/1/a5HhwatXAlaAjt-5y3VZxV3PrWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a5d3c1-bd5e-4356-971c-098a02929089/1/a5HhwatXAlaAjt-5y3VZxV3PrWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a6:51:47:88:95:8c:4f:11:20:e2:b0:38:21:ee:b6:3d:16:
54:1b:3e:36:23:09:5e:7b:5d:69:65:c8:fe:db:4e:4f:33:29:
ac:a6:dc:b0:66:9b:01:0c:73:86:d1:b0:cc:b3:d2:49:7a:95:
c1:5b:35:e3:31:0c:20:af:43:a0:d5:09:fd:b2:c0:02:36:69:
9b:ea:50:c1:f8:97:5c:57:39:99:f6:93:0b:e4:7b:33:87:fe:
bc:ba:42:54:be:e5:b9:87:7b:6c:ae:d2:27:f2:fe:b6:cd:ea:
51:bb:30:55:33:8d:43:70:94:ee:60:39:bc:ce:54:57:cb:88:
61:62:d4:eb:87:fd:d2:f0:a4:8c:8d:e5:51:76:d2:7f:14:16:
fa:ef:71:8d:46:49:4d:69:cf:ed:89:d6:5b:a4:15:d4:b7:45:
8e:26:c0:10:c9:8d:29:9e:08:72:10:d9:be:b8:59:3e:a7:82:
a3:0e:d8:2b:98:57:5a:43:46:df:71:8b:62:9c:b2:27:74:a1:
af:b1:45:56:0d:1f:57:86:cf:03:ed:b2:c1:df:6f:5a:c3:ce:
5b:8a:f8:c5:df:53:a9:bc:a1:c4:ae:68:c1:83:25:50:d4:0d:
9d:d6:ac:4b:cc:de:d8:c4:ef:94:fc:a1:88:7e:19:69:05:a2:
61:cd:47:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:27 2025 by rpki-client