Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
File: 6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json)
Hash identifier: cqDI/gYr8xPlg03tDQ3VXTaRROHcFR19lmt+IhT+pw8=
Subject key identifier: 8E:E3:C1:08:49:99:A7:60:A7:3C:1A:D2:82:C8:BB:EC:73:1F:43:28
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Certificate issuer: /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial: 0194BC3CBAFB88348503981A98D6D29D99B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
Manifest number: 0FA3
Signing time: Fri 31 Jan 2025 12:01:24 +0000
Manifest this update: Fri 31 Jan 2025 12:01:24 +0000
Manifest next update: Sat 01 Feb 2025 12:01:24 +0000
Files and hashes: 1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: JdgYZHYPkA58gGQPXObZD0LUo4wJQxlz6vFJiGJJS4c=)
2: gcAJhnp75nn3OhwbSa9nzzcRaUI.roa (hash: Jgj60UlrGxuOFPZBlyVAd9Y49+PH7LywBsHvYG3mNks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ba:fb:88:34:85:03:98:1a:98:d6:d2:9d:99:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Validity
Not Before: Jan 31 12:01:24 2025 GMT
Not After : Feb 1 12:01:24 2025 GMT
Subject: CN=8ee3c1084999a760a73c1ad282c8bbec731f4328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:29:c9:ad:68:5c:ac:b8:e3:c6:29:be:41:
cd:e0:c7:da:fd:3a:ce:82:b7:de:6e:c5:bc:80:5e:
f7:5b:ab:ef:9b:2e:95:d3:00:9f:1d:a3:7b:e4:bf:
0f:5b:c4:98:f4:57:4f:39:5e:65:d4:ba:10:6d:9f:
dc:c9:57:92:e1:10:c0:ee:6c:9f:a4:ee:65:59:9a:
c4:d4:20:50:47:6e:89:d9:51:b8:5d:89:8b:cd:c8:
38:b4:67:cc:76:dd:02:09:db:f9:28:de:88:b5:ca:
c9:38:24:bf:b3:0b:0a:bd:b6:74:47:12:77:a5:e1:
ed:b9:5b:b4:95:d0:4d:dd:9e:20:3e:1e:f1:29:f1:
c4:94:be:04:83:e7:cd:17:4b:a4:1a:20:d7:61:cc:
dd:65:f7:be:3b:13:40:51:02:4c:20:44:d9:db:23:
fd:77:03:5b:04:d0:88:9b:8e:b6:8f:57:14:dc:73:
af:b8:d3:e8:20:be:68:05:06:da:53:ca:c2:91:60:
5e:fb:9f:fb:ad:48:b3:45:a0:dd:ae:cc:9f:45:03:
65:2f:70:51:9f:4a:23:d2:88:f2:95:76:b1:78:37:
ba:6d:cb:51:bf:00:8e:1c:aa:a4:51:0a:85:52:8b:
a7:14:52:67:e9:c1:04:09:26:41:5b:16:cb:3f:37:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E3:C1:08:49:99:A7:60:A7:3C:1A:D2:82:C8:BB:EC:73:1F:43:28
X509v3 Authority Key Identifier:
keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:03:09:90:6c:72:5b:81:e3:9a:89:d2:90:df:27:e9:74:28:
e1:e9:3a:a7:af:04:36:ed:b5:83:6e:c9:4e:1a:9f:58:22:f1:
ca:f8:eb:b4:83:f0:4c:f7:b0:d7:29:76:c4:af:a3:18:3c:33:
e2:d8:5a:5f:70:66:10:47:eb:21:8b:a7:65:29:90:2d:e6:e9:
eb:ce:78:cf:fb:d4:38:fc:b9:28:01:9f:cd:be:db:03:5d:c6:
9a:80:c9:fd:fe:3e:0e:33:1d:05:30:b3:c5:96:76:78:39:4d:
a7:fa:81:32:18:4b:e1:2f:2a:d5:ce:38:c0:95:95:7e:ba:48:
04:ea:cb:66:08:c5:09:de:96:b8:dd:39:44:fd:99:90:0d:81:
af:15:d7:67:c1:a4:1d:7f:c0:66:77:b5:23:8f:ac:61:ee:95:
b3:f9:eb:4b:ad:6f:62:ab:d2:41:c7:01:c9:7c:44:89:00:6b:
0d:91:75:3a:07:91:0e:9a:2d:4d:64:4d:53:fe:6a:af:66:aa:
ec:28:1a:12:0e:b0:b2:f9:e6:ed:9c:d4:d0:6f:fb:af:70:43:
b8:d5:23:c6:74:6f:c1:ac:d7:4f:85:62:78:f8:5f:43:76:ca:
6b:c0:14:be:4c:72:08:a1:d9:fb:5a:63:2f:92:81:3e:ab:3b:
d1:ab:0b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:55 2025 by rpki-client