Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
File: 6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json)
Hash identifier: y3X7PaJUFtQDdJKd4vwjyx1dHYstJX9QUxn1naqZ2g0=
Subject key identifier: 46:32:41:EE:7C:A9:93:41:5C:93:FD:67:F8:68:5C:5E:73:6B:CD:6E
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Certificate issuer: /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial: 0194BC7280AC1FE6BB79577D7333993E630D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
Manifest number: 0765
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: 7A2SkKOlBznAEdEEsZAkWPERcSHsA4qSGsdH4ZhG0fQ=)
2: zUJ5qWVbr4pmer3m739HNMffZjg.roa (hash: NJqHyM9HbL1+6lpUhrutNRFZX2Z30cCNuSy/2q+fWs4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:80:ac:1f:e6:bb:79:57:7d:73:33:99:3e:63:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=463241ee7ca993415c93fd67f8685c5e736bcd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:43:c1:20:98:d1:4b:31:fe:50:c0:9a:23:
b9:2f:53:6c:61:72:94:e6:23:4b:2c:38:32:5f:fd:
24:96:fa:1f:ef:5c:5c:74:86:19:54:66:75:af:96:
a4:1b:f5:25:31:86:7d:59:58:71:85:e1:9a:16:1d:
83:d9:6b:17:d9:e7:7f:26:5c:c3:3a:da:aa:bb:f4:
14:6f:51:4f:15:f7:b2:87:4c:7e:97:57:cc:64:35:
ff:a4:40:37:fa:42:dc:7d:34:d2:48:1d:a9:53:6d:
42:5d:a9:b6:cd:e2:16:fb:a7:9a:34:21:b6:aa:be:
32:18:b9:15:f8:9c:64:99:a3:9f:6d:b0:14:f3:d9:
14:4c:49:bc:a4:2f:12:3b:93:13:af:b8:81:a2:95:
36:d9:77:7e:cb:3f:6f:93:03:6d:eb:84:0d:02:ea:
bf:27:c7:ff:a9:34:5b:fa:af:3e:f1:cd:fa:a8:71:
eb:89:48:96:61:fd:65:2f:00:ea:63:a8:d0:cc:22:
5c:1f:62:e8:f7:14:90:ac:f4:b5:f8:c8:b4:9b:fa:
91:bf:30:cd:09:2b:9d:af:09:10:82:13:c8:7e:12:
59:17:6e:92:b4:05:3f:df:bf:b2:1b:3b:ed:64:cd:
0d:e3:4f:80:53:85:ba:40:08:dd:77:09:e9:e4:ed:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:32:41:EE:7C:A9:93:41:5C:93:FD:67:F8:68:5C:5E:73:6B:CD:6E
X509v3 Authority Key Identifier:
keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8d:2a:ca:3a:69:81:4a:9d:20:93:a9:6d:32:41:8f:07:81:
ec:2b:04:c4:f3:44:35:fc:24:18:75:46:e3:8c:30:27:a9:95:
0e:2d:21:08:0e:6a:08:82:ff:0d:23:bd:53:bd:0d:71:8a:24:
1c:2a:15:1a:a5:23:7a:47:d6:da:fe:c5:b2:65:d2:b6:1b:73:
70:c1:a7:2f:0e:52:ce:a6:2b:e8:05:4e:a3:7b:c9:66:76:8f:
0b:b7:13:43:7d:7e:27:85:4c:f2:26:f2:77:30:be:34:14:6c:
c3:ef:52:8c:a9:3c:7e:5b:f8:d5:42:0f:e2:73:69:e2:44:6a:
23:d8:56:e3:d0:4b:ed:a1:3d:81:e1:7c:7c:fe:36:9a:58:48:
2d:39:30:c5:24:2a:a2:c4:4b:76:5f:0e:a4:e7:61:87:a7:79:
18:f3:44:12:17:f1:2a:14:69:7f:39:de:b8:e1:34:46:9f:84:
cb:da:9b:82:b9:ca:90:f6:71:51:92:64:e2:aa:c7:57:98:d3:
36:4d:8a:b7:ba:1e:88:31:17:9d:4f:4b:e1:25:80:11:f2:23:
fe:a6:ed:37:29:78:28:c1:0c:62:ed:74:0e:2c:8a:8d:a9:39:
dd:2c:dd:26:78:5f:17:22:57:24:ad:cb:4c:47:20:3a:ec:d1:
e8:d8:8e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:03 2025 by rpki-client