
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
File: 6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft (raw, json)
Hash identifier: VyXK/lRAsLqhS/euvZs0srhBVVDUur5PLuKlj/VCiGA=
Subject key identifier: 2F:D1:2A:9A:74:8D:15:28:75:D1:1F:AE:C0:6D:DC:6C:00:F8:4C:84
Authority key identifier: EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
Certificate issuer: /CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Certificate serial: 0194BD857B68574D54702B631798F651E73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: 6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl (hash: T6dygOQpmAwRi0OXVDIDwyrZQJXRgjc8KaLsAHq1nyg=)
2: DIYTcQL0kTTU2q4HEzGujm0gUwo.roa (hash: RDp4zi/HUT9tIKN8ofgNKdiyOgNtG9lWPQ4C3eVO32Y=)
3: uL0oA5oOVHGz1EKQthaeZ4nofOI.roa (hash: Ukj6KTn0iYnjxnepezeV1ye/hQ4gCPQyF7UCJwJgWx0=)
4: xEVUwNoistpr086p8wiZOj3lAS0.roa (hash: jssBpk2I1njjei0F0mwFNz5A15Y3I0c8WhHM6GhLppA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7b:68:57:4d:54:70:2b:63:17:98:f6:51:e7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=2fd12a9a748d152875d11faec06ddc6c00f84c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:72:01:eb:c2:9d:cc:eb:49:0c:52:24:ba:
81:8a:a5:7d:c9:b1:b3:13:2d:90:6a:4b:82:63:34:
63:9a:8c:82:1c:0d:3e:50:45:49:91:f4:da:89:2d:
bf:82:db:ad:f6:49:01:0f:8d:ae:fd:fd:0f:26:26:
db:20:e0:03:6a:51:5c:90:e9:f8:92:9d:6a:c5:47:
a0:e1:49:3d:5c:07:0c:6b:fe:63:30:9d:da:bd:80:
de:7c:0c:84:d5:fe:37:81:7e:7a:af:98:58:0e:d7:
78:4e:d5:52:71:82:32:02:3e:06:ed:da:b7:e4:79:
35:ab:11:60:06:0f:70:dd:f0:e4:54:84:bb:42:c5:
63:f8:26:29:9b:26:c2:13:75:af:47:52:f6:a5:74:
2c:96:da:23:2a:53:e7:f8:8e:46:11:c0:bb:83:ff:
02:43:09:fc:b2:45:b5:fb:f5:13:c1:bf:9a:30:de:
fc:cc:b2:9d:80:ab:20:49:a8:d0:39:f0:31:88:4f:
1a:fd:35:f4:91:e5:8d:15:6a:30:7f:57:18:93:42:
04:8e:a7:1f:81:8f:db:f6:93:f9:4f:fb:37:5d:2a:
43:bd:5d:e4:bb:e8:f2:0a:a7:1a:30:a2:8c:de:a9:
5b:c5:24:4d:54:fa:20:fe:ce:f1:dc:40:e7:d8:02:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D1:2A:9A:74:8D:15:28:75:D1:1F:AE:C0:6D:DC:6C:00:F8:4C:84
X509v3 Authority Key Identifier:
keyid:EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bb:bf:cf:8f:70:73:3d:7e:f3:10:1d:25:5b:e0:32:b0:89:
9e:ff:b1:62:eb:91:a4:88:fb:66:52:ae:f2:05:67:a1:53:9d:
d9:55:b9:f1:21:1c:5e:30:02:57:56:06:69:bd:a4:9f:15:10:
05:6a:9f:35:73:e8:2e:2a:34:04:5b:23:f4:76:3f:1f:34:f7:
a9:2f:65:7d:5d:38:99:1b:7d:04:a2:07:1f:ec:c4:8b:f1:ce:
90:fc:3b:2d:61:84:19:eb:61:b9:2d:15:aa:73:ab:9d:fc:e6:
6b:73:f3:85:ef:20:6b:44:8d:75:cb:3e:e9:e0:21:76:a4:43:
72:bf:85:c9:a7:92:7a:c7:2f:9b:e1:03:53:96:eb:fb:a3:66:
63:bf:42:f5:80:56:9c:e2:d5:36:e5:28:e7:70:63:37:c8:95:
27:09:93:83:0e:1d:40:65:e9:63:94:d1:f4:2d:d8:43:3f:72:
c9:8b:e6:36:b6:f5:5d:3c:21:24:82:3b:f6:05:c5:e4:59:75:
05:fe:50:d1:df:1a:04:16:c9:f4:39:e6:8d:fb:96:fd:e3:d6:
5b:ba:23:2d:a7:f6:85:a8:ab:ab:b1:2a:89:ba:d4:42:e1:80:
84:cb:19:40:96:1c:b5:bb:43:1a:8e:b9:46:56:e1:fa:b7:35:
a3:25:6d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:03 2025 by rpki-client