Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
File: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json)
Hash identifier: L6Ls+I3aRnDVig0Lg+rxu8Zha21B+CGy7K1K5m2HIyw=
Subject key identifier: A2:8B:0B:2E:B0:2C:DB:1F:1C:8F:61:49:2D:18:A7:21:52:24:BB:97
Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
Certificate issuer: /CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Certificate serial: 0194BBCEB387A69CAAB357E40FDEE9FAD762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
Manifest number: 0F0A
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: tDGMKHK7z5Zwow0BR21icOO4nx5BtnvHhP5LdKFMb3Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b3:87:a6:9c:aa:b3:57:e4:0f:de:e9:fa:d7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=a28b0b2eb02cdb1f1c8f61492d18a7215224bb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:d7:a5:9b:48:3a:bf:2c:a0:dd:4a:6a:9c:
23:4c:1a:e0:a3:4a:a8:c8:e7:77:e6:c1:80:1c:6b:
fd:4e:73:e8:5c:e9:9d:87:23:c0:94:ae:62:0b:1f:
d2:5f:ae:5e:ff:23:ad:9b:0a:41:db:17:fe:d9:d1:
2f:ae:c3:b6:69:d2:cb:0b:d9:6e:da:92:cb:35:6f:
39:d2:98:75:0e:99:9e:98:ee:25:d2:75:21:82:b4:
34:52:57:81:5b:ed:ab:cd:90:72:fe:09:95:87:cb:
ce:56:63:45:00:44:8f:48:33:3b:37:43:d7:b4:2a:
08:16:56:32:a7:ee:8f:9c:18:53:e1:07:24:1a:64:
f0:63:7e:1e:ab:a1:a2:63:13:d9:e5:83:98:93:e3:
d6:b3:26:c0:2b:68:25:4f:39:a0:25:c3:03:b4:37:
0f:3f:25:4c:57:d2:13:40:af:3a:e0:ad:4d:86:83:
72:03:23:68:fa:79:c9:20:9d:64:99:14:51:9b:d0:
8e:2d:f4:2c:d0:b8:3e:fc:85:3e:f3:60:a5:08:ba:
6b:00:9b:2e:6c:23:6a:04:73:d3:f1:cd:34:de:26:
87:8d:35:3d:71:50:51:2e:e0:92:00:50:fa:60:6d:
ea:90:44:c0:26:a1:21:18:a8:08:df:ca:d1:4a:5f:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8B:0B:2E:B0:2C:DB:1F:1C:8F:61:49:2D:18:A7:21:52:24:BB:97
X509v3 Authority Key Identifier:
keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:78:82:bd:ab:31:97:b7:23:34:0c:6a:7e:51:62:a4:3e:54:
b3:ae:18:c6:b5:22:95:0b:33:c9:a0:8b:21:52:ce:3e:ed:1e:
02:1a:6b:8d:ec:2c:63:2f:c0:d2:53:0f:e0:83:58:43:33:43:
8e:87:9b:43:bb:e6:52:67:f0:6d:27:22:13:7f:be:8d:34:cd:
55:cc:75:1b:83:eb:02:53:7a:ac:bb:14:e7:2a:3b:58:94:7b:
ae:15:30:e2:61:09:8d:1e:8a:e4:6b:45:34:6e:e1:87:a2:94:
e0:41:82:41:03:1f:63:84:9e:c4:14:58:1c:c0:40:d0:85:bc:
3f:41:7c:43:29:23:cc:53:a9:5e:50:56:df:e0:ef:43:82:75:
b9:14:08:c9:ba:d8:ee:a7:6c:b0:0c:94:a6:7a:f4:30:ad:c7:
2d:0c:f5:64:d7:d7:6f:3d:40:6a:8f:ff:1f:14:81:99:b9:79:
1b:00:fb:2f:5a:95:c7:47:87:7f:2c:f2:c2:50:af:41:0b:fb:
10:73:88:71:92:25:13:fc:7f:3c:df:91:2c:ac:a5:a8:81:c0:
27:cc:14:2a:a1:2a:cd:f3:92:ac:7c:ed:43:8e:78:74:61:6b:
43:fc:26:31:c3:1b:33:6d:8a:97:03:56:1a:01:4a:a9:d4:b4:
9b:13:4a:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zrOHppyqs1fkD97p+tdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTAxYTY4ZDkxMDkzZTdkZWYyZjRlMDMxMDMxZDExNGQ0
M2JhM2MwHhcNMjUwMTMxMTAwMTEyWhcNMjUwMjAxMTAwMTEyWjAzMTEwLwYDVQQD
EyhhMjhiMGIyZWIwMmNkYjFmMWM4ZjYxNDkyZDE4YTcyMTUyMjRiYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDHXpZtIOr8soN1KapwjTBrgo0qo
yOd35sGAHGv9TnPoXOmdhyPAlK5iCx/SX65e/yOtmwpB2xf+2dEvrsO2adLLC9lu
2pLLNW850ph1DpmemO4l0nUhgrQ0UleBW+2rzZBy/gmVh8vOVmNFAESPSDM7N0PX
tCoIFlYyp+6PnBhT4QckGmTwY34eq6GiYxPZ5YOYk+PWsybAK2glTzmgJcMDtDcP
PyVMV9ITQK864K1NhoNyAyNo+nnJIJ1kmRRRm9COLfQs0Lg+/IU+82ClCLprAJsu
bCNqBHPT8c003iaHjTU9cVBRLuCSAFD6YG3qkETAJqEhGKgI38rRSl8xPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKLCy6wLNsfHI9hSS0YpyFSJLuXMB8GA1UdIwQY
MBaAFOpQGmjZEJPn3vL04DEDHRFNQ7o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxBYWFOa1FrLWZlOHZUZ01RTWRFVTFEdWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mNGQ2NTMtNmY3Ny00Y2UwLWE2ZjIt
MzQ1ZTE3ZjlkNjMyLzEvNmxBYWFOa1FrLWZlOHZUZ01RTWRFVTFEdWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9mNGQ2NTMtNmY3Ny00Y2UwLWE2ZjItMzQ1ZTE3ZjlkNjMy
LzEvNmxBYWFOa1FrLWZlOHZUZ01RTWRFVTFEdWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXiCvasx
l7cjNAxqflFipD5Us64YxrUilQszyaCLIVLOPu0eAhprjewsYy/A0lMP4INYQzND
joebQ7vmUmfwbSciE3++jTTNVcx1G4PrAlN6rLsU5yo7WJR7rhUw4mEJjR6K5GtF
NG7hh6KU4EGCQQMfY4SexBRYHMBA0IW8P0F8QykjzFOpXlBW3+DvQ4J1uRQIybrY
7qdssAyUpnr0MK3HLQz1ZNfXbz1Aao//HxSBmbl5GwD7L1qVx0eHfyzywlCvQQv7
EHOIcZIlE/x/PN+RLKylqIHAJ8wUKqEqzfOSrHztQ454dGFrQ/wmMcMbM22KlwNW
GgFKqdS0mxNKUA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:31:43 2025 by rpki-client