Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: WOpxadWdPWmHx6bXLhei6T1P3DmGuW9jOwo2AR47iOk=
Subject key identifier: 82:CD:4F:12:4E:B7:75:EB:24:2D:A4:6F:39:F4:A3:78:BE:44:05:26
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 0194BC04B3BCB9A30EA4A5D1E9FED9FD2594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 037B
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: lsj1tdkqLyOC1LXdlSvYnN9Sl+YsJydI2chPjoRkkv4=)
2: UonFdVxRB-HOOyUD446SJsVcabg.roa (hash: 11kZuTKWQH6OP3cuxM8FLHDKW4RaMfeFdGuijw+tO1s=)
3: e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa (hash: j8o4Nte6arS2S28o9H96r23GZrhvfGEjib56R7pWjcA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b3:bc:b9:a3:0e:a4:a5:d1:e9:fe:d9:fd:25:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=82cd4f124eb775eb242da46f39f4a378be440526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:59:82:80:68:11:9d:55:8c:58:59:2c:6d:
d1:15:dd:a9:46:f1:a8:a0:7c:d4:c9:be:ed:f5:31:
4d:61:a5:5c:a0:8f:de:f3:32:37:ce:22:00:66:b7:
30:fd:88:25:09:c8:5c:65:1f:74:65:9f:da:80:de:
ea:3d:93:fa:4d:18:6b:6a:a8:86:30:cf:08:5d:6d:
82:7a:cc:0b:29:9d:57:89:fc:b6:22:c3:2e:09:07:
74:93:79:34:4f:79:f9:c3:a1:cc:70:cf:b4:79:b9:
c5:39:9d:08:3c:e6:29:6e:35:6d:5f:4f:7b:82:ac:
20:09:fc:bb:fe:b2:49:04:a3:b7:59:08:80:d6:50:
55:b6:1d:fe:18:5c:5f:52:cc:66:1e:56:0d:09:99:
c2:eb:5e:bf:10:47:43:b6:90:87:e4:42:d6:dc:63:
09:7d:c9:78:93:12:59:2d:bf:f8:f3:8c:70:55:eb:
99:f5:06:64:6b:34:c1:90:a0:da:da:3f:f1:34:5b:
3f:f2:6c:e4:39:61:9f:a2:55:aa:7e:8f:f0:05:fc:
16:7c:e2:c5:a2:ca:4e:73:07:11:85:bd:d2:5c:56:
6b:d9:53:26:8d:f0:6c:1c:2b:80:be:99:d2:b5:b7:
42:91:17:b9:f2:3c:4a:9f:db:fb:32:2d:2e:99:48:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CD:4F:12:4E:B7:75:EB:24:2D:A4:6F:39:F4:A3:78:BE:44:05:26
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4f:f2:47:93:8a:68:8d:d3:a4:db:37:fc:aa:0d:94:2e:27:
51:ac:4d:36:aa:0e:9c:83:b9:c8:77:86:4f:6d:91:ca:57:25:
c4:1c:fa:40:45:bd:69:42:be:df:8c:09:7b:97:9d:31:78:ea:
88:a4:23:03:b5:f3:01:ba:25:ef:c4:47:9e:b3:f4:b2:22:0a:
88:73:5c:8f:8a:c6:2c:ce:41:f6:2a:81:e6:46:ac:e7:61:ee:
94:46:6f:37:cd:42:09:01:9e:67:07:0f:5a:c7:3f:cb:a1:c7:
cb:6d:39:44:89:04:11:df:9b:25:9a:3c:75:fe:d1:9c:a4:93:
6b:b0:2e:47:7c:a5:ee:8d:02:b0:64:88:f3:f3:bd:02:53:51:
3e:a6:f4:b3:48:a5:0f:cb:1d:57:01:3b:43:96:72:7d:18:49:
ef:7c:ba:09:a5:a8:79:1c:5a:53:a6:6f:5b:ea:d7:00:54:f2:
80:a6:75:cf:45:06:74:7d:ed:9b:3b:2a:27:b3:9b:b8:54:e7:
82:7c:53:ac:4f:3b:9f:ee:d5:bc:de:74:59:d1:ab:e4:a6:91:
4d:ca:12:81:9a:82:96:a9:fb:18:cc:c2:e7:98:ae:fa:5a:df:
f6:36:59:d9:7c:9d:f8:db:c4:7a:9d:b1:fd:95:34:92:80:2d:
5e:95:97:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:08 2025 by rpki-client