Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft
File: 6y7LDykkUqe-lOaWD3znIBa9GAU.mft (raw, json)
Hash identifier: TGlVk3deQyjMqOHrp7NSsbZgLWv4HTphlGNiGHRfY1E=
Subject key identifier: 47:21:D3:14:09:8E:93:AF:57:36:B6:3A:1B:2D:EB:AE:A4:5C:E9:36
Authority key identifier: EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05
Certificate issuer: /CN=eb2ecb0f292452a7be94e6960f7ce72016bd1805
Certificate serial: 0194BBCEE0C333A1A8DE8CC187E49D849162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft
Manifest number: 01D6
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: 6y7LDykkUqe-lOaWD3znIBa9GAU.crl (hash: lIuj80sUdptxrAUCMvKTJvOjuYHOy6xV2OZX6dNv9M8=)
2: Aa0efsIBSZxQ_4T_iZQY03PtXFg.roa (hash: OuiSoz74OGRgJiBoShoGAfl/wamUvwrfazeBnaRaH+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e0:c3:33:a1:a8:de:8c:c1:87:e4:9d:84:91:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2ecb0f292452a7be94e6960f7ce72016bd1805
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=4721d314098e93af5736b63a1b2debaea45ce936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:46:cb:84:7b:9b:39:50:fe:d0:a5:9c:fe:
0c:f4:c9:47:22:bc:47:af:66:90:4f:88:8e:dd:23:
97:5a:c7:fe:d8:26:2a:85:4b:5c:c2:a0:72:ce:cd:
9f:86:ad:b5:28:a7:b4:ed:2d:37:aa:99:d0:84:6b:
57:dc:d9:a5:21:37:02:f6:cf:94:66:69:cd:ed:38:
f7:aa:50:6e:c9:b5:86:ed:55:ab:3a:d7:a6:55:8e:
a7:9a:62:4e:07:a4:68:38:bd:a0:ba:df:08:6c:fc:
08:e4:0a:52:1d:b4:9d:46:20:af:6f:dd:87:b4:63:
4b:29:bb:ef:03:ff:d8:fa:a3:8c:39:c3:28:d0:b1:
fa:92:40:9e:71:6e:ce:09:ef:98:ab:45:56:e6:65:
62:66:7e:53:2a:aa:1a:77:0a:8b:68:5e:c3:34:d3:
ca:c2:aa:96:3f:13:25:fa:e4:1b:5e:9e:bd:55:c1:
f6:27:e4:ae:33:e9:87:0a:88:ff:8a:91:31:72:41:
a2:ed:26:ed:49:0c:a9:f3:ee:a7:e9:24:46:ac:80:
0c:cd:9c:3d:e8:47:93:86:0a:63:9b:b9:ea:46:6b:
e7:2d:36:43:9c:c2:b5:3e:e8:d7:07:d2:1b:38:ae:
0f:44:2b:df:4b:89:be:fd:c4:93:3b:a1:09:79:4a:
b8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:21:D3:14:09:8E:93:AF:57:36:B6:3A:1B:2D:EB:AE:A4:5C:E9:36
X509v3 Authority Key Identifier:
keyid:EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:eb:48:00:3f:3e:33:d9:a4:bb:f5:49:55:96:c5:08:31:f8:
95:94:32:5f:7f:63:21:c3:38:fb:a9:26:33:97:a9:da:28:4e:
f0:fd:8d:5f:5f:8e:10:6e:e8:7c:e7:b8:55:9e:f2:06:c1:c2:
b4:53:d5:5b:14:2f:54:9e:a2:98:8f:44:87:6a:41:91:59:f1:
7e:0a:6a:fb:1e:28:c5:ad:f8:4d:cf:b6:c6:5b:51:64:5f:fe:
e6:64:71:06:75:51:be:57:48:df:cb:a5:8d:48:f2:5c:5b:24:
b0:0b:43:0f:7c:0b:2b:a0:79:8c:99:07:5f:e6:3c:2f:a2:37:
bd:f5:b5:fa:6f:d9:b8:24:83:5a:81:e7:53:51:90:85:d4:2b:
5b:7d:91:49:7c:3e:1a:6b:5f:bb:3b:d7:9e:d3:54:ac:a2:24:
93:13:4c:3a:ff:8d:04:b4:c0:84:b1:5c:99:2d:61:5f:25:20:
e4:5e:7a:40:c4:9d:f0:0b:9c:f4:6f:93:d5:23:37:55:d6:75:
60:c1:08:b9:dc:4d:e1:63:c7:84:36:73:3f:e5:2a:80:c9:91:
8d:ed:a4:61:70:b4:b4:69:5c:50:5a:45:5b:f1:26:91:01:49:
5d:5a:4e:c0:1b:3c:7b:80:a4:85:cd:da:cc:94:5d:1b:77:b5:
dd:91:61:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:21 2025 by rpki-client