Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
File: k6lZwl27w2fKqJgl6L_1tLTxHJs.mft (raw, json)
Hash identifier: yDlMydMk/3zA6d6+egDDQqIU02/AbPqV6OuEo6q5IXM=
Subject key identifier: B3:79:04:F6:E2:3A:25:BF:8E:25:BE:43:99:30:DA:F0:C0:41:11:4A
Authority key identifier: 93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
Certificate issuer: /CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Certificate serial: 0194BD17894530582A8FEBAE8C2B05B916CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
Manifest number: 0690
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: eUO5ySVwcP9_G0v6iAlEgACbaIE.roa (hash: iPv7iNvhmBCQA31XIl1TxzIvDTe0R7e3zG8RhS2DPPs=)
2: k6lZwl27w2fKqJgl6L_1tLTxHJs.crl (hash: D8IPntFytZjfDdxl8wPfGRS+wDQ05aLBbW4vJjOtLCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:89:45:30:58:2a:8f:eb:ae:8c:2b:05:b9:16:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=b37904f6e23a25bf8e25be439930daf0c041114a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:ad:25:34:8e:8a:1d:29:7a:52:62:9a:47:
ac:e0:c2:d6:f0:58:06:4d:94:d9:e3:2f:e4:dc:4f:
30:b8:55:2f:b8:9d:55:61:b9:4e:08:e8:7e:a4:6f:
29:1e:26:f7:95:eb:56:80:96:96:5e:40:87:3a:df:
8d:90:36:1a:d3:bb:00:40:05:a4:fb:dc:8b:b2:6b:
2c:26:e8:82:6f:ed:1b:fe:db:f1:6b:5e:56:e2:45:
6d:4c:a3:52:d9:6b:c0:b7:8f:b1:87:16:10:c7:ca:
24:19:81:09:20:b1:8b:0f:5e:9e:b1:fd:89:44:4c:
f6:a4:bb:e5:2a:89:12:f4:ee:75:4b:af:1a:68:b0:
86:ef:32:76:6b:17:f2:30:72:65:b6:12:ba:bc:05:
5f:f3:66:65:c3:64:6d:9e:0e:18:30:70:52:6e:46:
2e:bc:64:44:91:ca:2b:8d:6d:93:99:65:ca:c5:cc:
b7:ec:45:6a:90:a7:bd:0f:a7:44:8b:d3:0d:6a:12:
44:c6:01:94:1c:5b:44:ce:d7:46:d2:11:71:df:c7:
b2:e3:18:d2:67:94:4d:4d:18:29:41:9f:b2:d6:83:
1a:90:ea:35:32:56:1f:18:7b:26:2d:66:36:45:64:
db:a2:bc:49:7f:f8:82:36:dd:57:3d:df:b9:f6:43:
37:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:79:04:F6:E2:3A:25:BF:8E:25:BE:43:99:30:DA:F0:C0:41:11:4A
X509v3 Authority Key Identifier:
keyid:93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:26:e9:06:04:5b:7f:22:dd:d6:30:10:c5:66:cb:09:c5:fa:
55:69:b6:ed:b1:5c:ce:32:c8:ac:af:7f:e3:3a:b6:9d:92:3e:
95:8a:5c:6b:3c:f6:8e:e6:66:af:cf:3e:ce:39:05:6f:99:c7:
82:c3:08:a2:98:d4:dd:37:90:47:f6:73:62:35:a4:d4:8c:73:
b9:99:ac:ce:0f:d9:56:83:e6:cc:85:da:10:ee:87:19:37:c5:
ec:f3:53:d8:cb:12:2b:30:60:f4:ca:49:f6:fa:e8:a5:e0:00:
8d:4f:42:12:85:69:f4:14:45:e8:0a:25:22:d3:da:8d:7a:50:
33:2f:48:f4:51:d6:77:c0:92:78:16:85:da:12:a8:2b:18:16:
ce:b8:ec:22:1c:61:4e:bd:c2:d9:05:d2:f1:84:a6:2a:92:9f:
e5:23:e4:be:12:a3:93:73:cf:8e:13:0d:81:e1:be:d7:fe:3d:
c3:da:01:01:17:06:5f:bf:f1:33:12:d1:67:60:00:a3:8d:67:
b0:01:90:ac:f0:68:10:ad:f2:f8:f7:4c:a8:76:3f:15:67:aa:
b8:e5:f8:fa:0e:47:a3:21:08:f6:76:2e:cd:cb:d8:2d:17:14:
0a:02:49:29:97:06:3f:2a:4c:4b:ea:4b:74:4c:85:02:fa:57:
92:14:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:20 2025 by rpki-client