Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
File: t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft (raw, json)
Hash identifier: d2FewsxAneBqxo3r6TaFo+TdYypqJ7dUbS+yNfj8xRA=
Subject key identifier: 4D:35:40:23:14:27:AA:67:8E:69:E0:83:72:8D:75:B0:7B:34:C1:F9
Authority key identifier: B7:A6:93:1D:8A:86:0E:13:C9:EC:11:22:FF:A1:FD:F1:3A:F5:4D:07
Certificate issuer: /CN=b7a6931d8a860e13c9ec1122ffa1fdf13af54d07
Certificate serial: 0194BBCEC4BB1E5B5179C0DC70BCF007B8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
Manifest number: 038B
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: t6aTHYqGDhPJ7BEi_6H98Tr1TQc.crl (hash: 0HzLl1oHFo2JKFsYWUxlyjpoc8vdqf+JSAMhH6LC//c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c4:bb:1e:5b:51:79:c0:dc:70:bc:f0:07:b8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a6931d8a860e13c9ec1122ffa1fdf13af54d07
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=4d3540231427aa678e69e083728d75b07b34c1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:57:cf:04:a4:fe:8e:72:4e:af:db:78:cc:e3:
55:b9:a4:4f:f8:84:bf:c5:68:1a:34:89:4e:1d:bf:
27:1c:f4:45:70:e4:05:80:a3:a9:e8:91:e7:fe:4d:
cc:a3:c2:15:e3:6d:04:35:fe:03:86:a9:23:82:5e:
32:76:d1:cb:ad:43:d7:35:68:46:ef:57:34:29:07:
a4:22:8d:8f:b8:fc:4d:93:7d:cf:d3:1d:6c:3c:ad:
fa:cc:2b:4c:20:2e:b6:34:c9:69:08:92:03:6a:db:
07:b9:53:3b:7a:ae:f6:9f:97:1e:24:da:74:81:e8:
c5:40:c2:62:15:49:3d:2e:bf:d3:9d:f6:ab:c8:74:
80:59:d3:28:d8:63:23:02:82:90:9d:c4:a9:bb:dc:
09:f3:59:91:c0:5d:0c:8b:5a:02:b6:64:9b:3a:86:
00:60:a6:70:23:04:33:cc:e5:88:b2:00:32:81:9b:
a4:76:92:b9:c9:d6:27:8f:e5:d3:30:6e:b3:cc:96:
33:b0:33:1e:e6:9a:cf:95:eb:a1:36:6f:0d:a8:5b:
15:ee:72:f4:f6:60:e6:59:72:c7:06:07:d8:c8:80:
84:73:5d:d1:6e:e2:21:53:64:62:93:a9:06:36:87:
1e:b7:2c:a0:ea:91:7b:f9:28:a2:8f:db:a9:11:d1:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:35:40:23:14:27:AA:67:8E:69:E0:83:72:8D:75:B0:7B:34:C1:F9
X509v3 Authority Key Identifier:
keyid:B7:A6:93:1D:8A:86:0E:13:C9:EC:11:22:FF:A1:FD:F1:3A:F5:4D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:97:2e:58:d7:fa:e1:09:49:7c:9e:cd:27:36:9e:05:9e:29:
52:f1:fa:13:a1:37:8e:67:f1:56:5a:02:56:95:c2:6a:f0:aa:
35:36:d0:0c:e3:45:89:23:5c:7c:5f:42:24:32:f3:70:a7:56:
76:64:d0:5b:72:31:5f:cf:39:19:53:ec:dc:0d:11:a7:b5:53:
26:54:92:a2:71:33:04:cd:ce:d4:21:2c:a7:a8:2c:2b:c9:a5:
d1:91:0b:e3:a7:ad:f0:55:fb:9d:99:98:84:07:46:ab:10:2e:
c3:f9:3c:a5:28:2b:54:6b:f8:21:26:10:d2:03:db:f8:e4:47:
ea:80:66:ec:23:0c:88:a6:80:68:b7:1f:de:79:7c:c5:f2:8f:
fe:76:02:e4:6d:e2:e7:2c:0b:19:f7:f4:e5:4d:ac:6d:f4:58:
14:29:a2:4b:ac:80:65:3f:e5:33:06:5a:c3:bd:59:cf:5a:b0:
7e:2e:7e:7a:be:79:e2:0b:12:92:c4:c9:6e:50:24:72:0f:14:
e0:7a:a0:62:60:77:fa:7d:88:e1:5c:76:42:46:69:1f:e2:1c:
d0:57:88:3c:36:be:1f:52:f3:e3:c5:93:5a:df:c0:7f:c2:76:
b8:09:74:d4:2c:fa:2e:0d:b0:c5:cf:ea:85:17:e8:0d:2d:df:
3f:b6:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:25 2025 by rpki-client