Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
File: A6bcLyZo69z4a2wCWKgYfl984nA.mft (raw, json)
Hash identifier: kK8hq2qtEXXB8eE4LWVBF0stEpR0UEs5Li2/VX390ZQ=
Subject key identifier: 73:36:67:01:22:5D:7D:D4:D6:EF:AF:94:B3:C1:C9:6E:4E:E4:0D:33
Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
Certificate issuer: /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Certificate serial: 0194BC72B0CF9FE527DBB97BF96F2777482D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
Manifest number: 0517
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: A6bcLyZo69z4a2wCWKgYfl984nA.crl (hash: Kfq/nTk2wUW8gyC3/pJWohMVyif1isOAyglOzbxIDl0=)
2: dd8av2mxTwjOvzgQCyuc1wPNBmI.roa (hash: jwwVY2pCMQyTKSG87HTCJ5bltMafN2RGopv4GJtWPmk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b0:cf:9f:e5:27:db:b9:7b:f9:6f:27:77:48:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=73366701225d7dd4d6efaf94b3c1c96e4ee40d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:88:c6:45:0b:60:66:f2:ec:4f:6a:46:b8:
21:f0:74:bf:4a:90:cf:99:e3:4a:0d:5b:c4:e5:3c:
1b:45:70:59:5f:8f:5a:62:70:30:3d:07:0e:f3:53:
53:98:dc:1a:a1:c3:c2:cd:de:f9:ca:47:12:e8:98:
95:a6:79:35:ff:76:ad:ba:6a:44:5e:cb:8f:91:9a:
96:58:be:0f:7b:b2:0f:df:dd:a8:c5:39:80:28:35:
38:ba:5f:64:2a:8b:74:1a:ac:d7:7c:4b:55:06:48:
94:36:64:67:7e:15:9e:4f:4f:85:75:17:6a:fd:4a:
50:7e:ae:fd:b4:cf:e1:09:26:2b:48:6a:86:58:ce:
95:0b:22:20:b3:72:e2:bf:39:7c:72:33:50:56:86:
6d:90:be:17:9f:4d:6a:b4:2f:f7:23:f3:6b:fc:30:
18:62:19:ce:91:60:99:6d:cd:40:a4:ce:ed:d7:9c:
ab:71:1f:83:c6:83:c7:89:22:37:38:09:b3:98:c5:
1c:bf:dd:95:ba:fe:56:41:6a:c7:5d:8d:23:e0:c7:
52:85:f3:71:f0:3e:67:3c:db:d1:f4:b8:65:b7:03:
a7:d0:d5:be:fb:1a:6a:3a:c5:1c:da:ed:36:91:df:
9f:53:7e:c7:bb:ed:06:67:42:15:fc:b4:e6:36:8d:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:36:67:01:22:5D:7D:D4:D6:EF:AF:94:B3:C1:C9:6E:4E:E4:0D:33
X509v3 Authority Key Identifier:
keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5b:0d:17:8e:16:06:cd:be:2d:ee:6b:cc:2a:09:1d:47:7d:
ed:49:00:57:f1:9b:b0:5e:46:ae:e9:ea:ac:99:3b:cd:ca:7e:
d0:48:3c:23:f9:fb:c2:e7:0c:b5:2d:e8:c7:cd:3c:73:d1:3b:
af:ac:2b:35:40:09:8a:81:b4:d2:71:55:ea:82:4c:0c:68:af:
3d:75:eb:24:c9:a8:83:d9:ad:23:66:56:37:70:12:4c:45:8e:
23:75:cc:1e:20:a8:60:33:fc:ec:ef:51:93:db:ca:5e:ec:43:
d8:62:e0:2a:70:ef:de:0c:11:55:c9:5c:c2:19:78:f4:a3:9b:
54:24:74:9c:09:40:a0:24:2f:92:44:3b:c8:79:f3:8f:4c:c2:
3b:38:41:4c:59:3e:dc:f4:e3:5f:1d:76:c2:ec:5a:f3:4e:f6:
70:e7:88:66:12:e0:3f:a7:ab:63:22:4c:ce:1b:a1:bf:25:0e:
6d:b0:17:1c:3d:4b:59:dc:0b:27:5c:98:59:de:db:fc:e9:86:
3d:5d:f7:d9:83:ad:a7:01:b2:2d:a1:20:53:9c:69:f3:a1:f4:
e7:4a:b3:c1:0c:2e:05:76:aa:d7:a6:f9:99:69:0d:20:c4:fa:
e8:1b:b8:0b:a9:d7:a0:c0:f2:11:52:3e:eb:a3:06:37:81:9e:
ea:57:59:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:50:04 2025 by rpki-client