Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: 3hrdkhkBulx5f5b3tiDKqo7ty9rg/oGj3K0WS5UkR5I=
Subject key identifier: 38:D7:C3:C8:1A:D3:AB:B6:49:A3:A3:6F:50:79:4A:E2:78:A9:6D:80
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 0194BCA9B446BEE8F77213E566F6CEC68E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 1440
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: OktctyTlw4p9BNqe5rtocTm6ry93kStJJmSOO+qx1Do=)
2: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=)
3: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=)
4: oDuQtsfWsb20exJBO7QurYBeWk8.roa (hash: gEKk7yZspSpg2oEhPVCqnu3t/dgmJib8oW+i8A65aR0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b4:46:be:e8:f7:72:13:e5:66:f6:ce:c6:8e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=38d7c3c81ad3abb649a3a36f50794ae278a96d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:18:37:3c:f1:b0:60:1b:d3:df:53:67:ff:f2:
59:60:8a:06:49:b8:12:13:46:13:97:02:c1:12:e2:
06:e9:cb:4a:f1:0e:cf:02:65:f1:b8:b2:eb:51:e0:
c0:b4:8d:9a:00:99:e9:b5:b8:f6:87:32:f1:e6:37:
3c:f8:19:c1:1f:9e:1e:73:57:58:35:3b:e9:58:27:
83:e7:ba:b5:01:4a:55:d6:81:f6:1f:18:93:bc:a3:
ee:a9:0a:41:17:6a:cd:f3:bd:3e:19:0a:88:f3:63:
af:d7:53:9e:2e:fb:dd:f1:7a:bf:b8:53:2f:6e:ed:
3e:27:02:84:b8:54:90:a2:f5:29:0a:ae:a4:47:db:
f8:d1:ed:b6:a8:88:d4:5e:cd:85:17:7c:66:0b:1c:
cb:f9:f6:ff:5e:b7:82:3b:70:30:63:49:5a:74:39:
ae:5d:80:6e:a7:ce:f5:d0:4c:41:2a:aa:80:05:3f:
56:ae:c6:90:b3:ab:cd:ba:59:12:24:7c:6d:fb:4d:
6a:5b:f4:42:4c:2c:4e:60:93:e6:aa:0c:8e:9e:18:
60:21:a0:ab:6c:27:62:c0:89:98:76:2d:59:e3:db:
79:c6:ae:f0:21:16:ac:ca:71:2b:1f:e2:41:52:27:
73:8b:1d:09:65:53:a9:7b:48:16:e1:f9:67:31:7e:
95:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D7:C3:C8:1A:D3:AB:B6:49:A3:A3:6F:50:79:4A:E2:78:A9:6D:80
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:96:70:10:02:88:4a:1e:52:30:07:22:59:4a:e2:59:a3:ac:
d2:f4:ba:75:13:3a:22:3b:0f:9e:31:dc:e8:d5:53:c5:c7:c0:
a8:91:1c:51:22:0f:08:63:5b:81:45:f2:35:74:0c:5b:d5:92:
af:63:23:31:85:39:ea:ea:3e:05:b1:7a:fa:c2:17:1a:b5:8e:
b3:83:39:17:91:0e:ff:0a:03:c2:4b:dd:51:ec:ec:84:c6:4a:
7e:d4:23:ee:93:ff:74:ee:da:36:14:32:9d:b8:81:9a:1c:5f:
e3:eb:4a:46:4b:85:53:4d:8f:67:af:bd:45:b0:bb:01:07:86:
dd:e7:1b:80:2a:70:87:03:5a:50:1b:63:a5:69:51:67:81:6f:
1f:e4:20:3f:fc:ce:54:3c:84:e4:2d:68:80:d0:2f:4f:54:fd:
0e:6e:d6:4b:91:25:ee:af:1a:c8:55:60:c6:7b:04:02:91:99:
53:ae:b9:e2:48:33:2e:60:80:8d:29:0d:a1:a9:8a:e0:8b:24:
17:ab:96:1f:a4:23:6d:28:9c:4c:37:ff:30:3a:92:a6:c0:f2:
0f:fe:5d:e2:4f:e5:a0:3b:b1:1f:55:94:bf:29:07:c0:8e:84:
eb:72:4e:c4:38:84:ac:a8:78:09:d7:49:8e:ff:77:cf:93:b1:
1c:e0:fe:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:25 2025 by rpki-client