Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
File: 6MpwwfyVubHp3Hd1RVutuSFPkdA.mft (raw, json)
Hash identifier: pOSfjGpTjgSUJqTvYDB+9Uwqdz5Vt5lCaG/dfZaLWzE=
Subject key identifier: 8A:6F:11:25:44:F6:53:5F:9A:E3:9F:43:90:E6:BF:92:A2:23:E0:0F
Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
Certificate issuer: /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Certificate serial: 0194BD4E6A6FCD0A0B8EA40AF5407384BCBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
Manifest number: 1331
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: 6MpwwfyVubHp3Hd1RVutuSFPkdA.crl (hash: zFtfEHIDhVlCPWDWEVFhOcitBe0CfgBilMH9CjqRDqk=)
2: h3MBCKUGhHfeEGJEjBUvFcZingY.roa (hash: Kf87fhJV7eWi54ATVvDhv4SnGp1TZLheM1w//OwPipM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6a:6f:cd:0a:0b:8e:a4:0a:f5:40:73:84:bc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=8a6f112544f6535f9ae39f4390e6bf92a223e00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:c7:e4:6c:3a:a3:e4:d9:3e:aa:d9:64:53:
1c:01:37:74:38:34:8a:09:c2:91:f0:5e:9b:72:1d:
2a:a6:4d:1a:c8:43:27:74:45:f7:47:d2:87:38:f4:
6d:d1:d3:f4:ef:e6:94:3e:96:68:7e:78:f2:5c:a8:
c1:f2:21:6f:5b:d9:e7:0c:ed:0b:9e:32:fe:2f:f7:
71:7c:d6:19:57:81:5d:5b:77:75:7d:a5:6d:2b:3d:
b4:e4:24:f0:20:f9:4e:ce:7b:6f:f9:60:0a:c1:87:
44:70:97:bd:f1:a8:c1:51:13:e7:32:93:08:da:a2:
38:b7:5c:39:1a:fa:af:a1:cc:fb:30:bb:60:f9:ab:
2a:8a:26:80:69:dc:3f:1a:38:53:5b:16:8e:53:83:
ed:69:d7:e5:5f:00:74:90:14:8b:9f:e2:3c:fd:eb:
41:39:4d:2d:ba:c3:f6:24:ef:87:49:50:ea:35:16:
14:f2:ef:a8:37:c0:7e:42:42:27:fd:d7:d9:c3:b4:
e0:74:08:c9:93:e4:18:0e:ab:16:da:05:13:2b:19:
ba:56:c9:7b:b3:ad:5b:a0:b6:46:ce:af:01:80:69:
67:dd:28:da:88:cb:2a:ca:fe:7c:f4:74:1b:76:bc:
be:7a:c0:3b:cc:47:67:dc:5f:dd:e4:94:aa:ee:33:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6F:11:25:44:F6:53:5F:9A:E3:9F:43:90:E6:BF:92:A2:23:E0:0F
X509v3 Authority Key Identifier:
keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8f:86:a8:fc:a5:eb:54:0e:af:ae:c1:61:8a:b5:d0:8d:59:
99:e5:b1:f4:58:32:4f:92:fb:b6:b7:60:63:0f:3f:c9:78:0e:
36:c7:f8:d1:43:97:35:25:9c:9a:7c:f4:30:70:70:4f:5e:7a:
10:c1:99:13:81:24:8d:9b:16:a0:4a:39:30:09:dc:34:d4:9c:
03:8d:56:1d:09:f7:a7:99:a0:be:2f:02:ac:d3:6d:54:9b:ef:
7e:78:6a:85:eb:2d:5b:26:08:08:02:37:2f:48:7f:64:01:1c:
4b:58:5f:ac:53:49:77:06:18:a7:4a:dd:e8:ae:c9:98:56:76:
15:bf:c7:a2:48:3e:09:43:8a:5f:d9:0a:5e:58:03:53:99:9f:
de:dd:47:0b:e0:0f:da:a9:49:71:19:4d:7b:d5:ea:77:fa:9e:
07:d4:79:60:8f:54:ce:33:7b:b0:f6:45:28:dc:58:21:17:f9:
ef:35:44:c5:af:27:a4:53:36:c1:0f:27:21:10:52:53:6d:90:
85:17:bb:3f:5c:6c:0c:a3:c7:e5:b7:53:b6:65:ab:e2:4e:d3:
73:e1:00:41:09:c1:98:70:52:12:d4:fd:ee:67:00:65:d2:91:
18:df:f6:9f:18:55:e8:ff:11:02:4b:ce:3d:bb:65:db:be:d8:
07:0b:8c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:50 2025 by rpki-client