Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: TioRbXbp0R6MO7WtGbrhzP4umdnmffMwNfqwYyVgCgE=
Subject key identifier: DD:99:C0:FD:96:4C:5E:58:E1:3F:8F:44:CC:EF:BD:7E:B5:4F:F2:A9
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 0194BBCE44DE9C6303737CC352E325C4166D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 0B47
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: D4SpWrMJaMPeQmfMP+7gaMAw5sF1IhaV5xC+ZVueSoQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:44:de:9c:63:03:73:7c:c3:52:e3:25:c4:16:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=dd99c0fd964c5e58e13f8f44ccefbd7eb54ff2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:c5:e7:21:11:77:57:e6:9f:a3:91:18:05:
31:d1:13:d6:f3:73:f3:37:ac:63:70:c4:a3:a6:47:
66:6d:ec:b4:30:21:28:64:e2:f5:f8:ac:41:b1:14:
1d:1a:99:8e:67:70:3b:28:79:71:e2:c2:58:80:10:
18:8e:05:d4:03:f5:7c:3e:ea:7e:67:91:5b:f8:81:
85:32:45:59:da:a3:3d:75:7b:69:06:35:80:6f:06:
c5:d8:e0:31:ad:94:cb:ca:d9:24:42:a5:52:d7:ba:
7f:f1:df:d2:3e:2a:ec:7f:c3:f5:82:2f:1c:86:53:
12:3c:83:66:b5:dd:e5:07:1e:91:9b:74:26:1e:20:
cf:37:bc:66:56:8d:56:7f:69:72:fe:5b:67:5a:1f:
80:82:d1:2b:d0:e1:dc:db:1e:2d:a4:18:4d:5e:98:
ad:b9:5b:51:06:e4:fa:ea:94:d7:03:72:24:87:53:
c2:3a:74:32:5a:11:d2:0c:95:08:76:d7:2e:fa:3a:
77:f6:4e:1f:78:4d:14:98:a6:56:f3:76:5e:da:ed:
14:38:f7:d5:45:b3:51:aa:ed:a7:90:34:23:25:5c:
ad:e8:85:4e:24:4c:eb:3e:05:a5:05:97:aa:77:83:
e1:46:4b:1f:ce:1d:41:66:15:82:6f:fc:f2:fd:09:
b5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:99:C0:FD:96:4C:5E:58:E1:3F:8F:44:CC:EF:BD:7E:B5:4F:F2:A9
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7b:8c:7d:85:84:d1:26:ea:0f:af:4f:fe:18:ee:ee:1e:11:
1a:af:cc:a3:44:0c:b2:47:83:d3:f7:69:77:07:5a:df:12:f1:
af:a2:28:2b:05:87:ab:bf:e7:05:2f:13:0a:f3:49:22:22:63:
40:7d:d6:8e:bb:30:cc:d9:23:96:a9:7f:84:d4:1d:96:77:26:
82:bd:ea:2e:2d:8b:42:f8:6d:cd:29:68:17:c3:45:42:ee:57:
1e:3b:4e:93:59:64:06:63:9f:07:a7:72:76:03:40:da:7e:03:
a3:a1:5f:4a:b2:7a:43:37:d6:ed:2c:37:64:20:0d:83:7f:46:
a6:c4:85:9f:66:3a:1d:3b:ee:32:d3:44:c0:ce:62:c4:7e:0c:
0a:4b:55:0d:d7:db:50:ab:f7:35:87:a1:52:e7:c7:bb:30:76:
08:a5:5a:94:df:88:ad:bf:3f:7d:65:36:77:53:a8:ae:34:85:
2c:09:ca:b6:3f:57:11:6f:e4:75:1d:1e:b5:83:6d:62:76:f1:
b7:57:42:dc:38:f7:1a:5d:e2:b4:f8:08:6b:23:59:0f:ab:0c:
01:d5:61:80:74:93:5d:4c:23:b7:db:16:cf:99:10:18:1d:4b:
e8:65:2a:0b:e0:6b:2b:81:3a:0f:a3:46:b1:15:cf:c1:79:1c:
bf:3a:17:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:42:48 2025 by rpki-client