Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
File: a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json)
Hash identifier: +HmnDaDFwEU29oycocZ8eg9xidz9KfK2lOaIvJJYn3U=
Subject key identifier: F3:26:28:C6:B3:24:68:BE:74:17:CE:AD:0B:5E:61:22:10:89:4F:01
Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Certificate serial: 0194BD853A7C7CF734A71B109A1FE83A5D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
Manifest number: 0842
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: gG1b7eVhhZARacKQC8Fe77MobJaPXZB2ADHodNQCXgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3a:7c:7c:f7:34:a7:1b:10:9a:1f:e8:3a:5d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=f32628c6b32468be7417cead0b5e612210894f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e1:f7:16:f9:04:e6:eb:76:55:3c:47:85:e0:
01:cc:44:2d:8c:20:e3:3f:aa:4f:a7:df:e7:2c:7f:
f9:56:1a:5b:74:8f:a9:12:3f:23:66:2a:fc:e6:68:
b3:9a:1e:dc:73:5a:83:c4:6f:ad:ee:0a:72:b1:fd:
c7:57:67:32:09:79:ba:c3:9c:40:cc:0e:4c:fb:f7:
81:fc:ce:9d:37:92:ed:8d:77:5b:42:f9:8b:98:06:
19:30:b3:50:2d:6f:ae:ca:db:9a:b5:56:46:37:33:
8d:3f:97:d6:28:6a:24:12:35:a9:cc:6d:aa:91:9d:
de:2c:ef:f9:ab:92:82:7f:37:d0:29:e3:cf:06:bc:
aa:d7:c6:32:2c:7c:a5:fd:7a:4a:1d:fd:5f:29:b1:
d5:68:2a:fc:fd:ce:30:5e:bc:31:4d:13:c4:3d:5e:
c1:39:71:13:f9:58:c5:d4:4b:da:c8:ac:25:89:97:
13:88:7c:ea:b9:65:95:c8:d2:f4:49:0e:9e:12:61:
87:15:d1:45:ff:bb:ba:a3:03:30:0c:2b:e1:07:34:
da:fa:b2:4f:b3:a2:ee:fc:d9:bb:51:c1:8d:a1:3c:
68:03:ea:41:19:7e:77:bc:b3:d1:96:5f:db:e5:4c:
4d:4c:3c:57:8c:cc:be:10:1b:ff:97:0a:4b:21:50:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:26:28:C6:B3:24:68:BE:74:17:CE:AD:0B:5E:61:22:10:89:4F:01
X509v3 Authority Key Identifier:
keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4c:0f:81:e6:5d:9f:f9:19:8d:88:55:a7:2f:e1:35:04:36:
4a:40:8b:74:eb:80:fe:49:d2:3e:4c:aa:8c:86:ba:e8:2d:11:
be:c2:2d:59:44:5f:cb:5e:6a:a2:f4:3e:f9:1b:ea:4a:97:31:
f0:38:f8:43:cf:df:4d:61:28:70:82:fd:20:d8:fb:f8:48:23:
e3:71:c7:2f:00:46:e1:6f:e5:3d:d9:13:a0:7a:25:f2:03:34:
01:33:d6:50:b5:81:35:c4:66:a8:d1:88:fe:94:f7:7b:5c:2e:
2b:35:21:cc:be:87:cb:23:78:20:1d:83:b3:66:46:90:81:df:
20:c6:83:71:2a:1e:e4:28:3a:f2:3d:de:ff:7c:fb:22:56:6f:
6d:d6:8d:06:40:ab:70:0a:19:e1:bf:96:20:d7:06:9e:79:ca:
dc:81:d7:e1:13:c2:ec:58:41:99:db:90:ef:17:3e:2a:dd:61:
de:b5:9f:c6:8f:0e:0e:e9:e0:8f:6f:09:c7:93:9e:f1:f2:a7:
dd:cd:5f:19:e0:59:1d:c0:3d:51:3d:9a:f4:98:e6:f5:05:98:
33:20:71:0a:32:88:b9:04:85:f0:1c:2f:95:95:73:8a:67:08:
f3:27:c1:d6:83:1a:26:a4:d1:8e:3a:76:ed:a3:6b:8d:43:37:
7c:05:a7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:10 2025 by rpki-client