Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.mft
File: ar_WA8cUHPY0bXXcFMCINTWWjMo.mft (raw, json)
Hash identifier: qq/goY+AL4ib2wHl6lGwRDZtNvzukOrNQ/fUeqYiXEM=
Subject key identifier: 29:66:1E:59:4F:CB:7E:1E:FA:42:DF:7D:D6:1B:F1:C5:E1:44:48:D9
Authority key identifier: 6A:BF:D6:03:C7:14:1C:F6:34:6D:75:DC:14:C0:88:35:35:96:8C:CA
Certificate issuer: /CN=6abfd603c7141cf6346d75dc14c0883535968cca
Certificate serial: 0194BBCDE71E27B8447B80448F0C54B38E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar_WA8cUHPY0bXXcFMCINTWWjMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.mft
Manifest number: 0875
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: ar_WA8cUHPY0bXXcFMCINTWWjMo.crl (hash: Hd4z//OSxuL+ScfSBh0dhx/+pOS+HSBoH7qp5xzdAro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e7:1e:27:b8:44:7b:80:44:8f:0c:54:b3:8e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abfd603c7141cf6346d75dc14c0883535968cca
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=29661e594fcb7e1efa42df7dd61bf1c5e14448d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:4b:a5:36:9d:2e:b3:95:a2:a6:94:c7:cb:
21:aa:fc:37:58:70:40:81:ec:0c:b3:36:8a:e4:5d:
0a:16:60:b3:d4:09:3e:9c:95:74:e3:9f:4d:f3:e4:
cc:13:c8:9f:d9:c7:8b:a2:24:f8:19:13:f6:dc:a0:
b4:ea:45:0f:2c:29:b3:b4:f6:db:7f:22:3a:bb:0e:
fe:53:0b:e8:3c:b2:d8:e0:4f:b5:01:20:69:ed:e9:
1a:25:1b:ea:b6:4c:5e:08:e7:5c:af:44:a0:41:8c:
9f:79:28:6a:4b:9c:91:dd:8b:de:a8:d6:2d:76:85:
54:0f:c1:74:73:b1:94:64:83:7f:fe:29:32:f1:ab:
b2:91:81:3b:ab:e7:8d:aa:c7:61:48:5c:d0:d1:ac:
eb:35:dd:f1:b5:ff:84:1d:21:7f:d1:e9:31:7c:73:
4b:6c:6a:01:ba:28:5c:49:ca:6f:02:d3:0a:25:cd:
dd:f8:15:2a:6d:76:21:49:74:2e:14:b9:20:63:0f:
d9:91:8e:d6:0f:20:69:a3:90:48:95:f7:c4:be:e6:
11:f4:52:05:81:e1:c6:05:0d:f2:7b:ca:b5:56:43:
13:bf:1d:fc:88:17:d0:70:d0:6e:1e:50:15:78:ed:
62:9f:bd:61:6e:1c:08:b8:b2:2f:91:0a:01:a4:b1:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:66:1E:59:4F:CB:7E:1E:FA:42:DF:7D:D6:1B:F1:C5:E1:44:48:D9
X509v3 Authority Key Identifier:
keyid:6A:BF:D6:03:C7:14:1C:F6:34:6D:75:DC:14:C0:88:35:35:96:8C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar_WA8cUHPY0bXXcFMCINTWWjMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:22:df:c9:5e:d4:e7:1b:fb:ea:d5:fb:c2:20:d5:67:ac:87:
df:29:1c:da:85:ac:8f:56:a6:32:45:3b:08:7e:09:41:68:42:
c7:e9:6c:2b:4e:41:0c:ef:28:63:bf:d3:eb:e7:70:18:eb:d8:
68:d7:6f:ca:cc:ff:cb:d4:18:0d:d6:4d:52:a1:62:31:d2:1b:
91:88:c4:a0:11:b3:2c:34:46:45:d7:46:6b:77:de:46:b2:8b:
08:ce:a9:f0:e9:69:83:15:56:6a:e4:2c:e3:63:5e:5b:ca:58:
0c:ee:72:9c:aa:8e:b0:37:35:36:11:fc:62:61:e8:2f:84:c5:
ac:ba:56:bb:bd:fe:c4:9c:fc:76:82:e1:b0:65:d6:4b:bc:f5:
ab:d0:a7:29:a9:0b:0f:d7:d9:d8:a5:06:48:bb:48:26:e9:d2:
68:cf:a7:c2:08:e7:a0:c8:8c:6e:4e:35:4a:7f:5f:6f:8d:ca:
3e:ec:4b:64:55:c3:c5:13:c7:f5:72:8d:33:34:4d:63:c3:e3:
51:9d:dd:aa:fb:d9:0b:be:bc:5b:1f:d5:35:1d:92:2e:66:ec:
96:f4:41:de:4e:81:e8:c4:56:43:56:03:29:86:a6:4f:e5:b9:
63:6b:a1:f7:81:65:ff:d8:be:17:5d:83:09:8f:f9:75:2a:6c:
0c:87:5c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:19:49 2025 by rpki-client