Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.mft
File: 2O6Q00LYZepn8rDS-3TAOfg-Skg.mft (raw, json)
Hash identifier: CRqmAgUofDf7YtMl/x2uWIpCGUPTC7GmpoZ2nJJRYJw=
Subject key identifier: 6A:D2:7C:45:3A:0F:D9:8E:7E:ED:DE:5B:ED:E6:CC:7A:9A:30:5D:BA
Authority key identifier: D8:EE:90:D3:42:D8:65:EA:67:F2:B0:D2:FB:74:C0:39:F8:3E:4A:48
Certificate issuer: /CN=d8ee90d342d865ea67f2b0d2fb74c039f83e4a48
Certificate serial: 0194BBCDD81EC4786345CBA0A1D487B15A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6Q00LYZepn8rDS-3TAOfg-Skg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.mft
Manifest number: 014C
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: 1vvIkvJGRy621vVPsoLS7KLp9WQ.roa (hash: AaLmkGEE5WFi/MsCmNoVGVjYg2GotUKYwJ8yvjW+a60=)
2: 2O6Q00LYZepn8rDS-3TAOfg-Skg.crl (hash: 1ObTkoB613w10B10XN/brccTLXJCkS3wPomFltXxhpQ=)
3: KLjjQzFk9GYkvqPEoe40SA-mXbg.roa (hash: 2jEymy+mMO9pWyCpodUhIwEZFiuwLfDEfoelvtg+xqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d8:1e:c4:78:63:45:cb:a0:a1:d4:87:b1:5a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ee90d342d865ea67f2b0d2fb74c039f83e4a48
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=6ad27c453a0fd98e7eedde5bede6cc7a9a305dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:8e:8b:ba:1d:91:77:31:39:e5:16:ff:82:
c2:5a:cb:11:c6:ec:ee:18:7b:60:ef:66:ee:ed:34:
4a:c6:c9:27:5f:eb:13:23:40:06:90:ad:1d:40:d9:
2b:8d:88:68:40:01:cd:0d:c6:96:4d:b7:12:df:16:
35:52:94:08:ea:9f:19:87:25:d0:74:cb:5b:0a:c1:
86:79:0f:f1:58:0a:5f:44:8e:b2:c3:44:75:8c:35:
cc:5f:2e:3d:61:6c:84:06:03:89:83:20:46:2b:71:
a1:eb:c3:0f:aa:8d:f5:3f:11:13:39:d2:e0:55:ac:
d0:f0:60:c0:0c:6a:85:bc:35:da:1e:93:f4:d7:c6:
c9:f2:de:ee:81:c8:73:23:32:ac:0f:c0:1e:92:9e:
bf:4a:bc:ee:82:95:89:d9:10:07:25:19:5c:47:9e:
70:24:9b:a6:55:95:01:26:58:07:20:67:80:b5:ab:
cb:56:49:db:5d:e0:52:fe:56:51:43:eb:e3:4f:b0:
2c:06:cb:23:d4:78:c4:99:1a:16:71:86:0f:64:2e:
94:15:ce:ae:27:4d:11:39:63:4d:16:88:e0:9a:29:
6c:0c:60:01:1f:01:5d:83:79:be:b8:82:37:94:c8:
ee:51:7f:b8:b1:8c:a5:ae:5e:57:fa:4c:3a:d9:c8:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D2:7C:45:3A:0F:D9:8E:7E:ED:DE:5B:ED:E6:CC:7A:9A:30:5D:BA
X509v3 Authority Key Identifier:
keyid:D8:EE:90:D3:42:D8:65:EA:67:F2:B0:D2:FB:74:C0:39:F8:3E:4A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6Q00LYZepn8rDS-3TAOfg-Skg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:32:4d:05:8f:0e:77:22:88:1c:07:8c:ef:f7:a3:33:3a:0d:
55:4c:37:5e:5f:50:2d:9f:bd:c1:1a:7c:18:57:64:08:49:ec:
88:45:5d:a5:3b:03:71:7a:70:60:92:a7:a2:9d:02:d6:db:c5:
3a:ba:2a:f9:cd:82:41:fe:db:ab:1c:e0:b1:2e:7e:16:5d:64:
48:82:5e:1d:28:c4:fb:ce:1b:2b:9b:04:34:48:88:3c:93:14:
06:69:26:30:d3:9e:77:31:61:59:da:2b:0e:1c:65:41:22:64:
ec:38:92:4d:22:c4:eb:f1:9e:fd:ea:21:38:96:e7:12:2e:82:
cf:b2:32:5e:c6:2b:2c:e3:ad:b6:2e:67:58:f5:86:4f:39:58:
f9:ff:14:eb:74:c0:01:f3:c6:3d:08:9a:68:2d:d9:e4:fb:28:
38:fd:ef:8f:c8:d1:d6:5b:fd:a9:72:c5:80:27:53:5e:a4:64:
74:a3:8a:d5:7c:5c:ea:85:03:54:65:37:e4:47:02:78:d2:d1:
ce:f6:99:bb:ae:af:d8:1a:08:44:2c:12:09:ac:a9:86:7a:ea:
bb:d2:82:27:c4:b1:0f:3f:a0:31:67:db:b7:67:57:fb:7a:2c:
c6:b7:ec:62:d0:44:94:ed:32:c4:f4:5b:78:4e:be:52:46:34:
2b:ca:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:57 2025 by rpki-client