Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
File: l6A46SAR7iaAaKFRfSRM4iwmVU0.mft (raw, json)
Hash identifier: 1aI4Kzer3eIxzSI/G5JViJ9gIeItMY6y10gF6Yg3imA=
Subject key identifier: F7:E7:19:1E:3C:C5:B7:C9:48:F0:DB:08:75:04:0C:72:C7:60:BA:D7
Authority key identifier: 97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
Certificate issuer: /CN=97a038e92011ee268068a1517d244ce22c26554d
Certificate serial: 0194BC732AEEC1AF27CF639DC795EADDADDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
Manifest number: 0795
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: l6A46SAR7iaAaKFRfSRM4iwmVU0.crl (hash: l1fo1TVWzZ1tI95Msy/vRhhhstWpqRlR9r2KEcn4JXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:2a:ee:c1:af:27:cf:63:9d:c7:95:ea:dd:ad:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a038e92011ee268068a1517d244ce22c26554d
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=f7e7191e3cc5b7c948f0db0875040c72c760bad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:8d:5f:9a:d2:70:db:aa:1a:21:44:83:b6:
ce:53:8b:5c:f9:a8:b8:d7:93:10:5d:08:d3:65:31:
38:0b:bd:71:48:82:e5:fc:c9:24:f4:71:98:13:7c:
f7:dc:de:70:4b:9d:fc:81:4d:f0:3e:fc:68:2a:fc:
43:9d:7a:bc:1c:f4:dc:de:3d:5c:9f:3b:84:e5:ea:
fd:3c:96:f3:4f:1f:42:11:fd:4b:ca:5a:14:06:21:
68:a9:15:77:51:49:c2:23:66:09:b6:73:6e:a1:8e:
01:66:f8:3b:58:86:21:b6:b4:19:b9:67:fa:7f:2a:
f6:7a:1f:02:9f:37:78:4c:b8:f5:c6:cd:8d:e8:12:
bd:9a:4e:39:39:2c:5a:03:7a:29:32:64:6e:45:ee:
ff:c7:b6:b0:79:7b:9c:df:9c:be:1b:ab:35:f0:c8:
55:da:87:19:13:e0:5d:5b:c7:ff:74:f9:db:8f:dc:
4d:1e:e3:6e:21:0c:60:99:8a:02:43:b8:36:66:ee:
17:05:1a:ab:2f:f1:4a:5d:d7:25:31:fd:01:bb:56:
77:82:8b:46:37:0d:96:05:b7:77:52:51:15:59:84:
7f:4d:36:b9:4b:3b:50:48:bd:d6:a4:95:39:c1:40:
35:07:29:74:08:d6:7b:c2:d7:fc:b2:bb:49:c6:2b:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E7:19:1E:3C:C5:B7:C9:48:F0:DB:08:75:04:0C:72:C7:60:BA:D7
X509v3 Authority Key Identifier:
keyid:97:A0:38:E9:20:11:EE:26:80:68:A1:51:7D:24:4C:E2:2C:26:55:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6A46SAR7iaAaKFRfSRM4iwmVU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5ffd2f-cfeb-45a8-8def-852b6d8c02e2/1/l6A46SAR7iaAaKFRfSRM4iwmVU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:db:e2:5d:90:11:1c:9e:10:70:84:cb:3c:74:19:18:38:dd:
ce:2c:3b:7c:7d:9b:b4:e6:bb:15:e3:b0:4f:d9:cd:70:bc:2e:
c3:d2:a2:e6:bf:36:0d:33:84:90:ce:57:f4:e1:bc:60:af:9c:
ac:58:b5:98:e5:0b:52:7a:eb:fc:cb:cb:83:8c:4c:c6:c7:f3:
67:28:15:e8:54:a9:14:e7:51:be:98:68:9e:44:ff:57:78:af:
86:72:df:4f:73:bd:40:2c:10:1b:ea:3d:02:ad:92:e1:4e:a3:
45:75:73:a8:42:9c:19:b4:d0:e3:3d:3f:e2:f3:01:34:d2:25:
4f:01:6c:c3:06:68:fc:c4:0e:b4:c8:94:aa:57:dd:d7:cf:6c:
bb:8b:2b:66:d4:59:8d:f1:99:c5:b9:d8:e7:c4:e3:d7:aa:8f:
25:21:02:be:f7:c2:02:89:e0:a3:da:99:ac:ca:2f:43:7f:35:
fd:6c:94:db:62:a3:44:04:2e:70:fa:4d:85:ef:e5:c4:83:dc:
02:64:b4:b5:b9:f5:db:b8:a0:5f:18:07:f4:8b:4f:4f:35:be:
ce:a2:65:a2:c9:9f:dd:b9:7a:65:c6:5d:91:31:95:cc:e9:77:
6d:d2:13:6b:8f:be:d0:d1:5d:0e:22:1f:15:cd:15:2e:54:43:
4d:b2:c4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:28 2025 by rpki-client