Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
File: poXxkUzrGSIcVjGTAn1FNFAzrV8.mft (raw, json)
Hash identifier: C+6GgzhcT9fCfrECDEF+VFGxmK009DZVWEamVYe4OoQ=
Subject key identifier: F7:90:8C:44:B7:83:73:6D:91:0B:D5:ED:CB:DF:11:F4:91:A7:11:E2
Authority key identifier: A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
Certificate issuer: /CN=a685f1914ceb19221c563193027d45345033ad5f
Certificate serial: 0194BC04ABE9900312E311756748AA63E272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
Manifest number: 6D
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: TCiOUS2lOe-d-inEeAtaNF22X3k.roa (hash: H5jxU1+mIYAsjzlbjYeTvSFiOWLCAxpo86ZAHMuzEhY=)
2: poXxkUzrGSIcVjGTAn1FNFAzrV8.crl (hash: GdAwoM5P64Ldn1Z0jo4Kb5zMVNbgn69Bfa3zmuSPJdk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ab:e9:90:03:12:e3:11:75:67:48:aa:63:e2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a685f1914ceb19221c563193027d45345033ad5f
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=f7908c44b783736d910bd5edcbdf11f491a711e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:eb:40:22:64:ad:9f:19:88:ff:a0:27:46:
90:56:16:86:0a:0c:70:a5:19:b1:e5:47:73:2a:8a:
fb:4b:3b:81:98:e4:c5:8c:6b:7b:ee:a8:51:6c:e0:
80:6f:c9:78:0d:69:b9:e6:8a:d0:4b:be:00:74:22:
c8:23:47:76:50:3e:d5:84:f0:0a:b0:d0:94:eb:b8:
b7:21:55:67:5e:0c:ab:ff:27:0f:ea:15:e8:6e:a2:
b2:cc:c8:fd:85:04:e6:95:a5:a8:0f:b6:1f:9d:5c:
c1:b9:fc:6e:a6:c5:b7:89:7d:26:dc:7a:5d:71:ce:
36:59:64:69:cf:f9:fd:84:71:5e:15:22:f7:18:33:
d5:c6:b1:16:8b:5e:cb:1a:0e:82:b1:9d:49:86:2c:
ff:2f:d7:4f:69:8d:20:c3:22:45:88:54:e2:bd:8e:
eb:40:83:da:7f:dc:be:db:36:5d:72:cd:42:b7:f9:
3b:54:6c:fc:76:bf:22:5c:ab:c1:8d:06:4c:50:55:
1c:8b:98:02:58:ea:9b:08:03:18:9e:12:02:a1:72:
b1:86:09:28:80:d5:8c:1c:15:35:2c:50:89:32:1f:
3c:7e:d6:25:82:1b:aa:56:c8:6f:c6:f2:06:25:d3:
36:a9:7f:82:4c:6d:6f:73:18:4a:6f:ba:5d:25:69:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:90:8C:44:B7:83:73:6D:91:0B:D5:ED:CB:DF:11:F4:91:A7:11:E2
X509v3 Authority Key Identifier:
keyid:A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:1b:88:73:60:62:b5:09:4b:b6:fb:22:6b:ea:6b:1b:11:a9:
0d:9b:5f:20:86:a3:ca:a5:a1:69:32:4a:d0:f8:90:9a:63:01:
a1:05:15:c1:16:f7:dc:34:5c:68:44:2a:57:54:2e:53:d1:78:
2e:7e:0a:56:cb:1c:f0:11:9b:5f:5a:18:65:a7:fd:ff:62:8d:
5e:60:ea:ad:0c:bc:9a:6d:21:c1:d6:e2:11:54:0a:e3:65:da:
05:5d:95:06:b7:04:37:b8:ee:7c:64:df:06:78:8b:38:46:8a:
d3:6d:9c:25:e9:d4:a3:b3:5e:56:eb:7a:6d:ec:b0:0d:fa:13:
c0:a8:9a:71:52:c4:31:96:b4:13:5c:62:e3:ec:4b:ef:db:ce:
6c:97:f5:cb:5f:f2:09:63:12:c8:cf:e8:9b:1b:15:ed:ee:a9:
55:2f:a2:4c:e4:81:8c:3b:f1:38:f7:91:41:f4:b4:9a:80:de:
7b:44:33:8e:a4:57:57:10:8e:85:a2:a2:99:d1:a8:bc:a9:a8:
e9:29:d9:8c:c0:f0:04:01:4b:ba:77:a9:c5:43:a4:c3:96:18:
4b:c0:f1:a1:21:e4:32:31:b5:bc:b6:9a:d6:11:93:aa:47:30:
45:40:e2:3a:6d:10:33:a8:f6:40:d0:36:e3:c6:82:4a:40:3f:
81:20:df:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:28 2025 by rpki-client