Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File: a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier: KkIzSKw98crWNsB9757BUsdwuRoevU/dnKQpTthi2fM=
Subject key identifier: 51:DC:64:F2:47:50:FA:E4:1D:A8:9B:DA:D9:70:25:8B:00:47:F6:5E
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial: 0194BD17F2192D4B278B4468EB2CB0BF8338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: +Za+vVfk86nCIh0Lo9CoVIilOzZrVmXgjSmvIWTclP4=)
2: movPWb1NWT7RBf22mFzV6ki-niw.roa (hash: pmnGsVyTJDaHQspLVBouBG8RasgSm/+abtktLNR23OI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f2:19:2d:4b:27:8b:44:68:eb:2c:b0:bf:83:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=51dc64f24750fae41da89bdad970258b0047f65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:d6:a8:e4:71:a3:97:b1:c8:04:6a:55:c8:
cb:33:61:c2:07:90:5f:91:a9:53:48:6b:05:27:3e:
15:20:ab:78:40:9d:fe:56:a0:75:ce:40:a6:76:83:
c2:92:e0:b2:6e:a8:90:e1:be:e6:e0:90:e2:1d:49:
3c:06:62:dc:6c:d8:fd:cd:3d:50:91:1b:2a:87:3b:
fb:5c:89:a7:05:1d:83:f7:f4:4a:da:9d:4d:f3:c6:
36:d2:a1:94:8b:f4:5e:88:dd:39:2b:8a:cc:c9:f0:
56:87:13:5d:e4:fc:a6:73:0e:b6:81:d0:02:af:55:
f2:50:8a:ff:99:a6:ea:fb:61:d7:3c:4b:7f:03:c4:
9a:9c:01:c3:de:4a:65:e2:82:6f:98:5e:8b:51:55:
4c:77:aa:46:b8:30:b2:0b:bf:01:4c:21:41:d8:42:
69:56:c9:78:22:ba:0a:12:e1:1a:09:30:0c:03:fa:
e3:7b:d9:19:fc:3c:c7:3d:a3:1a:3f:0e:96:cc:0e:
80:6a:34:d8:17:fd:4d:d1:95:e2:d0:6a:33:9f:8d:
28:0c:50:5a:e2:fe:6d:10:da:f1:72:28:21:6a:e9:
5c:09:a8:9a:04:9c:03:ec:2f:9f:01:2c:e8:e8:e4:
67:f9:7c:dc:44:01:11:fa:e1:c9:fe:8e:f3:20:d0:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DC:64:F2:47:50:FA:E4:1D:A8:9B:DA:D9:70:25:8B:00:47:F6:5E
X509v3 Authority Key Identifier:
keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b5:cd:86:4a:d7:d3:4e:66:53:5b:e2:db:e0:9b:ce:d5:f6:
b2:60:93:b9:7a:a2:63:a8:81:5f:55:c0:2f:ba:21:07:03:65:
6d:de:65:87:ba:e7:21:47:ac:d3:c0:02:b0:fd:9d:8f:39:db:
5d:3e:9a:a9:45:48:e9:f9:df:52:74:29:d6:da:4f:5f:63:d9:
df:e9:50:57:c7:75:a6:2b:f6:c0:ae:8e:75:9b:3c:df:ad:15:
2f:d5:91:34:80:53:6b:1b:22:8b:bf:34:c0:50:aa:c1:9c:6c:
4d:7a:ac:be:fa:9c:64:f5:cd:b7:2f:34:f0:fc:e0:b6:39:84:
8b:38:9c:d9:69:97:19:55:68:7b:74:26:dc:71:f8:45:16:1a:
81:8a:86:49:86:98:25:4d:8c:08:d5:9f:ee:fb:e8:d5:3e:03:
23:d0:8b:e4:3a:6a:19:b9:df:8f:cb:5b:77:5b:49:9c:8d:a9:
c4:d8:6c:1a:6d:2a:a8:5d:e9:6e:5a:6e:98:f8:66:f0:82:c3:
ca:6a:0c:b4:05:09:3c:ff:e2:29:a3:c8:89:fd:fb:78:9d:a2:
d2:05:54:2a:a4:56:4e:fe:0b:c6:71:71:54:a3:57:01:3a:2b:
80:f2:b0:84:dc:2a:32:38:68:6d:4e:2d:cd:d8:86:85:e9:fc:
ac:ff:24:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:31 2025 by rpki-client