Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
File: 612h2h-h1CXPHcnoJtZe2u1s2Jg.mft (raw, json)
Hash identifier: jH0Ic00DQNMz3I/B7KHfkpMQBGNsOpZq9lWqwZggyZc=
Subject key identifier: 7C:84:0E:E3:89:82:5C:1C:08:ED:CC:7B:D9:58:C6:6A:C3:82:6E:93
Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
Certificate issuer: /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Certificate serial: 0194BCE05787A4F5FD5E56BDD966B488D6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
Manifest number: 11DD
Signing time: Fri 31 Jan 2025 15:00:06 +0000
Manifest this update: Fri 31 Jan 2025 15:00:06 +0000
Manifest next update: Sat 01 Feb 2025 15:00:06 +0000
Files and hashes: 1: 612h2h-h1CXPHcnoJtZe2u1s2Jg.crl (hash: prOD4i5V/HEZGA0RU98LS41xWUr+2tCIeiHOTz8qIRY=)
2: T71-lLx_IRd0xdRoRiuKn01ramI.roa (hash: NdMh7OdN9MHFrjt5MDBsZ76I4BvEZisy0vA5gq92uHA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:57:87:a4:f5:fd:5e:56:bd:d9:66:b4:88:d6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Validity
Not Before: Jan 31 15:00:06 2025 GMT
Not After : Feb 1 15:00:06 2025 GMT
Subject: CN=7c840ee389825c1c08edcc7bd958c66ac3826e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:b0:d5:92:ca:eb:7b:7d:d0:a4:51:b5:28:
9d:27:14:1b:d2:3d:bb:51:8d:07:77:c6:ca:74:be:
1d:81:97:21:bb:9d:9b:8c:6a:80:14:51:62:d6:03:
12:06:12:c4:91:d9:7b:94:ba:92:f5:fd:de:f8:cd:
9a:06:55:14:d3:d2:2b:01:e4:d9:e1:33:6d:ad:ad:
fc:54:75:df:2b:ec:d7:3d:89:d1:b7:8a:22:9d:97:
fd:31:df:a7:f3:48:08:22:1e:0a:33:5e:47:7d:2f:
28:45:68:0c:6b:12:2a:a3:a7:1b:f6:74:bd:27:ac:
a9:b8:22:d0:22:d6:82:6d:ec:71:77:d0:1b:91:b1:
d2:dd:df:61:1f:d9:3c:a5:58:8c:14:45:b1:92:ea:
da:2e:90:f0:19:69:30:45:4b:6d:92:be:37:8e:56:
50:ac:f3:7f:8d:58:de:dc:f7:84:01:20:bf:83:33:
cb:b3:e2:8f:7e:50:16:5c:a0:a6:69:a6:84:39:d9:
12:36:f9:81:8a:29:c3:99:c5:37:2b:46:71:b5:c7:
d7:be:9a:b7:90:d4:91:9a:36:46:c9:29:f5:fb:17:
4c:3f:28:69:72:4d:a4:bd:de:93:7a:93:80:dc:f4:
4d:2e:08:6f:69:d4:78:1e:6e:4b:17:9e:9f:7a:41:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:84:0E:E3:89:82:5C:1C:08:ED:CC:7B:D9:58:C6:6A:C3:82:6E:93
X509v3 Authority Key Identifier:
keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d6:2b:51:e3:e8:96:e1:e0:d9:a0:aa:e9:19:51:19:c4:e1:
67:eb:67:77:b3:61:e1:64:f2:85:f7:0a:3a:ff:18:e0:a0:bc:
4e:59:0c:50:67:37:18:e7:d3:6d:f5:7a:a6:7c:5e:29:16:fd:
f9:a0:39:67:93:62:35:82:d7:42:fa:aa:61:9a:0d:02:79:59:
f2:e5:76:a1:5e:35:f5:ae:02:00:45:2c:e7:b3:a4:a2:ab:ae:
03:a4:94:d3:c6:80:47:9a:ea:34:7f:55:10:29:de:b4:b3:4e:
d7:68:f7:d7:24:31:4e:f9:c2:ff:6c:89:b6:4a:d2:19:31:27:
07:7e:b5:9a:41:59:4b:57:31:e4:4e:98:cb:a6:ff:d7:45:79:
73:5e:94:1c:a9:fc:b4:47:ec:e0:6b:c3:7d:e9:73:cf:d0:1a:
c2:4f:91:6d:7c:87:fa:b5:52:32:00:18:a2:d1:e6:1e:f1:cd:
d5:ca:02:22:73:25:a9:eb:a4:fd:f5:4b:2f:44:4e:a9:01:1b:
74:6f:bd:2b:5d:ef:a1:a0:ea:0c:bf:a0:8a:b7:de:90:4b:28:
7d:db:61:03:8c:83:1b:25:52:5d:29:8c:53:08:3b:ab:f5:21:
90:d3:5a:78:b1:5f:b2:49:c3:70:67:5c:43:a1:90:5d:c9:6f:
0a:36:ab:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:29:39 2025 by rpki-client