Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
File: atlkHKRH6y4wxdtRkcFrzUdyids.mft (raw, json)
Hash identifier: 99xpZ9D996oX0T5clAi8HNAygCwZ8O+A7Ka1thN0FdI=
Subject key identifier: B4:BA:FB:41:05:05:A7:A0:C5:DF:6E:79:84:20:85:A9:25:F9:E3:B6
Authority key identifier: 6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB
Certificate issuer: /CN=6ad9641ca447eb2e30c5db5191c16bcd477289db
Certificate serial: 0194BC04BCBE50E1C9793D7FCACD01024EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
Manifest number: 137E
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: 1-9DbJi5jE57Pl5jrqPEth8zWTyI.roa (hash: FEmrD915t2x/Bvixygwv8jPDu1w/tggDREyxGYTpkL8=)
2: atlkHKRH6y4wxdtRkcFrzUdyids.crl (hash: bk5syMR4nqmTCwQFFsgRyGj2CUnpSwBciCMHmudZBt8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bc:be:50:e1:c9:79:3d:7f:ca:cd:01:02:4e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad9641ca447eb2e30c5db5191c16bcd477289db
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=b4bafb410505a7a0c5df6e79842085a925f9e3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:8b:d5:73:f0:69:5e:aa:62:6e:fe:bb:ef:
88:41:48:29:96:f8:fb:3b:92:45:2c:6f:c0:55:62:
da:3f:35:59:9b:bf:0e:af:4c:87:f8:80:5c:52:4f:
72:2b:22:b8:b5:c0:63:c3:53:ee:f6:1a:50:fd:dd:
b4:51:e3:90:46:2d:d1:76:24:44:dd:21:7a:6e:14:
84:b9:17:47:9a:e3:7c:70:07:71:ce:55:0c:25:3d:
58:db:54:33:66:ee:e2:c0:d6:8b:f5:75:bd:d3:5a:
93:3a:38:b9:3f:f2:4d:fa:6a:08:4e:1e:f4:c7:ad:
cf:15:f0:28:00:1c:f6:49:f7:15:65:0a:ee:9f:e8:
53:24:db:e4:24:73:56:cf:65:1b:67:49:ac:d5:cd:
10:52:fe:17:6c:5e:84:d6:86:b2:93:33:c6:96:85:
f8:08:51:27:1c:09:52:8e:13:b0:0f:9d:c9:20:15:
75:ec:4f:2f:cf:b0:a4:7f:57:88:42:f5:ca:09:fe:
7d:5c:b5:2c:7a:72:29:45:d4:74:c7:77:e1:0f:89:
c7:38:fc:68:66:3b:6e:6b:79:c2:a5:ae:51:48:f5:
73:45:a4:fd:50:10:ca:cd:a3:66:b0:49:d7:a3:a1:
bd:5a:5d:1b:85:c8:6f:f1:dc:e5:3b:6f:4a:83:aa:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BA:FB:41:05:05:A7:A0:C5:DF:6E:79:84:20:85:A9:25:F9:E3:B6
X509v3 Authority Key Identifier:
keyid:6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:54:10:8d:7e:dc:1d:63:3d:7c:0e:ab:4b:98:96:95:7f:04:
ad:6f:cf:db:de:ab:6c:e1:8b:80:f4:1b:55:28:5d:04:10:cf:
0d:a3:b2:99:80:bd:db:0a:ad:09:06:72:5b:06:9f:d7:d0:9b:
6b:4f:d2:ef:67:b2:4a:35:20:da:e2:fe:99:4b:a5:09:93:de:
7e:69:92:3d:03:71:46:80:6d:15:f6:e5:29:18:f6:38:a4:b1:
a1:96:68:28:a1:7f:e3:ec:4a:03:d8:99:ee:8d:38:0c:c3:28:
33:3a:e6:cb:db:ab:50:4a:71:2a:05:c0:a9:cb:da:cf:54:0e:
da:6c:3d:fd:bd:cf:1e:b0:14:3c:67:de:ef:be:76:de:25:94:
f8:52:ec:8e:63:fd:af:74:0b:6a:11:8e:2c:3b:1b:f3:00:f0:
51:5a:ef:c6:c6:c4:77:a2:01:2e:43:dd:e4:fd:a8:48:32:0f:
c6:bd:0d:5e:05:7f:d3:b8:4e:00:e8:f6:cf:86:9f:47:eb:aa:
02:a0:30:33:11:28:5f:a3:11:83:08:7d:9f:92:db:7a:1b:eb:
a2:53:a9:a0:19:31:88:ea:4b:3b:e0:a4:b0:a8:f2:98:81:63:
cc:3a:12:5a:77:8a:57:04:b1:15:05:5f:c4:3e:d6:57:dc:f9:
74:90:95:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:45 2025 by rpki-client