Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
File: a-OcMb6T9W5jvSbVscBy3HdTGeY.mft (raw, json)
Hash identifier: 3Xp8UPFYt7AX50XXaffXlFkkj7s1Nzp0CCE9FC7Q07g=
Subject key identifier: 16:1E:32:63:71:05:FB:8F:EE:C3:67:2C:EA:D5:36:60:B0:60:13:42
Authority key identifier: 6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
Certificate issuer: /CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Certificate serial: 0194BD17873F04150F07A3567ADD183A6088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
Manifest number: 01FB
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: a-OcMb6T9W5jvSbVscBy3HdTGeY.crl (hash: lw7+trzUfgU+yIHTdU7lP17995m+kqDqCs/oB/6m5Wo=)
2: avdVBk-rHRbW-M4AabpJX7CSjxg.roa (hash: XlwxkSLG5mJnTFp/kB80ylCJ16RiA9KQHhkduE06FV0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:87:3f:04:15:0f:07:a3:56:7a:dd:18:3a:60:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=161e32637105fb8feec3672cead53660b0601342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:c9:38:1b:ef:f9:47:ac:3e:bb:44:9c:d0:
4a:7c:e9:84:42:91:05:47:42:82:b4:78:ce:86:80:
21:d6:6f:b2:86:fb:bc:41:03:98:82:a8:ef:b7:fa:
72:38:f8:fa:c6:8f:4a:ba:83:6f:25:f2:7f:51:39:
30:84:22:c4:aa:21:52:8b:9c:c0:da:60:8d:f8:5a:
8b:a4:ed:84:9b:2c:91:8b:0a:f5:7b:51:61:d9:c3:
33:e1:24:ba:03:fb:9d:73:80:f3:83:a1:a5:06:54:
41:43:7a:8c:a1:e8:c2:a7:03:dc:8c:b7:c6:ea:91:
01:e9:9a:a2:e2:66:bb:20:2a:78:83:09:fa:d3:9d:
1a:86:95:ab:56:fb:bb:e6:85:ba:ce:ca:97:fd:98:
13:b3:3f:65:fe:1b:33:08:af:74:42:af:92:9f:01:
1c:90:2b:cb:fe:49:8a:6a:20:f4:db:df:2e:ea:1b:
33:d6:50:34:2c:7b:76:b6:08:b6:50:41:79:ec:da:
3a:da:23:8a:74:10:a5:a7:02:7f:b6:b4:0b:5d:8f:
2a:e6:75:9c:b1:b9:81:e8:eb:95:85:c0:14:6c:12:
fc:5e:c2:14:52:8c:c7:9a:e2:4d:49:e6:b2:70:bb:
8e:50:c6:18:bd:54:1a:9c:eb:3a:70:c9:dc:fc:cb:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1E:32:63:71:05:FB:8F:EE:C3:67:2C:EA:D5:36:60:B0:60:13:42
X509v3 Authority Key Identifier:
keyid:6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1d:3a:22:e7:c6:81:64:88:d7:5c:4a:ca:72:74:c1:0c:f8:
56:d9:ba:f5:dd:58:21:87:25:a0:58:0b:c1:96:17:14:7f:2b:
4d:f2:97:e5:af:5e:c8:18:37:3d:d4:ed:ca:82:9b:bc:5e:97:
5d:e4:a1:f6:11:6f:73:36:cf:8c:08:61:9e:27:48:5d:af:3a:
47:2e:18:e1:e7:5d:13:b6:66:ee:a8:25:b8:96:03:d4:2e:d6:
33:fe:32:60:5d:5c:44:ab:78:26:74:0e:e3:78:3d:60:b0:07:
0a:58:29:c3:88:17:07:0f:53:95:60:d8:57:31:0a:d3:63:41:
e7:5b:81:31:a8:41:5f:a9:b1:bf:52:0a:20:5c:2b:b7:86:2a:
5f:b8:9f:fe:46:fd:ec:b0:22:5e:b5:b5:16:8d:bc:15:0a:00:
f8:fd:bf:b0:ed:bd:ea:13:d9:2f:9d:93:79:26:7e:71:2d:f6:
8a:6a:46:f7:2b:56:bc:4d:ac:52:0c:f7:b1:ca:6c:d2:f6:4a:
aa:68:09:cf:00:ee:98:e6:c2:ef:40:bf:c4:1e:95:bf:31:17:
1c:c5:60:30:7e:39:4f:84:b9:d5:be:cb:a5:fd:37:69:77:0e:
32:6b:15:19:57:fd:21:05:5b:1b:db:92:0f:b5:7c:d8:db:27:
78:06:f0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:21 2025 by rpki-client