Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
File: 6B4yXNISZiXGbUadtk5O-aqw3GM.mft (raw, json)
Hash identifier: VxIuydf4+/NDMjv/a6ngYUX5pr4y1ziFCuCqLwuOK9g=
Subject key identifier: FC:0D:B9:52:E3:57:89:4D:1E:7C:F2:CB:C9:D2:C5:33:A1:DA:7D:57
Authority key identifier: E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63
Certificate issuer: /CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
Certificate serial: 0194BC3BE6B8E408C0966F4027C0170FDBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
Manifest number: 0B8B
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: 6B4yXNISZiXGbUadtk5O-aqw3GM.crl (hash: Xicai7jbYOtaK/j8pIOSt002+Ri66VDpXHh8x+FCVtw=)
2: guRa0ry_XeErXAXDimQX6nD8r-o.roa (hash: HkTFHVv5bF3CwAvh/UV6s5H3UbyzToqbz92TpMOY9SE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e6:b8:e4:08:c0:96:6f:40:27:c0:17:0f:db:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=fc0db952e357894d1e7cf2cbc9d2c533a1da7d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9b:b5:a3:13:b8:85:ac:2e:4a:c2:6a:9d:40:
74:a4:df:4e:e6:97:a5:86:ac:92:97:8a:6a:00:5b:
ec:b2:a2:60:26:04:a2:6c:38:f2:29:83:7b:7b:88:
dc:e8:8a:32:01:5c:a1:fd:42:18:5a:04:62:26:ca:
e6:d2:44:76:0e:5e:4c:49:f9:1e:3a:fe:fd:81:0a:
00:8a:21:c6:60:2c:5e:47:ba:7a:1f:a5:ef:9f:87:
89:69:46:c9:c9:59:b5:f5:d7:2f:63:08:1a:f8:0f:
82:9e:7f:a9:1a:0f:72:67:cd:ca:c4:06:95:bd:da:
6b:7f:14:94:00:02:29:b4:50:ba:2f:3a:02:b7:b3:
63:39:05:cb:08:75:d3:44:c1:27:fc:55:c8:92:6b:
d7:06:64:8b:24:ca:89:09:1f:d3:f8:f7:64:17:33:
8d:b0:e4:e7:88:49:b2:67:cf:27:83:3d:3f:92:d9:
18:8d:a8:d8:17:40:e1:58:73:e5:7d:9f:88:e4:ad:
00:48:9e:9c:bf:bc:67:db:bb:53:05:cd:93:22:be:
f4:8c:88:63:09:86:22:2b:ce:31:c6:6c:33:58:f4:
0a:99:d9:00:87:28:8c:5e:26:41:5e:2a:7c:c2:e8:
a9:a7:66:61:fd:b8:83:34:94:dd:92:95:1f:fe:90:
db:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0D:B9:52:E3:57:89:4D:1E:7C:F2:CB:C9:D2:C5:33:A1:DA:7D:57
X509v3 Authority Key Identifier:
keyid:E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:28:fc:37:22:f3:50:de:de:b4:14:f7:0b:93:88:b7:47:cf:
3b:53:da:50:3c:2f:de:28:7b:60:9e:5d:e2:a1:10:8c:aa:0b:
af:57:4c:71:6d:39:44:2d:72:21:0d:06:f6:93:6a:a7:95:56:
76:0b:4e:c3:fe:74:62:e6:2b:22:6e:f8:5c:5a:f4:f2:62:39:
36:25:ea:87:d9:bb:f6:ee:9a:eb:25:9b:be:4a:11:d3:ea:00:
17:0a:8f:23:50:e0:dd:0c:15:22:a3:0a:10:66:5b:c8:bc:44:
96:0a:cf:73:7f:1d:a0:66:6d:77:ee:26:c3:c5:d8:5a:c4:79:
73:50:20:1f:dd:ca:52:4c:fd:dc:b2:1b:8d:48:54:8e:fe:8c:
17:82:82:91:ea:fd:4e:b3:13:df:31:cf:2f:95:d2:1c:66:81:
7f:2f:c5:af:b3:9c:12:d1:fd:4e:b3:01:88:e3:bd:a7:49:bb:
55:5a:98:fd:35:c3:c1:6d:15:a0:9f:f7:35:93:f2:2b:f7:4b:
21:db:eb:5f:66:b4:8d:c5:d1:4b:88:9d:0f:2e:cd:a8:b7:d7:
4e:df:79:dd:cc:b9:43:2d:fe:05:53:92:83:ca:c8:3c:f3:26:
9f:f4:75:0d:c2:d7:4d:ec:f2:52:20:a1:82:58:31:ff:6e:73:
59:2f:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:47 2025 by rpki-client