Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c0cce-0752-4e5a-ad5a-2d402d55ad5a/1/a8Ef6I7on9gaZn_z3QAj73dGlzY.mft
File: a8Ef6I7on9gaZn_z3QAj73dGlzY.mft (raw, json)
Hash identifier: uiybBiUQ6U9QUOUDq54rWK8OJu2cAwlylHjDENLyKGc=
Subject key identifier: FA:AF:B4:6E:09:63:68:28:B6:30:27:B1:54:06:2C:74:3A:7F:37:0D
Authority key identifier: 6B:C1:1F:E8:8E:E8:9F:D8:1A:66:7F:F3:DD:00:23:EF:77:46:97:36
Certificate issuer: /CN=6bc11fe88ee89fd81a667ff3dd0023ef77469736
Certificate serial: 0194BC3C9297FA236ACB25B19B0E67EF224E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Ef6I7on9gaZn_z3QAj73dGlzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7c0cce-0752-4e5a-ad5a-2d402d55ad5a/1/a8Ef6I7on9gaZn_z3QAj73dGlzY.mft
Manifest number: 06A6
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: a8Ef6I7on9gaZn_z3QAj73dGlzY.crl (hash: ZmQaVO5GWtoq9xx8GmOJ0pyXSuTiRCD6bMhwBlddJiA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:92:97:fa:23:6a:cb:25:b1:9b:0e:67:ef:22:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc11fe88ee89fd81a667ff3dd0023ef77469736
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=faafb46e09636828b63027b154062c743a7f370d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:ee:d1:19:e5:3f:68:d6:77:9a:9b:b8:4c:
6b:cf:d7:7e:94:c5:28:41:c0:35:5d:56:18:f9:c2:
28:80:de:b7:cc:dc:11:2b:ae:d2:f3:1a:69:bc:78:
40:0d:ab:e2:79:5c:6e:a3:e5:13:0b:90:96:81:92:
1a:a3:40:81:b5:59:cf:c0:9c:53:56:5c:8c:49:e3:
0d:df:3d:76:1d:a1:5b:c4:fa:36:ba:96:bb:5d:50:
ad:fa:1f:06:46:8e:b7:f1:26:2b:a1:02:a4:40:6e:
22:9a:bc:a4:4c:3e:44:3a:4a:98:8a:cb:5c:c5:63:
66:56:fe:b9:62:ec:e2:d7:d8:08:46:65:60:83:29:
03:ca:54:43:ad:b8:0f:ab:70:6a:cb:3e:c4:c8:dc:
2e:24:fb:34:7d:a4:24:ea:09:43:bc:2d:2a:73:14:
64:a8:e8:4b:dd:97:f5:55:1e:c0:4a:a1:a3:70:2a:
41:86:50:03:b3:73:33:1f:51:d0:a5:f3:bc:e4:1f:
e5:11:b9:43:e6:9c:84:8b:c2:59:ba:35:9b:06:73:
28:ca:10:8b:34:8f:dd:31:22:3f:f1:aa:2e:af:10:
f2:42:e5:b7:51:6d:0f:d6:08:8c:21:c1:ce:e1:7a:
cb:3f:a4:e9:12:10:00:d2:22:0c:ca:7b:9e:fd:5c:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AF:B4:6E:09:63:68:28:B6:30:27:B1:54:06:2C:74:3A:7F:37:0D
X509v3 Authority Key Identifier:
keyid:6B:C1:1F:E8:8E:E8:9F:D8:1A:66:7F:F3:DD:00:23:EF:77:46:97:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Ef6I7on9gaZn_z3QAj73dGlzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c0cce-0752-4e5a-ad5a-2d402d55ad5a/1/a8Ef6I7on9gaZn_z3QAj73dGlzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c0cce-0752-4e5a-ad5a-2d402d55ad5a/1/a8Ef6I7on9gaZn_z3QAj73dGlzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ad:dc:d9:e8:ed:2c:a7:db:91:73:c0:e1:a9:c9:cd:7c:93:
db:df:ac:e8:db:f4:a6:77:4d:52:fa:79:34:a7:b0:d1:ea:2a:
60:bb:80:0c:ca:b1:51:2f:b7:fc:96:eb:68:9d:2a:33:5c:ae:
7b:ef:e7:81:d4:5f:31:a1:89:36:77:48:d9:de:9e:d5:66:d0:
a1:74:30:41:60:1e:76:f0:fc:92:a8:03:90:6a:59:52:b6:c7:
00:4d:03:a6:e4:2a:14:3f:bf:02:32:8e:01:db:2e:32:e4:df:
af:43:7c:34:38:91:33:db:44:43:48:af:b1:59:d5:38:76:1f:
51:81:8d:c2:af:37:68:4f:15:33:9c:08:d5:b4:8c:f0:73:28:
1f:ff:5c:3d:43:f1:ff:ac:6f:6f:67:df:ff:cc:97:c6:06:04:
64:52:0b:3c:30:d0:b2:aa:72:d3:54:d0:45:9d:35:1e:d4:e5:
d5:cd:0c:19:36:b7:cf:4e:b1:84:77:ac:6c:95:25:7d:6f:82:
56:a9:d7:7d:da:91:bd:b3:88:1b:87:2a:22:3f:8c:6d:61:85:
ac:d2:d7:05:67:f4:2c:2f:99:f2:87:e8:eb:9d:26:e4:c0:df:
8c:01:84:1f:8e:98:5d:1c:5e:6d:2f:56:bf:ae:76:d9:48:85:
8d:3d:42:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:40 2025 by rpki-client