Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
File: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft (raw, json)
Hash identifier: Yu08TvCl/H+JUyYjY34rXX4EP8RDt4CWm4BRbNd50WE=
Subject key identifier: D2:D6:B4:74:48:B3:15:38:56:4E:D1:B4:1D:7D:42:CD:7F:BA:AF:9F
Authority key identifier: 6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
Certificate issuer: /CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Certificate serial: 0194BC3BDFF676BF5BAA2CC54DB0AE949DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
Manifest number: 0C9F
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl (hash: mwqriG4BhuVfsVcjVcDVeJjxpmkQUEPOy0x1AksO7iw=)
2: ttVoIKzTT0XKllFStzVaYvUJzr8.roa (hash: UbtbO9ulOo1L1dwjq6p3bONW5eyopaXSfqTO9fveMwc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:df:f6:76:bf:5b:aa:2c:c5:4d:b0:ae:94:9d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=d2d6b47448b31538564ed1b41d7d42cd7fbaaf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:7d:d4:21:8a:38:e4:0a:7c:df:08:c4:d1:
c1:b9:de:fc:11:77:de:87:0c:bc:b3:1b:74:d5:14:
b1:26:db:80:29:8a:1d:95:cd:07:b1:15:9e:73:39:
89:11:91:ec:d2:e1:b8:bf:53:e1:14:62:79:44:8a:
92:4e:38:1a:36:a6:2d:63:fd:cb:5c:c3:ee:90:6d:
67:59:cc:99:4c:db:98:51:15:cc:58:47:f0:e4:40:
c5:e8:46:9f:d3:1b:8e:d3:ad:80:e9:47:3f:ed:38:
da:88:09:a9:8e:41:4b:86:58:7d:98:82:fd:b4:cd:
cb:3b:49:48:28:9f:87:dc:3d:4d:b4:73:21:63:94:
d3:04:85:04:09:97:3b:3f:ce:9a:8d:21:78:0d:21:
e8:0f:60:23:df:e7:f1:f9:b9:43:07:35:ea:d6:69:
ff:5c:d8:e8:6d:46:43:99:74:f7:b9:7d:9a:9f:ee:
1a:37:45:7f:a6:37:ab:1f:13:fb:05:13:00:17:4a:
16:1c:cd:6c:e3:61:82:47:72:3b:db:7b:13:1a:5d:
77:75:5b:09:d6:f0:8a:cb:c4:93:eb:e0:15:d9:f8:
34:3d:69:b3:ac:60:73:5c:1b:56:ad:18:e0:d4:c4:
c6:a1:c0:2f:23:ae:b9:94:1e:bf:2e:4a:9f:84:d1:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D6:B4:74:48:B3:15:38:56:4E:D1:B4:1D:7D:42:CD:7F:BA:AF:9F
X509v3 Authority Key Identifier:
keyid:6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ad:c2:3f:63:41:90:33:f9:c2:87:63:25:4e:27:fd:b9:ae:
e6:25:8b:4a:ef:b2:87:6b:83:cc:f8:4b:55:46:0f:84:24:6a:
63:a9:88:e6:20:27:30:9a:d8:51:13:56:cc:1e:85:c3:8b:0e:
dc:27:3b:0d:e6:ff:e0:fc:e6:5a:3d:4d:e6:52:38:e5:6a:72:
fc:32:c4:7c:4d:f5:f7:04:2d:21:7f:23:ff:49:25:02:e7:1f:
a4:cb:39:2f:71:57:55:db:c8:b6:38:dd:55:cb:5a:9a:45:f3:
b7:f1:d0:c2:00:b4:49:b9:08:f4:47:eb:44:e6:74:da:9f:77:
d6:aa:16:f0:1d:79:96:f1:a8:30:75:0d:d7:b4:99:35:72:0a:
07:99:90:87:cc:fa:ee:a4:78:60:9c:92:a2:2d:57:d8:b8:05:
a6:7b:00:15:5f:1f:b8:e6:dd:2a:30:09:1a:46:1f:81:46:f0:
b4:f4:e5:c1:3b:d1:19:b9:58:9a:99:2d:75:af:f4:0b:39:e4:
f8:9f:8b:1e:78:b6:65:bb:79:17:a9:b4:dd:59:93:37:41:54:
e6:e7:51:e3:b2:94:01:da:20:76:ea:eb:96:15:32:66:fd:15:
61:ca:8e:87:3f:37:6c:67:af:50:37:4f:5a:66:56:36:d7:15:
e3:d8:6d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:27 2025 by rpki-client