Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
File: g06Y-uclpT43QqjU7ehT9P9juRM.mft (raw, json)
Hash identifier: 5CEMnymxfvY0a92msgnsaxa25AMnMUC9YTtO12QxQ5w=
Subject key identifier: 8F:B2:16:D4:72:E5:4B:E2:90:A3:27:E8:85:1D:A4:A4:89:6E:54:F7
Authority key identifier: 83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
Certificate issuer: /CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Certificate serial: 0194BBCE7496567219FDA53182CD21E74374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
Manifest number: 01DC
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: g06Y-uclpT43QqjU7ehT9P9juRM.crl (hash: xGmTg7C0TsjH4njTY+Jjti66KZJaXySj/NujZ15uV9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:74:96:56:72:19:fd:a5:31:82:cd:21:e7:43:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=8fb216d472e54be290a327e8851da4a4896e54f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:32:f8:1c:28:78:2e:6a:a8:4f:a7:82:a9:
0c:ca:0f:31:5e:92:9b:d5:39:09:87:93:c5:41:69:
4c:98:65:35:80:0b:58:81:35:7c:f5:ac:f1:15:c7:
8b:19:7f:47:76:9c:d1:9d:77:88:3c:14:86:3f:57:
cb:f6:55:07:d7:29:2d:88:5b:b4:27:a7:eb:86:65:
1e:9e:68:e6:fb:c9:d7:39:83:f6:d6:75:65:0b:f5:
f1:2b:75:dc:71:d0:c8:9e:9d:e1:a4:c4:1d:7e:55:
1d:51:24:11:7d:c6:04:57:b1:b4:ea:e2:09:d3:91:
65:91:8c:dc:3b:06:0d:9c:5e:e6:a6:3c:90:3e:f4:
de:63:49:a7:b2:0e:cd:c0:75:cb:91:de:07:8c:17:
32:ab:cd:2d:fe:ef:58:ee:7c:20:8e:ea:c7:5f:b5:
4a:c9:a2:b0:12:80:74:79:3f:f3:a9:c5:12:db:cf:
0b:37:04:32:11:34:6d:7c:f8:a7:8d:54:8a:9e:95:
3d:43:92:9d:fc:2e:d7:13:b8:b7:ed:6c:b4:66:5c:
d2:2d:1c:5a:78:42:1b:6c:8c:4a:04:1a:29:5c:e5:
6a:e3:ec:e3:59:75:6f:fc:4f:1a:27:4d:3d:0e:8e:
99:ed:72:cc:fa:c4:26:f0:66:25:bd:b3:d8:6d:8c:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B2:16:D4:72:E5:4B:E2:90:A3:27:E8:85:1D:A4:A4:89:6E:54:F7
X509v3 Authority Key Identifier:
keyid:83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d2:3a:5e:59:28:38:3f:be:b7:7a:95:c4:f8:29:2a:90:0d:
a9:91:36:1f:71:87:33:2f:5f:71:fa:5c:c4:ac:b1:1b:ae:e8:
11:1c:c4:d2:d1:e9:e8:76:cd:e1:52:e0:a8:77:7e:a7:a4:cb:
37:0a:86:fb:23:53:1d:8a:94:0a:14:39:0a:06:07:77:dc:ab:
1e:b9:8c:ba:49:74:30:7d:f8:47:c6:8f:b5:c8:30:f8:13:44:
ab:a8:74:cd:5b:a6:fc:95:55:31:fc:ea:12:aa:a1:fc:57:4b:
68:7b:8a:62:e0:62:f5:3d:03:e4:19:09:de:1e:2b:7f:44:6c:
71:30:25:39:b8:5e:3f:92:cf:96:6d:ae:5e:0e:ee:6f:15:8e:
cc:93:51:11:2c:7d:5e:0e:9e:a5:6f:61:d8:03:d2:23:ab:69:
d5:86:34:39:9e:43:fd:52:ea:af:27:b0:92:c8:63:4e:e5:5c:
22:73:cc:00:84:63:f0:08:a9:95:ab:8d:97:dc:2b:fd:0c:2d:
69:f2:f4:9c:61:37:ba:94:21:89:90:2a:b2:34:b7:9a:aa:10:
28:29:e5:95:05:02:f3:6b:aa:8b:bc:d5:db:4e:0c:fe:ad:6f:
04:08:48:0b:49:24:67:83:ca:dd:9e:da:e3:f6:14:4e:5d:ae:
03:98:4f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:12 2025 by rpki-client