Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
File: 6CLYReFTmSp46PRFIyZNJhSxe50.mft (raw, json)
Hash identifier: L0BTw8FLiQmlIDdXzVDpq9cX0pFjhEgXVeuhPgpqF7c=
Subject key identifier: 5C:57:F1:F1:E9:52:F0:EE:30:1C:92:B9:63:14:8F:8E:FD:49:CF:D6
Authority key identifier: E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D
Certificate issuer: /CN=e822d845e153992a78e8f44523264d2614b17b9d
Certificate serial: 0194BC72D7F1BA1A9C38E58A55DB9A2BD2A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
Manifest number: 03BE
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: 6CLYReFTmSp46PRFIyZNJhSxe50.crl (hash: hgVVJYwqBce/ATbaX3nRl0UtW0622J6caAFzW/qA2ws=)
2: NrP9uVOG8JxmljrRA9jacDcwwRc.roa (hash: nKnCnSio2sSeTPjnfevfS2WmGBPVR4DQnEDI2/By7Kw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d7:f1:ba:1a:9c:38:e5:8a:55:db:9a:2b:d2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e822d845e153992a78e8f44523264d2614b17b9d
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=5c57f1f1e952f0ee301c92b963148f8efd49cfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:26:92:63:ca:06:f5:7f:60:8e:e6:51:b6:
a5:1f:00:52:78:66:62:9b:92:e6:e1:53:a0:2f:16:
db:1a:4c:98:f1:40:79:7e:c8:41:8d:d5:d9:9b:f9:
11:7f:c4:62:0b:42:2f:77:5d:4d:ca:1e:c2:25:79:
f4:22:e8:8e:a1:0c:8d:29:8a:f2:59:b7:88:10:bc:
f6:bb:85:3b:0c:b1:64:d4:57:07:b0:09:44:79:d3:
d1:79:78:c3:41:1d:ec:a0:20:c7:e7:64:73:f6:cf:
70:17:c3:9b:4a:ac:b1:96:65:9f:5c:ab:0c:33:91:
f6:05:21:a4:0e:b2:46:64:14:63:9d:7c:1a:55:31:
c0:f3:fe:1c:1a:21:26:70:cc:10:cb:95:b1:64:d5:
67:c8:93:4a:8d:81:57:37:fc:36:e3:75:c0:7a:ae:
47:61:af:af:95:e6:cc:de:d0:7e:8f:9a:2b:63:67:
7f:8f:68:2d:3a:81:1b:e5:d2:5b:0d:46:67:2e:25:
fe:73:e6:c6:d5:62:ee:5a:db:d6:7e:0d:6a:90:4b:
6c:d8:f2:10:23:eb:9a:0f:a0:e7:aa:71:29:91:10:
06:ef:db:d8:7a:f3:1b:28:5a:0d:91:ac:ec:1b:27:
5b:78:91:88:a5:82:37:c0:0c:a9:cc:37:15:76:dc:
1a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:57:F1:F1:E9:52:F0:EE:30:1C:92:B9:63:14:8F:8E:FD:49:CF:D6
X509v3 Authority Key Identifier:
keyid:E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ee:14:7d:4e:6c:96:fa:98:c6:22:0e:f0:32:01:e9:22:45:
67:7c:55:24:3c:cc:e9:7b:a9:10:b7:01:0d:0c:43:f2:14:ff:
cf:63:e9:41:b3:da:6e:4a:0d:ee:a9:86:d1:dd:be:dd:88:4a:
e2:60:59:2a:8a:16:40:75:eb:7b:47:40:5e:e2:09:cf:e2:13:
ce:46:bd:17:df:3c:1e:da:4f:56:4d:7d:95:23:ea:55:db:e2:
32:ed:4d:91:91:bf:a6:df:27:fb:92:7a:d0:53:2d:6e:3a:5f:
72:6a:33:10:20:80:3d:e0:4f:5c:4b:f4:d4:9c:70:4e:60:47:
02:41:d1:d8:16:5c:d9:a7:03:ce:b5:ef:7a:f9:8f:eb:7b:6b:
2a:29:13:1a:aa:5b:c3:e0:b3:18:90:aa:aa:88:84:f1:85:37:
72:a2:19:f9:b9:66:7f:65:df:31:5b:74:3f:fd:93:b5:fa:5f:
d4:6f:fb:02:5c:c4:25:be:5d:d9:1a:db:dd:78:81:61:24:db:
5c:59:cc:76:4e:4c:45:4e:7b:eb:01:20:e8:30:9a:05:db:54:
2e:e0:67:db:df:7f:5a:03:a3:38:cd:d9:19:a6:8c:dd:cc:39:
79:92:a5:8a:dd:53:66:9a:95:a5:ea:11:69:5a:00:e4:46:fb:
50:b1:ff:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:36 2025 by rpki-client