Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
File: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft (raw, json)
Hash identifier: 9QYqXFKlL8ZGS8zf6Y+aZZwJ8DOiqxguklos4vrt8js=
Subject key identifier: 44:DA:8C:A2:38:F0:60:FB:20:C5:C5:B9:39:49:73:F0:F8:B8:1F:30
Authority key identifier: E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
Certificate issuer: /CN=e8d878aa53081893ba528524ef143ea9271392b8
Certificate serial: 0194BCA9FCBE5751C790CC653971AF1DB774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: 5sx0qR-B9y6mGDgRbtSLnw5KGsw.roa (hash: Nyr6wmMl755m5pBB7dzD6+3NgxbHjvOEn2wkeXz+Yqw=)
2: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl (hash: uc3O0Cph0ABKpdnxWY4Nu/ZIpUOMdA8bmx4g1fZiSJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fc:be:57:51:c7:90:cc:65:39:71:af:1d:b7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d878aa53081893ba528524ef143ea9271392b8
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=44da8ca238f060fb20c5c5b9394973f0f8b81f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:72:d9:ba:8d:15:fe:7a:dd:56:ad:8f:af:
d4:15:47:15:77:14:71:ac:bb:c9:18:46:80:6c:7d:
ae:83:1e:72:b8:6c:61:1c:4c:07:51:0e:a5:4a:e6:
1f:b8:98:38:ea:db:b0:9b:24:7b:0e:3a:a3:b3:4f:
91:93:e7:97:b8:f9:21:c9:50:d4:89:47:be:e8:5b:
1b:22:ee:47:9f:26:db:5c:52:56:9e:f1:d5:02:ad:
5c:04:9b:bf:79:a1:17:93:ea:57:3d:25:f4:89:75:
2c:65:a9:be:fe:19:d4:7f:6f:04:c3:10:fe:cd:7d:
7a:c0:c4:52:2c:99:6f:14:ca:8c:6e:03:d2:6a:96:
1f:60:6e:1e:2a:4d:2c:b9:9b:8a:44:47:e2:6f:71:
64:85:91:37:eb:51:51:a9:79:bc:94:46:0e:5e:1b:
bf:88:55:88:19:40:45:c6:2c:82:8d:29:10:9b:f2:
5a:61:28:74:e0:65:4a:21:16:88:02:9d:77:65:40:
c8:28:25:d5:97:55:06:09:81:e7:8e:d5:0e:cd:cf:
04:33:dd:ae:11:55:66:af:2b:b6:ff:5d:b1:5d:2d:
13:3c:ef:3a:c4:7c:57:a7:89:7a:29:eb:52:12:70:
26:e7:75:ed:e1:c1:a7:a4:c2:b9:c3:58:71:ea:68:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DA:8C:A2:38:F0:60:FB:20:C5:C5:B9:39:49:73:F0:F8:B8:1F:30
X509v3 Authority Key Identifier:
keyid:E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c2:9f:58:e5:46:2d:bb:c6:18:6a:a4:e0:d0:25:11:b7:9d:
6d:d6:9f:2b:55:1f:f2:09:f4:14:c9:f6:2e:d9:ef:4b:61:25:
05:e2:30:69:a3:e0:3a:76:11:67:03:65:7e:c3:02:da:2c:e8:
e6:20:0e:26:05:d6:cf:80:96:46:c0:75:dd:b7:71:b6:a1:1c:
dc:99:89:b8:39:ad:a0:e0:2a:4f:04:46:94:b0:7d:75:bf:bc:
58:18:a9:e3:8c:28:af:d3:ef:d9:42:f4:4e:f6:00:c8:f8:ed:
2c:23:16:95:ed:89:48:28:b1:3b:4e:bd:46:1f:9d:5d:64:62:
6a:c3:85:af:e9:0f:c2:da:c3:07:d2:c9:66:7f:00:8e:d0:e9:
e5:f3:88:cd:d8:cf:24:49:14:4d:4a:b2:c2:3b:e8:ff:f5:1f:
59:9d:62:ae:b7:0d:c1:51:ce:dd:0f:ed:12:5c:5a:13:25:b1:
40:a1:59:45:c0:20:33:7d:74:9b:14:ba:70:bc:07:6e:9a:7e:
04:12:67:a4:5a:2b:cc:1d:3f:dc:44:6f:35:0e:bd:e9:c8:81:
18:bd:54:49:e8:d2:8a:61:ee:39:9c:d4:bf:d6:4f:94:35:67:
64:3f:5c:07:a4:29:5f:54:31:77:ee:9f:17:39:7a:5b:b2:f4:
53:15:e2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:52:20 2025 by rpki-client