Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
File: 6A7DFjX02RuxExK6CjRlwY8jP2g.mft (raw, json)
Hash identifier: Ef9au/RGat5bj69Sd/C8BETHr/1hSNQwBI6KcdM90SI=
Subject key identifier: 5E:6D:79:5F:41:D0:20:49:CC:9A:C9:7E:A0:D9:07:9B:87:FB:58:95
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Certificate issuer: /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial: 0194BBCDAFB60424C958AC99ACC2A0721A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
Manifest number: 03AA
Signing time: Fri 31 Jan 2025 10:00:06 +0000
Manifest this update: Fri 31 Jan 2025 10:00:06 +0000
Manifest next update: Sat 01 Feb 2025 10:00:06 +0000
Files and hashes: 1: 6A7DFjX02RuxExK6CjRlwY8jP2g.crl (hash: aweMYnKZ7dwHXJyNWf1d4jQ5JKuQdiSOwnU2ggLHqL8=)
2: jmdaY3jB9wAV5m6viUDXvKemdCo.roa (hash: KjRHU7c80LizE/Q/1z0ur21E4KmnhATUY3o4TcjtpmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:af:b6:04:24:c9:58:ac:99:ac:c2:a0:72:1a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Validity
Not Before: Jan 31 10:00:06 2025 GMT
Not After : Feb 1 10:00:06 2025 GMT
Subject: CN=5e6d795f41d02049cc9ac97ea0d9079b87fb5895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ef:95:1f:3e:31:c5:df:4f:88:9c:37:ad:37:
b4:37:36:85:5a:8d:8f:00:c6:e2:ac:8d:b9:3e:7e:
b3:6d:bf:c5:74:d4:01:c9:59:93:67:ae:4a:45:ae:
76:1c:85:e8:8a:90:bb:fe:21:14:54:ae:a9:00:43:
3d:71:4a:d1:f2:af:46:ce:7c:63:45:4c:24:38:fb:
e2:b9:34:80:84:d9:54:ed:73:6a:cd:6a:5c:8c:a9:
b5:99:f8:25:3d:d1:52:53:8d:ba:5f:86:bd:dd:84:
f4:8b:a3:15:3a:5a:2b:40:3a:99:5a:00:1f:99:c2:
a7:af:4b:62:bd:07:06:70:85:34:13:01:6b:a9:17:
c7:ad:88:ef:55:91:e0:72:11:c6:11:f1:01:9e:85:
23:34:02:53:15:44:1a:84:ed:dc:95:b6:0a:8f:68:
29:48:7f:7f:50:c3:eb:e0:df:e7:ba:16:27:d9:4d:
bb:bc:51:b3:81:fd:c1:a6:4a:65:85:12:e1:f0:66:
05:b2:8d:bb:0d:14:01:72:24:83:8b:b5:bd:2b:a7:
4f:81:8b:85:c1:be:71:43:28:b3:a1:08:92:61:ca:
1c:f3:23:e9:2a:16:be:1e:f3:26:0f:d9:11:14:4e:
01:1c:e5:ab:20:8e:ba:b7:c9:a4:b2:7a:8d:a8:0d:
00:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6D:79:5F:41:D0:20:49:CC:9A:C9:7E:A0:D9:07:9B:87:FB:58:95
X509v3 Authority Key Identifier:
keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:55:24:4a:c9:bc:51:45:b7:d0:ad:09:04:95:68:87:92:9e:
34:04:e6:ab:12:9e:76:97:46:6f:e0:3f:87:2d:9a:9d:69:77:
5a:a3:e5:7f:9d:40:e3:ae:be:d3:92:c2:ad:e9:18:2e:c9:3b:
62:e1:f3:a8:87:e6:d5:7e:f2:b2:17:13:62:e7:45:1a:01:ad:
32:47:84:d7:84:61:4f:8f:59:44:f1:72:52:87:b3:bb:3b:36:
bc:28:61:1f:a6:da:94:5b:37:e1:95:e5:d4:f6:2d:b3:78:7c:
ca:04:4c:28:be:94:a7:68:b8:c7:09:db:d6:d3:1c:bc:ae:5b:
06:7a:22:f6:f8:be:f5:15:c0:0a:fb:4e:21:dc:9b:90:79:59:
64:86:96:99:cc:65:af:ce:c0:ec:f0:d6:79:39:af:48:3e:42:
a2:24:24:1e:17:2e:5c:4b:4d:24:dd:40:44:6b:20:7a:e1:01:
e0:ab:0a:40:0a:dc:5e:ce:62:89:ce:c3:9b:7c:60:94:be:82:
17:cd:5b:07:1d:97:db:41:16:3c:78:c5:8b:a3:0f:03:9d:d5:
2b:72:f5:a9:0a:2e:b3:5a:33:75:cf:aa:8b:9c:74:6f:ee:cd:
64:de:1f:17:50:61:c4:75:5a:e4:e9:a7:e3:17:63:ee:bd:f6:
de:bd:f1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:34 2025 by rpki-client