Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
File: 6z1v54fFBVOwcxcRLhnmW09nWTE.mft (raw, json)
Hash identifier: +qVrDMcHlSW3MXHckOdl1JjkSpaESdWg2TuzttMyJr0=
Subject key identifier: 6A:58:8D:3D:12:DA:CF:A6:88:0E:FB:F7:7C:2E:49:2F:18:80:AD:95
Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
Certificate issuer: /CN=eb3d6fe787c50553b07317112e19e65b4f675931
Certificate serial: 0194BC04CD273463808F9958C1AB9212B421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
Manifest number: 13ED
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: 6z1v54fFBVOwcxcRLhnmW09nWTE.crl (hash: nUbZJY/nQdUh95uNx4Ljx13HWywkd+hQ05C4hPtxLWE=)
2: jcrTKRLVafxbmhoPzjEKfBszAmk.roa (hash: dZzjw0X45T+if5mYD87H3+tKeMoeDlrA485y+6aDQxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cd:27:34:63:80:8f:99:58:c1:ab:92:12:b4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=6a588d3d12dacfa6880efbf77c2e492f1880ad95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:1e:35:94:75:33:ab:87:b8:e8:65:aa:47:
c7:48:cb:82:ea:c0:93:41:8f:55:ce:15:56:de:31:
97:f6:35:89:91:d8:9c:40:9c:bf:9e:ca:db:e1:73:
22:97:9f:f6:40:e0:d9:ef:4b:5a:38:4a:db:e0:1d:
38:e1:8e:e3:83:64:0f:e9:7e:0a:71:c1:6d:f3:71:
60:6d:5e:f3:83:dd:3f:95:b7:6f:09:b5:20:2a:1f:
3c:48:8b:a4:94:0b:45:fd:ad:fa:6e:41:c2:d1:3e:
46:f8:ff:c8:c5:b4:82:ec:08:5c:56:46:94:32:d3:
59:32:f8:f7:ea:85:17:c6:30:56:3b:8d:eb:fc:7e:
fb:42:a1:27:da:5a:ab:45:69:e5:b1:20:ba:c6:ad:
54:a0:69:87:2e:8f:2f:55:4c:54:00:ad:ed:32:82:
6b:33:e6:20:a4:8a:4a:10:64:3e:c1:af:f5:56:2f:
6b:e7:ba:4c:fe:7b:03:30:3a:53:57:73:2c:63:b9:
a5:82:7a:14:5d:0d:cd:fd:fb:fd:62:58:62:ea:51:
97:26:01:ea:4c:6c:db:36:9b:e2:ef:26:eb:6d:d4:
56:43:bd:54:ad:32:63:04:cd:a8:eb:ed:73:f8:42:
f3:b8:a3:b0:16:22:4b:94:b1:9c:54:83:f5:ef:41:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:58:8D:3D:12:DA:CF:A6:88:0E:FB:F7:7C:2E:49:2F:18:80:AD:95
X509v3 Authority Key Identifier:
keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cc:64:82:41:c9:78:24:fd:c1:df:55:fc:4b:9e:f9:8a:5e:
1f:c0:b1:27:70:ba:eb:1a:ee:3a:56:f5:60:d3:9c:46:7c:fc:
94:9d:c5:21:07:47:21:34:29:08:16:2a:5f:4f:8a:9a:41:d3:
24:79:58:ab:36:2d:a2:dd:21:4a:84:69:1b:5e:0e:2e:fa:22:
7f:f7:27:df:a8:4f:db:07:ba:d0:56:f7:94:86:6b:7a:28:9a:
b9:87:fb:11:6c:10:c7:c4:c9:e9:09:c8:88:5f:d6:af:83:9c:
0a:29:80:37:f1:ff:13:07:6c:cc:17:fc:79:7b:f0:67:ff:23:
d6:f9:16:54:ed:b9:b8:5d:1d:d0:67:16:25:04:21:06:4b:f8:
7c:ee:0f:04:dd:aa:71:2f:90:53:d6:2c:43:59:31:b2:c3:30:
ac:52:62:00:48:f6:47:91:3c:29:76:18:e6:86:2b:bb:a3:82:
7f:e0:48:c4:1b:1c:67:d2:b9:a9:70:79:c6:2a:25:f5:66:1a:
30:30:c4:1f:ec:be:cd:48:a4:3a:ce:1b:8d:a9:08:66:42:bd:
dd:20:9f:c5:07:37:fc:a4:c8:54:8c:89:66:c4:b2:33:88:0b:
70:e9:7c:fa:a5:e3:98:b3:cf:9d:cc:f9:f6:03:c7:cf:53:70:
be:ba:47:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:38 2025 by rpki-client