Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: 2NSIoTKPPCfRSTDkVghAynQ+QzEfN1CgtxovGjK/NPU=
Subject key identifier: E4:22:BE:4C:ED:90:AD:0F:42:28:E5:AB:F9:6E:98:05:15:E5:4E:BC
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 0194BCE06675138FF8CFA32ADDF49EAAAC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 0D81
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: RTkADVW/wRG2Gzrf0miQMWZodwqA+va9X/MOj/Lj8BA=)
2: dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa (hash: hqOsy5iRYOF259KVMk0QtmelCMMCDmkaOIHQ2ucYLWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:66:75:13:8f:f8:cf:a3:2a:dd:f4:9e:aa:ac:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=e422be4ced90ad0f4228e5abf96e980515e54ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:ea:3a:39:ed:2a:db:af:05:b2:f7:52:5a:
fe:21:96:5b:34:28:c2:31:3e:c7:79:79:b8:6e:bc:
17:01:e4:89:f5:0a:69:09:91:f9:38:e7:e7:2f:f7:
8c:5c:b3:36:3a:f7:73:eb:02:fa:9b:95:c8:26:c7:
bf:f7:73:ad:e9:25:bf:a2:96:bb:f2:f7:9c:20:5f:
c5:dc:3d:1a:fa:41:c4:ff:bb:17:b2:6b:19:01:1a:
71:6e:7c:13:24:08:43:2c:9b:fe:f3:17:bb:75:99:
cc:01:d6:fd:7f:de:6e:13:5c:a4:bf:2c:bd:cc:9f:
ff:e1:3f:44:b1:37:6c:aa:41:29:c3:99:d9:6e:a2:
da:b4:01:28:6d:20:eb:8a:1c:e7:9d:45:2f:da:b0:
ac:c5:ca:74:39:65:69:db:a0:e9:0b:73:82:e3:21:
b2:a1:f2:e8:ed:18:6c:67:b0:9d:b2:24:78:3c:ce:
ec:aa:d6:6e:46:9a:00:c9:99:c5:ba:74:9a:6b:ef:
3a:88:79:43:26:cf:65:16:75:12:3b:8a:3e:7b:65:
47:fc:f4:85:33:f5:e9:05:5f:68:56:6f:25:3a:a2:
30:6c:38:8a:e1:d9:c1:ea:92:42:27:bc:e3:9a:84:
99:80:74:61:cb:a7:05:fc:fc:9b:9b:18:ab:d5:70:
63:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:22:BE:4C:ED:90:AD:0F:42:28:E5:AB:F9:6E:98:05:15:E5:4E:BC
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:81:97:01:3d:14:7e:16:70:f4:f8:ac:41:93:d5:2a:64:6e:
d7:20:3f:84:93:ef:6b:9d:b7:0c:aa:72:59:53:30:07:83:0c:
12:e5:dd:45:7e:8f:9f:61:b2:77:b0:2e:b7:43:fd:ee:aa:d8:
22:3f:93:56:93:51:aa:3b:a8:81:1b:03:64:3b:f2:fa:e2:24:
72:b0:a6:3e:55:6e:38:90:96:d6:06:1d:cc:56:32:8d:65:19:
ed:d2:3e:a1:0c:ef:21:04:60:b0:c4:7c:04:47:9f:59:44:fc:
e1:f5:da:a7:99:84:4d:c1:87:4b:47:1b:9c:2f:a4:cc:d4:94:
88:f6:5f:da:a1:08:5a:6d:d3:fb:b4:9e:de:96:0d:09:3d:da:
c3:b8:37:42:49:cf:83:13:95:a8:34:10:0b:60:ea:2d:41:fe:
73:4c:a2:5e:1e:40:cb:3a:60:ee:ea:9d:2e:8d:a7:d8:ad:77:
6d:99:b9:33:6b:fd:a8:bc:b5:90:b3:e5:cb:7d:40:a2:d1:89:
4a:db:66:14:2d:bd:7e:e7:35:27:cc:8b:84:57:9b:1a:6d:e9:
1f:55:1c:5e:c2:38:8b:75:53:ad:20:39:5e:86:db:03:6c:1b:
08:33:85:f0:16:4f:5b:d5:04:2e:c4:7f:97:37:ae:29:45:d4:
8a:b9:b0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:18 2025 by rpki-client