Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier: 8hf0k0ByiRzMZGuMmtAol5oqKUEXspAZ3VnK9/SXr18=
Subject key identifier: 1D:40:DD:D4:4E:07:4A:3D:A0:D6:18:7C:41:EF:05:25:52:23:F1:AB
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 0194BC72C0854810AB30B749858614657946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: 1a8q1DAnIWhHDhxH0xrnqk6Bi7B7lJf7PlZStBH9FVE=)
2: GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa (hash: vbPhg+vd0Vmphw6uDH8Qj3C//m4qsvwfSx93uUcGgb8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c0:85:48:10:ab:30:b7:49:85:86:14:65:79:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=1d40ddd44e074a3da0d6187c41ef05255223f1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:b7:9c:56:9a:fd:64:c7:85:98:36:0b:9d:
29:82:24:ab:cd:ed:5a:31:c2:08:ba:db:30:2a:b5:
7d:78:6b:7d:23:bd:bc:30:eb:6e:e0:55:f0:dc:9b:
8f:c8:ca:18:fc:1f:b2:e1:5d:ed:f0:02:3c:9c:ee:
01:f8:b2:cd:a4:97:5a:a4:4f:55:cf:10:63:e6:4d:
1d:ce:f9:80:83:fc:e5:ff:1f:7a:d8:10:a1:07:fb:
cd:03:e5:14:7b:c2:84:fa:8f:17:fa:76:64:1a:cd:
04:70:8d:68:2e:5a:13:1f:ce:85:e8:9f:bd:3e:31:
47:4d:b7:8c:44:96:3c:11:51:32:85:84:49:ea:2d:
13:fc:99:84:2c:96:49:f6:42:3f:60:c2:e0:a1:d4:
96:39:53:cb:f5:0f:8c:c4:9c:c8:5b:46:2c:64:33:
56:07:44:ea:59:61:d9:22:c5:3f:48:fe:eb:a5:50:
86:77:23:65:6c:1a:74:20:68:7d:4e:8a:d0:61:d5:
8a:62:ea:d0:0d:10:4d:d0:40:e3:34:a6:2d:89:9f:
e0:1b:d2:24:2a:23:d4:29:43:96:c7:2e:0c:0b:84:
1c:c3:ac:51:9c:b3:9f:b0:e7:94:14:3f:21:e1:cd:
eb:4e:2a:af:f0:fb:34:5c:33:9f:2d:31:c4:0b:30:
fa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:40:DD:D4:4E:07:4A:3D:A0:D6:18:7C:41:EF:05:25:52:23:F1:AB
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8a:b4:7d:cb:3e:b7:d8:c8:d8:16:75:62:14:a7:93:fd:c9:
ac:07:43:2d:68:4b:83:bb:85:9e:42:ed:58:0b:7e:aa:29:3f:
82:9d:91:dd:e9:77:29:5e:03:f3:05:49:01:e1:eb:48:76:b3:
78:11:8d:ce:2f:76:f6:23:d2:4b:06:39:5a:e7:09:ec:33:42:
5e:11:01:34:38:1a:37:4c:7c:65:e4:42:72:61:0d:08:ee:0f:
33:e3:5b:5c:e4:e3:3b:25:0b:45:f6:20:53:77:23:bd:d2:79:
d4:8f:a8:63:0f:52:fe:d5:36:07:57:cf:f0:5c:15:2c:bd:f7:
55:7f:26:0d:62:35:ef:6c:35:cd:93:81:28:13:d2:e5:a2:be:
ae:55:80:68:df:c3:ad:12:15:bd:7e:10:71:01:d8:e7:49:d7:
4d:c2:b4:2b:0e:e2:0e:37:0e:10:8d:a6:23:f5:8d:c4:7b:df:
33:b5:04:38:9d:93:db:80:a2:53:94:32:6e:76:de:23:44:64:
ed:df:08:02:07:b3:fb:39:1e:a2:3b:64:f5:79:17:6f:53:67:
18:77:a0:f4:e2:8f:19:2f:c7:6a:96:7d:23:da:61:c9:73:7c:
55:ae:fe:1d:88:f9:88:f3:3d:45:a3:67:27:3e:f0:11:a6:79:
5c:22:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:35 2025 by rpki-client