
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
File: a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft (raw, json)
Hash identifier: lXgk/43MRTVoigreSGsA7h+xjdJqmHFSl5H3ANjBC5I=
Subject key identifier: 67:EC:B5:58:47:03:AC:4D:7B:68:27:47:FC:88:29:91:C4:F2:48:FC
Authority key identifier: 6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB
Certificate issuer: /CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb
Certificate serial: 0194BBCE5D542E53C246918B53868589DEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
Manifest number: 2F
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl (hash: +Wovyt9D+hPi5sCJL42kwrLWJ6F27XoNnfGBZeahD9U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5d:54:2e:53:c2:46:91:8b:53:86:85:89:de:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=67ecb5584703ac4d7b682747fc882991c4f248fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:8f:41:6e:95:08:16:ca:7d:ec:e2:b7:7c:
9b:44:65:80:8c:5e:af:2c:4a:a6:00:1f:75:03:40:
d1:a3:44:d3:7c:bc:bf:2b:b9:7a:e3:bd:61:af:18:
70:6c:d0:f2:2a:e4:e9:80:db:81:b5:a8:f5:a8:85:
8a:58:64:78:18:64:a6:a0:97:68:67:09:1f:c4:cf:
93:0c:0c:8f:fa:c1:a5:d0:54:4f:7e:d4:f5:08:b6:
91:eb:23:d0:41:64:42:07:5e:8a:9a:0b:d7:55:f6:
25:23:8c:29:67:a4:d1:f4:2f:4f:a3:1f:3b:da:1a:
d9:0d:40:1e:93:69:ce:c5:99:cf:d5:4e:c9:16:b8:
ee:10:27:de:80:4b:78:3b:b4:f8:06:4a:e7:4c:19:
2e:fc:75:9e:69:cc:97:82:c0:27:61:d0:c3:20:50:
2c:ee:6b:ad:8a:13:b5:75:7b:23:06:f4:be:e2:d4:
0b:47:70:a7:76:7c:ec:5a:d6:48:a5:e8:a3:64:90:
37:27:0c:0c:78:c5:4c:90:c9:19:d7:93:c7:a2:9c:
72:c4:4c:4e:15:0f:39:a5:3e:f7:48:24:9a:ca:31:
dc:cd:48:cf:7f:d3:62:19:d6:9c:b4:6c:80:fe:d2:
e5:87:89:9c:f8:25:29:cd:48:72:00:7e:0a:53:00:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EC:B5:58:47:03:AC:4D:7B:68:27:47:FC:88:29:91:C4:F2:48:FC
X509v3 Authority Key Identifier:
keyid:6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d2:e7:f4:97:f2:91:b4:7e:d7:36:5e:37:5a:5e:bb:a9:bf:
80:fe:50:35:6d:f7:7d:31:ce:73:a8:47:1a:fc:70:a0:fb:7a:
53:c5:8c:63:90:eb:96:cf:30:77:7a:93:af:5f:aa:ff:78:5c:
db:8c:b7:92:e0:ef:e1:af:50:bd:e1:3c:39:df:39:8e:38:47:
d8:2d:e9:6b:97:4c:20:fb:27:c0:92:f5:c5:e7:ab:02:8e:7d:
61:d4:88:51:1d:a9:de:df:e8:26:d4:d8:10:2f:c1:77:f8:a1:
2c:08:e0:45:e9:95:67:d6:3b:df:e9:1c:3d:da:e9:e7:e7:c3:
bc:cf:51:ab:a1:7c:f5:88:2d:26:9c:0c:a5:35:c0:e8:bd:b9:
fb:0f:b9:cc:d2:05:c6:36:04:62:8e:6a:5c:57:81:88:4e:41:
f7:26:bd:a1:f5:4b:7a:b7:d3:b3:1d:28:44:67:a8:5b:8d:59:
01:76:aa:36:80:88:23:f5:83:b4:a2:ce:d0:42:96:11:8c:96:
70:68:56:5e:fc:a1:33:73:b7:33:84:71:67:28:c2:c7:1e:1c:
31:f4:dc:8a:af:a5:17:35:1b:36:aa:1b:8b:49:e9:a4:06:f7:
b9:a6:8c:af:cb:47:63:56:5f:5d:bd:a9:51:ed:34:17:96:da:
0e:55:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:08:10 2025 by rpki-client