Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
File: 6w649Uh9dBqMxtbfOzkhke0-7T8.mft (raw, json)
Hash identifier: Obr3t4rPBQnFpJP0k8MoZPDjsCwsnTJpyd2HY8R5QvE=
Subject key identifier: A6:EA:33:EA:A8:DF:83:5D:9D:48:64:7B:E4:2C:53:E8:B7:78:62:9D
Authority key identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
Certificate issuer: /CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Certificate serial: 0194BC0515A89BB04EF6E2E574D749DCDE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
Manifest number: 09D6
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: 6w649Uh9dBqMxtbfOzkhke0-7T8.crl (hash: vagpI2mJWULXR6WvzGc08FTwKmWNwe2dKrePkLyPwvc=)
2: aNZ_w4ct0s6F9JNwvU81Pvph6xA.roa (hash: DMpkzc/SEQWOGXDtkCkwGEzbNT7zz+eYHoA6cnEiN1w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:15:a8:9b:b0:4e:f6:e2:e5:74:d7:49:dc:de:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=a6ea33eaa8df835d9d48647be42c53e8b778629d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:20:a1:b6:2f:d2:2a:bd:17:5d:8e:d0:94:
6d:04:44:d9:1c:19:0b:5f:6b:f0:0d:11:6c:4a:45:
e0:79:47:34:df:53:98:f8:41:37:51:11:f1:a4:d7:
60:bb:2a:d6:8a:db:4e:af:97:e5:2d:b7:f2:35:a6:
5c:19:73:39:b8:e2:2d:e7:35:19:e2:cd:1d:6a:0a:
65:5b:b9:fd:69:42:8d:42:b7:44:50:49:64:2e:73:
18:16:2c:bf:e6:cf:20:ad:f2:7e:85:27:23:cb:e6:
4d:a7:76:3e:91:89:13:a0:30:bf:88:da:7a:c6:28:
0c:ba:bf:c3:08:db:cc:ac:25:aa:be:b0:3f:30:28:
bc:85:08:5c:b1:6d:74:2c:77:43:10:82:ad:bd:c5:
03:d0:2b:d8:3e:cc:e9:81:12:00:98:07:57:cd:38:
fa:b4:26:34:65:18:cd:fb:32:fb:4b:67:96:23:13:
76:c8:c2:85:aa:1a:db:c2:54:e2:e6:77:38:b0:88:
73:53:50:72:46:4b:d8:2d:b0:cb:5c:57:47:bd:cd:
b8:a3:b9:96:89:09:56:08:1a:92:a9:4e:cc:6b:7b:
8c:91:1a:9d:18:f6:f0:59:9a:5c:8c:3c:de:2b:f8:
e4:b5:73:3d:0d:7d:cf:34:f6:94:b1:ee:25:56:d4:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EA:33:EA:A8:DF:83:5D:9D:48:64:7B:E4:2C:53:E8:B7:78:62:9D
X509v3 Authority Key Identifier:
keyid:EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:70:66:ed:c9:aa:c5:79:6f:53:b4:e3:46:32:0f:e8:b3:90:
7c:ee:3f:c8:ec:94:82:0d:c8:49:9f:95:54:b8:81:33:04:04:
af:4d:38:7e:9e:81:c4:89:ed:82:03:a0:41:3a:14:0e:af:f6:
df:14:5a:1c:32:5d:34:53:c0:b7:44:ae:aa:1d:e9:f3:09:3a:
2a:bd:15:5d:71:40:19:76:96:81:dc:e1:bd:9b:34:a3:de:00:
63:08:bd:a0:96:3e:1d:e4:c9:41:4e:f3:fd:ac:92:fc:4b:f7:
83:98:e6:7d:f7:16:da:41:84:bb:32:c0:7a:d3:a6:41:c1:01:
99:6b:d0:2c:21:6f:f2:a5:a3:a7:c8:1d:e4:25:22:94:d4:e2:
17:2c:70:83:69:12:85:37:55:1a:0c:c7:b3:08:3b:33:94:7d:
b4:eb:93:86:a9:94:84:82:c1:07:08:2d:6e:a2:f4:d0:f9:cb:
69:67:87:0b:60:c4:ab:58:e1:18:f8:0e:ed:36:c0:7c:be:8e:
11:08:47:9f:9f:cf:68:f9:84:fd:5b:12:0b:30:f5:81:02:a7:
37:6a:b2:09:f7:e1:f9:45:f9:2a:fb:b1:7b:83:68:38:08:79:
dc:2b:85:f5:06:c6:29:8d:5a:ac:bc:e3:35:0e:b5:a8:40:c2:
8f:e6:75:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:10 2025 by rpki-client