Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier: 4tsrS3iRDdaJy3DzcpVynxGcyXZPBr4WHw9KT8srMk4=
Subject key identifier: B8:72:22:22:16:96:E2:79:E9:2D:2B:F9:39:75:9F:36:FB:F6:04:72
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer: /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial: 0194BD4EAA2EFF7CE642247AEEB2685FE4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number: 0813
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: 7mibBoKPFUpDRWRZgo3YyeeDurnegDM3JiGvz37aGhk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:aa:2e:ff:7c:e6:42:24:7a:ee:b2:68:5f:e4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=b87222221696e279e92d2bf939759f36fbf60472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:c5:04:70:83:f4:5a:35:ee:f7:2c:ac:31:
8f:3b:2e:25:bb:43:86:ba:e4:54:45:00:ba:58:1e:
80:23:7d:cf:15:80:39:0f:fe:85:1d:ec:09:c4:7a:
2f:2e:dd:14:66:93:20:65:15:cc:1e:38:10:0a:ab:
9e:ca:8c:de:bb:95:41:5a:f3:94:6c:69:ee:ca:d3:
45:09:32:d2:3c:51:fa:40:50:2c:29:5a:a5:b4:36:
29:53:51:4a:3f:c9:ad:13:d5:2a:89:89:ba:5b:34:
aa:a7:23:e5:a9:3c:34:52:92:54:97:cc:89:2b:54:
cc:a1:32:3b:b8:07:d5:ac:f1:63:fc:53:5a:08:59:
e9:7c:18:ff:fe:ac:5b:31:e2:62:ab:d4:89:bb:c3:
f1:c7:90:67:cf:ac:17:34:0d:aa:10:26:62:c7:0f:
0e:bc:5c:26:ce:d2:33:e8:26:c7:e7:c7:96:a3:75:
66:a0:5a:ce:ac:7a:bd:4b:71:d9:10:c7:a9:fa:9b:
25:c2:f7:cb:5e:06:52:0a:60:e3:54:ba:29:91:86:
62:8c:ac:a9:13:45:59:13:41:58:39:be:b6:16:1e:
90:b6:34:01:70:f6:20:40:18:07:a0:1c:e3:d3:dd:
56:ea:20:6e:80:6f:fe:a6:dd:aa:b5:0e:62:5b:4d:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:72:22:22:16:96:E2:79:E9:2D:2B:F9:39:75:9F:36:FB:F6:04:72
X509v3 Authority Key Identifier:
keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1d:08:a7:3b:26:57:5d:e7:5f:d6:d1:d4:8c:b0:50:d1:e8:
6e:6e:4a:39:f4:df:ac:34:5c:15:57:9d:6a:94:98:f2:4e:db:
b0:5d:9b:c4:21:a3:30:1d:a4:5b:91:61:d0:40:6a:ef:2f:48:
bc:a0:82:01:77:ce:4b:3a:8c:9b:ef:f2:04:fc:9d:ee:ea:5c:
f9:cd:5d:c6:64:42:a6:20:54:bc:67:db:5e:bb:87:7a:d3:c2:
b6:a8:14:6e:f2:6a:71:2f:a1:a8:97:41:36:26:4e:c9:3b:5a:
76:6d:15:41:b6:e9:4a:ad:e3:f9:09:05:d9:b8:bf:56:82:57:
6f:c0:86:6e:b6:2d:c2:a8:b7:7d:fa:93:59:5d:22:db:9c:a0:
ef:f9:fd:84:19:56:5a:aa:cb:fe:1b:7a:4c:c2:77:3d:78:59:
06:67:07:31:d8:53:0c:75:2b:d6:5d:05:84:f7:80:3e:8a:b6:
f9:4f:60:a0:3e:15:e9:f3:7f:69:83:95:be:27:34:60:5c:62:
d2:a6:76:69:b0:22:0f:08:9e:05:93:96:25:9f:90:3b:a2:1f:
e7:8e:6c:45:d2:c8:4e:5c:6b:5b:4e:86:a4:ca:ac:e1:21:54:
8e:88:b2:2e:e9:1e:ff:c2:b8:2a:4f:63:6c:17:01:41:e3:e5:
ac:18:c4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:52:41 2025 by rpki-client