Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File: p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier: s0vZg/NFQvA3cK+rBDFdGyw8SB2U/5C0f3FpqDpdF9Q=
Subject key identifier: 46:53:D4:E8:5B:4F:56:F0:BC:06:DF:7E:0F:EF:A8:1D:9B:1E:8D:14
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer: /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial: 0194BBCDCE3EE05A4776B66E2EB38E79075B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number: 0891
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: t6i3pCrfy2qZu7sUWeFKvAPCLIqhD0zRN15R3JmYckU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ce:3e:e0:5a:47:76:b6:6e:2e:b3:8e:79:07:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=4653d4e85b4f56f0bc06df7e0fefa81d9b1e8d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:7c:88:d9:ed:ae:54:fc:1f:5e:03:ef:13:
87:cc:4c:9b:93:98:03:f5:a3:e8:c1:9e:56:4b:b6:
64:74:1b:fd:db:e1:72:69:e9:a1:6b:d1:b6:50:cd:
13:d0:49:92:95:a3:3c:a6:f9:f1:e3:3a:cf:8f:49:
39:e1:92:a1:4d:6e:eb:e4:d7:94:47:04:e0:3b:56:
e1:35:60:5c:28:fd:57:76:ab:12:62:1c:c7:7e:3a:
86:5e:bc:1f:e5:0c:b6:47:9c:bd:33:50:f7:c5:d5:
be:1f:c7:42:3d:1b:87:3d:96:33:6a:2c:b7:7c:bf:
dd:01:d6:3d:7b:31:d5:52:38:3e:5d:b4:51:ec:b6:
d0:bc:e3:86:2e:14:e1:e2:53:93:7a:a5:66:38:53:
ac:19:84:c0:59:20:a3:6d:fb:41:e8:45:29:db:85:
ef:37:60:87:e2:a0:a5:a6:ab:7a:61:dc:0a:79:a9:
65:99:24:e2:1d:c2:35:9e:29:07:42:aa:9c:8d:58:
3a:61:56:86:99:7f:7f:e1:cf:fc:06:90:b8:c9:ce:
4b:d5:ef:5e:41:59:85:e5:df:2d:93:d4:4c:ab:e1:
d6:2c:99:bd:28:17:b2:d3:34:b8:49:2f:82:b6:36:
69:d3:6a:28:77:7b:67:31:0c:3b:a9:10:d7:ce:11:
f1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:53:D4:E8:5B:4F:56:F0:BC:06:DF:7E:0F:EF:A8:1D:9B:1E:8D:14
X509v3 Authority Key Identifier:
keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f8:a0:8b:75:69:ca:a1:5b:08:11:60:3d:42:e9:e9:a5:c2:
3f:58:bf:c4:5f:8d:e6:e3:06:de:67:ae:d2:6e:2f:69:4b:57:
ab:7f:20:e0:5e:e9:f5:13:06:a2:80:84:22:45:2e:61:77:03:
23:14:97:9a:2e:97:f2:af:57:3c:39:ce:ae:08:4f:b0:38:ea:
28:cb:ad:8c:29:58:c0:22:ad:6f:07:83:4d:10:8b:d3:f3:0f:
c9:8f:3e:2b:4a:ec:82:bc:bd:ec:8a:f6:00:49:c8:e8:e0:fe:
38:5d:dc:d0:9c:59:e3:43:70:e1:c7:e6:a3:f8:ad:e2:2e:4c:
f1:a3:ed:ad:82:87:4c:11:95:3d:a8:df:0d:7a:a3:88:7c:07:
a6:9c:ab:0b:d4:09:16:25:c2:00:7f:b8:ca:9e:38:ff:b3:8c:
8c:0b:88:48:c2:68:88:50:72:16:58:1d:a7:8c:4e:2a:c2:5a:
e5:ca:c9:b8:8b:22:09:c7:9e:1c:dd:02:54:6e:c8:62:f6:21:
4e:5e:4b:cd:97:a2:ce:e0:f9:fa:ca:bd:4a:82:67:91:11:e2:
a5:8d:5b:e5:e8:43:2c:b7:5c:f9:35:44:df:72:09:59:64:dd:
52:d5:73:1a:3f:59:96:30:74:1f:4e:57:55:0e:61:88:3f:c2:
f4:4f:5a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:28 2025 by rpki-client