
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File: 6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier: LaTJFGHlgp+CXgPGpN/LX0zKfoDXmzjxgecsrO9BEg8=
Subject key identifier: F1:B3:B5:33:5B:51:F3:BE:07:C9:32:20:F0:BC:42:68:D9:C6:33:1F
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer: /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial: 0194BBCDC710DA344D03DD52795E356F7EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number: 04B1
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: a3S2354lR9OJtsOX1XgbyTXvDqaURtV7t7gAqhIDmc8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c7:10:da:34:4d:03:dd:52:79:5e:35:6f:7e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=f1b3b5335b51f3be07c93220f0bc4268d9c6331f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:3d:1b:fc:7a:36:43:3f:68:86:bc:49:4c:
23:36:42:34:08:a3:9d:bb:83:8d:d9:e0:d1:5c:2f:
91:c0:ca:17:47:8e:41:08:5b:f6:2f:fa:5c:7c:11:
e6:fb:24:fa:f5:8e:fa:44:d8:a5:59:68:f1:5f:ab:
0a:15:dc:8f:cb:ff:c8:bc:b3:21:0a:f8:6c:59:95:
0d:eb:68:10:49:e7:9d:40:fc:25:be:21:40:41:e2:
f1:0f:3c:76:37:c3:07:00:a9:25:61:80:5e:3a:e1:
d3:60:79:fd:83:01:d6:41:ed:eb:92:4f:76:25:cf:
be:4e:8b:5a:6f:07:a7:89:6f:ea:61:fe:4b:90:3a:
ef:69:32:87:a1:21:75:68:41:63:90:0a:41:62:eb:
3f:58:2a:2b:04:8e:8f:9c:98:32:0c:a8:04:b2:5c:
8c:86:4d:c8:81:ed:b0:c1:8f:51:d0:89:1c:48:a1:
c3:a8:d7:52:81:b0:b5:6b:84:05:c6:69:03:e1:54:
26:12:56:3f:bb:04:56:1a:83:aa:2a:ca:15:1a:41:
34:f5:87:8d:b9:29:e0:4d:d9:98:63:50:60:74:01:
53:27:e8:98:6e:6c:74:70:84:a1:6b:14:c2:4a:22:
13:13:11:34:6c:32:d1:f8:26:f7:3b:85:45:d9:56:
a3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B3:B5:33:5B:51:F3:BE:07:C9:32:20:F0:BC:42:68:D9:C6:33:1F
X509v3 Authority Key Identifier:
keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a8:2c:dd:bc:fb:df:e9:62:52:1d:aa:b9:02:3a:ce:29:80:
f6:10:8e:8c:8b:75:8d:d0:3c:fb:d9:a1:56:e4:eb:82:03:eb:
90:ac:7f:61:4d:b4:23:64:ec:93:ca:f0:81:8a:fd:b5:71:1f:
24:e7:e3:05:97:44:cc:62:57:a7:e5:f2:48:e3:71:ad:18:d6:
8a:bb:a9:61:88:16:f2:3f:e1:49:62:b3:18:d2:f4:82:52:d8:
d8:93:91:f4:54:e5:6d:db:6a:3e:3d:0c:63:e9:41:2e:e7:3a:
49:da:f2:4e:d6:2f:34:90:2e:c4:96:da:fe:7a:49:14:e0:dd:
3d:2f:74:9b:25:0c:7b:a1:e2:65:db:5c:0d:d2:04:b8:7b:8a:
d9:ad:08:c9:b2:4c:92:31:0e:76:ff:51:ad:93:d9:b2:0d:7a:
24:26:a5:73:86:03:38:9a:a3:35:50:48:90:e4:5a:2d:c3:b0:
dc:0b:88:ed:ee:e7:b1:bb:76:53:68:5b:a3:16:4a:89:f5:e4:
69:71:f6:be:fb:ad:78:7c:00:d9:af:8b:29:5e:2d:ab:41:73:
0e:fe:4f:87:13:69:bd:97:78:32:e5:f8:8b:3b:e3:a3:5c:03:
6d:b3:07:49:44:b0:dc:c9:13:d7:50:72:fa:9a:81:b1:d7:58:
88:99:c7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:54 2025 by rpki-client