Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
File: t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft (raw, json)
Hash identifier: o+DpvcuWWMTUB5p1pRQ38KxL8exAu/wJpIqLo3JpTb0=
Subject key identifier: BB:5E:52:F4:D9:50:52:08:04:F1:2B:AC:0D:61:EB:D5:7F:F4:67:5C
Authority key identifier: B7:A6:93:1D:8A:86:0E:13:C9:EC:11:22:FF:A1:FD:F1:3A:F5:4D:07
Certificate issuer: /CN=b7a6931d8a860e13c9ec1122ffa1fdf13af54d07
Certificate serial: 0195E159DCF48A0DCAC1062FB37963399A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
Manifest number: 0423
Signing time: Sat 29 Mar 2025 10:01:57 +0000
Manifest this update: Sat 29 Mar 2025 10:01:57 +0000
Manifest next update: Sun 30 Mar 2025 10:01:57 +0000
Files and hashes: 1: t6aTHYqGDhPJ7BEi_6H98Tr1TQc.crl (hash: tYN9blj3OOP+AdJmXaHP2aREmkl74at/7i7umq5jKQk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:dc:f4:8a:0d:ca:c1:06:2f:b3:79:63:39:9a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a6931d8a860e13c9ec1122ffa1fdf13af54d07
Validity
Not Before: Mar 29 10:01:57 2025 GMT
Not After : Mar 30 10:01:57 2025 GMT
Subject: CN=bb5e52f4d950520804f12bac0d61ebd57ff4675c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:f8:aa:8e:08:2e:3d:cf:1e:30:38:82:db:
53:ee:82:9f:ca:2d:0e:5b:fb:a5:06:d5:49:d0:85:
52:d6:8a:ba:ec:ae:4d:47:1f:ab:ba:f9:93:b7:0f:
c1:9d:97:e7:47:51:ae:37:e4:b6:a1:7f:c4:00:b5:
3e:f1:35:47:78:e0:21:28:57:16:61:89:bd:c4:fd:
5b:ef:d7:7c:2e:ea:41:d2:4c:fc:16:9c:08:b6:6d:
6a:e6:90:db:08:b4:ea:90:36:63:b3:e8:f0:a7:10:
e4:f5:33:2e:f5:29:50:02:5a:26:37:16:ad:f8:af:
16:5c:8b:46:b7:f3:5e:0d:47:55:16:be:d8:fe:1e:
19:5e:72:b9:67:ec:e4:7c:c5:f4:c5:51:fa:e5:75:
44:a6:50:2a:5f:f0:1a:92:92:0c:23:a8:2c:d7:66:
12:f7:2d:4f:a4:e0:b3:cb:22:79:04:b9:b5:c2:18:
90:d2:b5:09:a1:5a:eb:f1:44:28:4d:9a:17:0e:0f:
af:4a:79:fd:a1:ae:f8:a1:a6:de:a6:34:ee:e8:5b:
40:cc:6d:cb:8a:5a:2e:ba:c8:93:15:05:8b:9e:e4:
42:f7:cd:e2:c4:9f:f6:e6:de:6d:cc:65:12:29:27:
4b:fe:32:16:e8:a9:91:aa:db:eb:b7:c0:8d:61:27:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5E:52:F4:D9:50:52:08:04:F1:2B:AC:0D:61:EB:D5:7F:F4:67:5C
X509v3 Authority Key Identifier:
keyid:B7:A6:93:1D:8A:86:0E:13:C9:EC:11:22:FF:A1:FD:F1:3A:F5:4D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:89:46:86:5b:b2:65:73:79:04:84:89:4c:d9:cd:8a:95:f6:
41:b6:6d:88:1d:8e:37:a1:c6:02:b9:8c:4e:b4:72:8e:cc:cf:
89:6d:e6:64:be:5d:aa:9d:2a:c7:d4:04:02:a7:05:cd:1e:be:
37:c4:2b:78:53:10:b0:52:11:6a:9a:aa:f5:91:2e:d5:78:ef:
5c:32:35:ba:76:78:0e:15:87:75:1c:2f:15:ba:c1:bb:ad:44:
5d:ed:e8:d7:1b:76:7f:9c:96:ee:5f:8f:a8:cb:e7:65:de:1a:
a6:eb:e1:f8:f3:12:6a:33:c9:28:6f:7c:95:37:60:1a:0d:bb:
5a:f0:77:09:fa:8e:05:a0:11:2b:39:42:3b:56:28:8c:ad:44:
2d:19:81:b2:a3:94:95:91:0a:32:2b:99:1f:b1:7b:f3:31:38:
1f:6c:fa:1f:4c:85:99:d9:ae:1f:1f:eb:bb:f6:1b:78:a4:01:
d3:44:f0:af:59:aa:bf:a6:ee:19:7b:52:ab:de:44:32:01:d0:
6e:e8:f8:ac:2e:ab:f8:07:b6:ec:f2:cc:90:2e:05:d8:45:9f:
4e:a2:e2:ee:d7:5f:ec:97:87:1d:ce:29:5d:a3:80:c1:e3:0c:
6a:0d:ac:c8:d5:7f:bc:6c:d7:85:6b:f3:e3:cc:44:9f:c7:58:
85:72:b2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:17:24 2025 by rpki-client