Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
File: t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft (raw, json)
Hash identifier: IqqPFEwXXBtJbtPvZ4Rkh02x6Y5j2Q1+zX9Xmp5ZSYc=
Subject key identifier: 6B:AF:0D:BC:4F:07:CC:A9:E2:E2:CD:00:32:35:FC:9F:1F:04:9F:B2
Authority key identifier: B7:A6:93:1D:8A:86:0E:13:C9:EC:11:22:FF:A1:FD:F1:3A:F5:4D:07
Certificate issuer: /CN=b7a6931d8a860e13c9ec1122ffa1fdf13af54d07
Certificate serial: 01960DC4C36E3F407CB86A20B4C95B4737D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
Manifest number: 043A
Signing time: Mon 07 Apr 2025 01:02:00 +0000
Manifest this update: Mon 07 Apr 2025 01:02:00 +0000
Manifest next update: Tue 08 Apr 2025 01:02:00 +0000
Files and hashes: 1: t6aTHYqGDhPJ7BEi_6H98Tr1TQc.crl (hash: Yrr9tIf6RgOJmzz89fkc8moL2VAN571QPd+a4SlRSzw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:c4:c3:6e:3f:40:7c:b8:6a:20:b4:c9:5b:47:37:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a6931d8a860e13c9ec1122ffa1fdf13af54d07
Validity
Not Before: Apr 7 01:02:00 2025 GMT
Not After : Apr 8 01:02:00 2025 GMT
Subject: CN=6baf0dbc4f07cca9e2e2cd003235fc9f1f049fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:64:67:99:67:08:7e:4c:4f:5c:e4:39:84:
9e:64:7b:84:af:da:8a:10:fe:b8:23:68:c7:48:5b:
4d:08:9f:05:eb:37:35:cc:bf:bf:59:6d:8c:14:6b:
bd:6b:02:c3:3c:73:74:a1:3b:68:3d:01:24:8e:f0:
52:bf:54:6c:0a:9b:44:09:5d:0b:89:02:ec:7c:40:
ae:8c:b1:b9:fc:8f:65:3f:a8:d4:61:d3:83:88:bf:
0a:16:4f:3c:65:6a:7a:e0:9a:05:b8:5d:75:5c:12:
19:83:26:a5:be:f4:c7:95:0f:11:8a:1d:db:44:c6:
e2:28:d9:82:b3:33:df:0b:e2:07:0a:9c:c3:ac:7c:
f6:e9:8f:58:ba:09:8d:98:b9:6d:47:7a:87:81:46:
6a:f8:ec:c7:a6:af:bb:4d:54:ef:ae:f9:56:48:be:
ac:5e:a4:a4:39:a2:a8:13:88:97:ff:1f:bb:6c:be:
2f:ec:b8:e8:5c:ac:93:df:50:01:ab:db:d6:96:47:
59:ec:07:82:44:a9:6a:d3:54:cb:95:64:14:76:26:
55:bf:6c:67:fc:ea:c8:d0:42:a7:36:6d:16:9f:7c:
6b:26:fb:af:d2:19:42:4f:6b:a7:f4:bc:13:97:e7:
8a:07:49:05:9b:59:b7:3b:27:e9:0b:c7:00:8e:c2:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AF:0D:BC:4F:07:CC:A9:E2:E2:CD:00:32:35:FC:9F:1F:04:9F:B2
X509v3 Authority Key Identifier:
keyid:B7:A6:93:1D:8A:86:0E:13:C9:EC:11:22:FF:A1:FD:F1:3A:F5:4D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d3d508-aadf-470e-9d3d-275cb5ad809b/1/t6aTHYqGDhPJ7BEi_6H98Tr1TQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d5:b4:06:f1:e2:b1:d7:24:cc:ef:7d:d2:de:5f:5f:e7:9e:
17:d0:20:de:7a:b0:e0:00:ad:47:6d:11:9e:b8:04:02:e0:36:
aa:60:d2:48:7b:71:74:10:8a:53:25:81:1a:33:5f:6d:4a:12:
2e:86:7c:92:83:35:d6:c6:f8:01:75:3a:dc:77:c5:81:59:14:
9b:45:bf:9e:9d:e8:89:61:bc:3f:8e:d7:ad:6b:b6:4c:cd:f7:
cc:e3:ec:1b:4b:99:9d:41:a3:4e:17:5c:ba:e3:90:85:c1:6b:
01:03:28:5b:c3:45:01:f8:23:e9:7e:39:23:a9:43:b5:28:09:
1f:64:63:56:cc:4e:96:b1:7b:b5:72:02:97:ed:ad:84:e0:2e:
52:c6:53:ba:6c:9f:b7:bd:50:b3:2c:58:5d:2e:59:e5:42:91:
8d:3b:3f:7e:c6:de:4e:34:9a:03:17:71:61:b1:7c:36:49:13:
d4:a6:78:7c:80:04:e3:1f:99:25:36:c1:79:3c:b0:e1:e9:9b:
93:f5:3d:98:9f:36:74:f4:76:45:b1:ed:52:b4:94:ca:9a:90:
2e:aa:26:26:10:dc:63:8d:3b:7e:32:f7:7e:19:1e:80:d8:1c:
4e:1a:03:f3:d0:ce:9b:a7:04:e6:0a:1d:54:d4:3f:63:af:bb:
bf:ac:03:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:30:16 2025 by rpki-client