Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/a4a3KXGkFznN3SPILmPhG7bKnO8.mft
File: a4a3KXGkFznN3SPILmPhG7bKnO8.mft (raw, json)
Hash identifier: oz/84RPXNqN8a2RS6q/C/p/+Hx5fAxM89y2tHD40hL0=
Subject key identifier: 1A:C9:0D:7B:78:E0:91:B2:3F:47:AD:9A:D4:FC:5A:83:CE:84:F8:5D
Authority key identifier: 6B:86:B7:29:71:A4:17:39:CD:DD:23:C8:2E:63:E1:1B:B6:CA:9C:EF
Certificate issuer: /CN=6b86b72971a41739cddd23c82e63e11bb6ca9cef
Certificate serial: 01876DEA65415932C508E1473526EB1F9D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4a3KXGkFznN3SPILmPhG7bKnO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/a4a3KXGkFznN3SPILmPhG7bKnO8.mft
Manifest number: 0C7A
Signing time: Tue 11 Apr 2023 01:24:50 +0000
Manifest this update: Tue 11 Apr 2023 01:24:50 +0000
Manifest next update: Wed 12 Apr 2023 01:24:50 +0000
Files and hashes: 1: a4a3KXGkFznN3SPILmPhG7bKnO8.crl (hash: wS+nQkHuHPfGNBl8kY4bjpKAiSeNz7sjSR6HWtduWTo=)
2: mRYAq3kpW2RNcVrKH_ENGqs_4AU.roa (hash: pYl3iCD7zPjBHCRTRykypcaTwbqEQ76gE3KDmRHcKDM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6d:ea:65:41:59:32:c5:08:e1:47:35:26:eb:1f:9d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b86b72971a41739cddd23c82e63e11bb6ca9cef
Validity
Not Before: Apr 11 01:24:50 2023 GMT
Not After : Apr 12 01:24:50 2023 GMT
Subject: CN=1ac90d7b78e091b23f47ad9ad4fc5a83ce84f85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:2c:cb:c3:c7:75:ff:61:15:8e:44:3d:94:
11:f6:f7:d7:11:38:d2:c2:05:3a:72:1e:75:ca:bc:
e8:31:ac:cb:b3:44:71:86:08:4d:a4:4a:ba:cf:6e:
5d:7c:1d:b9:ad:07:a0:57:2f:8f:27:16:b7:ad:47:
07:af:cb:5f:3d:56:f0:a8:94:f1:b3:02:3e:39:cf:
82:d0:3c:82:8e:50:62:25:19:1b:98:c3:d7:10:57:
fe:e6:aa:83:1b:ab:4b:e7:34:fe:55:39:1e:a4:09:
25:16:82:fb:05:c9:0e:1c:68:f2:18:ba:49:89:af:
c2:d6:39:c7:6b:14:c6:d9:63:d6:29:19:62:4f:bd:
82:80:98:3f:db:c8:e9:02:95:fc:25:00:be:e0:eb:
5f:79:41:a3:17:2a:d0:0b:cc:1a:df:2b:e0:00:99:
3f:e6:aa:24:f4:fd:d1:ba:da:65:b2:35:4a:95:59:
95:b6:5f:02:ba:3c:0e:96:58:17:f4:48:bd:e6:bb:
0e:2f:dc:bb:37:9d:97:db:73:ef:40:3b:1c:cf:dc:
16:d4:c2:5a:8d:ba:3e:70:49:ab:74:3e:9d:77:0d:
8a:bd:74:9f:ca:f6:7b:56:c3:26:76:85:cf:6e:a5:
c1:0a:07:81:9b:8b:f3:c7:33:b4:b6:00:3f:8c:4d:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C9:0D:7B:78:E0:91:B2:3F:47:AD:9A:D4:FC:5A:83:CE:84:F8:5D
X509v3 Authority Key Identifier:
keyid:6B:86:B7:29:71:A4:17:39:CD:DD:23:C8:2E:63:E1:1B:B6:CA:9C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4a3KXGkFznN3SPILmPhG7bKnO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/a4a3KXGkFznN3SPILmPhG7bKnO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/a4a3KXGkFznN3SPILmPhG7bKnO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7a:5d:70:5f:71:3d:f2:dd:e2:02:13:69:6b:11:1b:9a:3e:
76:16:67:32:f1:47:4b:8a:9b:d9:bd:8f:a9:8d:87:57:b1:5b:
fb:28:3a:ab:70:42:37:e6:41:ae:5a:2f:1f:4b:e1:a0:99:6f:
0b:68:5c:2b:ce:cf:94:5d:c0:25:45:b6:09:b2:9f:75:39:32:
fd:94:a1:f3:4b:0e:e6:40:04:0e:d7:de:05:0b:95:b5:d9:cc:
9d:95:a3:db:53:e6:a4:65:20:cf:d0:ce:20:25:2e:27:0a:bb:
3c:43:3f:3a:72:02:2c:45:69:95:3c:d1:91:a3:bb:46:6f:f5:
ed:aa:d7:3d:ae:98:90:43:c6:64:1c:9a:c5:ba:0e:7c:33:09:
bd:fe:90:fe:b1:48:34:c9:81:5a:a3:96:9a:e9:c3:d1:1f:61:
0b:0a:ea:b1:0a:b9:0e:6d:c0:97:da:1d:9e:25:73:f1:3f:60:
5f:7a:70:f3:2e:2b:33:1c:0e:d6:2d:d2:7c:14:fe:6a:9d:17:
cd:60:87:35:c6:c5:fe:2d:62:82:fb:04:e5:20:bb:c9:77:73:
6f:72:c8:37:e4:47:84:1c:ec:fa:dd:7e:e5:f3:e8:20:c0:74:
2a:5d:d5:92:65:97:f1:2f:c6:b3:7a:a7:39:5b:bb:f9:7e:8e:
09:0d:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:32 2025 by rpki-client