Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File: Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier: 1iqwXR82mMFZv7i5HA9Z/Hbs/v/oGOTovXE5Vhju+VU=
Subject key identifier: 80:5A:E8:15:A4:92:00:DD:39:23:41:EB:6E:CC:62:F4:CD:DF:9F:7A
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 0195E07DB112FBB1AF7B8470D250B2ACACDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number: 14C6
Signing time: Sat 29 Mar 2025 06:01:28 +0000
Manifest this update: Sat 29 Mar 2025 06:01:28 +0000
Manifest next update: Sun 30 Mar 2025 06:01:28 +0000
Files and hashes: 1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: IvSNGb+pCojJoJZ0kN811dapg7CssjMoaDVmGbwtJjg=)
2: rnVgQnSvZayWReSkh23-vQQTXhc.roa (hash: hebKWON0JMZ90AbYifXQ2mjTupBoFKWh8ulvnxLBZ8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:b1:12:fb:b1:af:7b:84:70:d2:50:b2:ac:ac:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: Mar 29 06:01:28 2025 GMT
Not After : Mar 30 06:01:28 2025 GMT
Subject: CN=805ae815a49200dd392341eb6ecc62f4cddf9f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7d:4b:ac:36:d2:ea:8b:cf:47:1a:df:d3:d9:
b6:98:84:57:66:0c:b4:96:f1:74:aa:cc:2f:88:e3:
fa:b2:e1:ef:b9:2c:2c:6d:43:38:c9:54:35:9b:a4:
05:62:71:c7:48:53:fe:8c:41:10:72:0d:db:88:8d:
0b:4a:84:d8:ca:4c:75:1a:6b:4f:f6:ea:70:7b:0a:
b5:c3:04:04:dd:25:d2:20:6e:5a:3c:99:41:2d:5b:
5a:88:7d:1b:d2:6b:77:d0:d1:53:ef:5d:77:2b:0d:
23:7d:35:81:75:8b:98:18:5b:f3:e8:22:e4:e5:06:
ba:b8:77:22:ff:a5:ec:b9:ff:a6:2c:90:0a:50:c2:
1f:b1:57:2a:31:24:23:bd:c9:7b:9e:fa:c7:26:73:
0c:8b:bc:19:84:53:0b:66:d1:49:21:43:46:46:4a:
94:31:7f:02:5c:23:b6:d9:85:58:f4:12:80:3b:f8:
14:85:df:5c:ae:77:97:24:d0:10:89:f6:24:f9:d1:
ed:6f:47:f5:c3:0d:d2:a6:0f:e1:18:4c:23:d1:95:
ea:1b:f0:9c:75:a8:cc:14:32:e5:ba:f8:c5:4a:0c:
30:bb:24:15:92:4e:23:59:45:3c:5d:2e:b9:b8:52:
dc:ce:70:59:15:46:f9:f3:6a:6b:af:5f:b1:28:4b:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5A:E8:15:A4:92:00:DD:39:23:41:EB:6E:CC:62:F4:CD:DF:9F:7A
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7a:ba:ad:cf:ae:5c:ff:1b:fe:54:ae:54:0c:62:7c:52:74:
12:e2:93:07:63:81:c0:8a:cd:e3:0b:75:91:42:f5:ae:4e:8e:
11:e2:e4:fa:60:a9:fb:da:5d:d8:f4:3c:3a:bd:70:c3:9e:41:
bc:b5:ef:8a:4d:27:36:a8:fa:85:39:78:04:4e:d8:0c:2f:8d:
b0:bb:f7:b4:d1:95:54:4d:c4:9c:41:16:a9:86:57:d6:c0:e4:
a4:eb:d6:d9:d8:e4:5e:d2:34:3a:f7:a3:c2:0d:ce:c2:7f:5d:
0c:dd:a2:5c:be:49:7a:7c:af:9b:26:8c:c0:e2:1a:3b:c5:3a:
ea:84:a0:1e:28:d0:53:37:db:1a:77:f0:ff:ac:53:ab:e3:1d:
0b:4e:05:43:34:93:f8:1a:2c:8b:60:ae:68:d1:83:ff:a3:fe:
f6:15:fc:a9:3b:99:cc:2a:e0:e0:30:80:93:62:38:3a:14:13:
ec:1b:c3:78:be:ee:e3:94:ca:24:cc:ea:76:b9:92:b0:1d:ec:
bc:f4:63:e5:1b:a2:22:81:4c:e6:26:2e:6c:64:c9:e2:e1:e4:
c5:27:b6:c5:89:82:6a:c9:c3:e5:04:32:d1:99:c5:97:0f:27:
1d:72:32:bc:eb:46:a8:ac:81:b1:92:2b:cc:f3:96:30:d4:7d:
7b:03:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:49:35 2025 by rpki-client