Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.mft
File: C6yKMgbjZ7gLjKaJIg8JjRiEkbo.mft (raw, json)
Hash identifier: BdtdXXMdn/Ua4KufXonmqxi+jO4C1FXzahP4j89Xssg=
Subject key identifier: 40:D4:1A:10:BE:37:15:AE:99:DC:27:CC:4D:CC:63:3F:58:65:6F:B2
Authority key identifier: 0B:AC:8A:32:06:E3:67:B8:0B:8C:A6:89:22:0F:09:8D:18:84:91:BA
Certificate issuer: /CN=0bac8a3206e367b80b8ca689220f098d188491ba
Certificate serial: 0194CE0B4F71D21E481E3FA1A429B972653A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.mft
Manifest number: 13C6
Signing time: Mon 03 Feb 2025 23:00:35 +0000
Manifest this update: Mon 03 Feb 2025 23:00:35 +0000
Manifest next update: Tue 04 Feb 2025 23:00:35 +0000
Files and hashes: 1: C6yKMgbjZ7gLjKaJIg8JjRiEkbo.crl (hash: cMxeVKwOjCQCTrJfY+RFeU7HKHJIEtLVkGXQCgsVUzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ce:0b:4f:71:d2:1e:48:1e:3f:a1:a4:29:b9:72:65:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac8a3206e367b80b8ca689220f098d188491ba
Validity
Not Before: Feb 3 23:00:35 2025 GMT
Not After : Feb 4 23:00:35 2025 GMT
Subject: CN=40d41a10be3715ae99dc27cc4dcc633f58656fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:6f:d8:10:cc:49:7f:c0:50:cf:6c:d0:95:
c0:42:33:e0:ae:a0:e4:af:7a:3a:67:3f:ab:47:d0:
87:a7:63:a1:8f:fd:30:8a:e1:af:c8:d2:5c:b5:83:
48:be:66:29:d0:07:bb:40:71:0f:26:dd:26:a0:f0:
7c:94:a5:39:da:87:35:3d:2c:60:a7:f5:f2:9a:81:
20:9a:d1:52:54:f1:92:ed:eb:7a:6c:6e:61:5d:6f:
a6:4d:c4:88:5b:90:bc:52:69:c4:f5:ba:1e:ff:fb:
7a:36:94:ed:3e:ab:ac:63:56:65:ab:e7:95:cf:c4:
13:a3:0e:84:0f:de:0a:23:01:6e:1c:27:c6:4e:fe:
10:89:12:60:76:4c:ce:e2:9d:d5:07:cb:85:92:81:
54:35:46:db:76:75:53:31:a3:f1:df:b5:78:3d:20:
b9:a1:de:ac:c7:9a:49:59:c6:43:ce:19:16:7d:de:
0a:ce:95:3c:3d:6b:2d:04:64:97:eb:3f:b7:85:cb:
d4:37:9c:87:07:a0:60:bd:de:37:85:f2:fc:af:47:
7a:27:47:98:bf:1b:f0:d7:72:5f:db:a6:a1:55:20:
f9:c4:91:99:06:f1:63:33:31:d3:33:46:13:ba:50:
ee:6a:d0:f1:e7:10:a0:f5:20:da:0d:4d:e6:78:d1:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D4:1A:10:BE:37:15:AE:99:DC:27:CC:4D:CC:63:3F:58:65:6F:B2
X509v3 Authority Key Identifier:
keyid:0B:AC:8A:32:06:E3:67:B8:0B:8C:A6:89:22:0F:09:8D:18:84:91:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:57:14:a0:1b:fb:02:95:f0:8a:34:a5:a7:91:11:84:f0:52:
6e:a1:0a:00:c2:c8:c6:ba:22:a0:e4:d5:38:70:d4:fb:e9:d5:
3c:e9:ed:c1:28:9a:07:c4:db:91:53:85:cd:8c:fd:5f:a0:dd:
22:7f:a4:15:55:51:77:51:f8:17:c7:15:bf:69:bb:19:cc:87:
ab:ee:8a:bb:2a:16:77:34:52:63:97:20:28:29:73:ea:6c:22:
bf:d6:b4:ac:dd:26:e7:d4:d3:3d:4e:1d:ce:12:de:5a:13:62:
00:4f:cf:84:67:a3:87:85:c9:65:1c:a7:91:2f:8a:ae:92:b1:
d5:2a:cc:a1:56:3f:d6:0a:99:55:89:15:aa:25:ee:bf:b5:31:
a4:4d:21:ec:db:86:61:0a:5a:eb:89:ea:90:b3:a3:c1:56:e0:
66:91:20:d9:2d:f7:10:a3:14:91:32:1b:4c:5f:05:6f:a9:e9:
8b:a6:21:61:46:72:3d:db:ad:67:a7:ac:59:e2:a9:84:63:52:
00:c1:aa:ec:e4:84:84:b8:8c:bc:ea:c5:f7:13:6d:38:b6:ce:
e9:0f:a2:9a:e0:84:05:50:0b:14:95:85:9b:c2:95:93:35:07:
3c:11:fb:82:12:d6:dd:34:d4:82:85:97:c3:52:b2:c6:06:46:
20:3b:72:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:19:38 2025 by rpki-client