Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/88e6a5-c469-4455-a7c1-a22a1dd40809/1/awtXPqB92zVzxIJz3l7o9s1GYxY.mft
File: awtXPqB92zVzxIJz3l7o9s1GYxY.mft (raw, json)
Hash identifier: SeNlklp9hHYLfcATDZmsCx3yvwB8jmZMJPDTx6VQX3Q=
Subject key identifier: 6F:3A:EA:8A:3D:2A:79:26:4B:3A:44:10:24:F7:D0:21:96:CD:26:C8
Authority key identifier: 6B:0B:57:3E:A0:7D:DB:35:73:C4:82:73:DE:5E:E8:F6:CD:46:63:16
Certificate issuer: /CN=6b0b573ea07ddb3573c48273de5ee8f6cd466316
Certificate serial: 018653565F3A1B66D80106BE1FF969207C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/awtXPqB92zVzxIJz3l7o9s1GYxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/88e6a5-c469-4455-a7c1-a22a1dd40809/1/awtXPqB92zVzxIJz3l7o9s1GYxY.mft
Manifest number: 0557
Signing time: Wed 15 Feb 2023 04:30:14 +0000
Manifest this update: Wed 15 Feb 2023 04:30:14 +0000
Manifest next update: Thu 16 Feb 2023 04:30:14 +0000
Files and hashes: 1: awtXPqB92zVzxIJz3l7o9s1GYxY.crl (hash: tlZ01bCne6mR0TYS7gOeejIa4L1OVgQW1bKbyrCKVwM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:53:56:5f:3a:1b:66:d8:01:06:be:1f:f9:69:20:7c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0b573ea07ddb3573c48273de5ee8f6cd466316
Validity
Not Before: Feb 15 04:30:14 2023 GMT
Not After : Feb 16 04:30:14 2023 GMT
Subject: CN=6f3aea8a3d2a79264b3a441024f7d02196cd26c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:42:22:86:39:f5:3d:c6:84:3f:1c:af:de:51:
95:a8:f3:ab:97:86:8c:1b:c2:55:16:8a:99:cb:7d:
09:a7:86:ca:58:22:3e:ef:d0:5b:bb:d8:d3:fa:00:
29:d8:2a:dd:8b:c1:03:fe:db:7a:9e:b4:cb:b8:16:
9a:80:a3:ce:d2:72:c2:66:25:db:50:a2:f6:d2:84:
5d:37:3b:83:1f:9e:ab:4e:c5:a8:87:a3:c0:0f:56:
da:b3:85:5c:d8:0e:ec:ce:39:fd:28:5e:44:f3:a2:
09:be:9f:89:10:99:dc:53:2a:df:13:ed:ba:11:9a:
04:e8:1d:76:6c:36:05:91:6b:5c:79:68:b9:9b:6f:
4a:0a:57:ff:a7:03:d0:31:74:12:2e:77:19:4a:2e:
c6:f6:5a:f4:92:4b:98:d2:1e:58:8a:9c:12:c5:2e:
a6:7f:99:de:46:0d:f6:9d:e6:c6:3f:3d:af:6c:24:
b2:66:23:54:25:48:6b:d6:32:b6:19:3e:60:53:12:
e8:62:e9:09:9e:61:31:98:a8:99:c6:1c:a4:9e:b8:
ce:88:e7:33:9d:77:ba:a5:2a:74:be:0e:04:7a:10:
f3:db:99:00:02:ab:98:88:41:93:34:00:5a:de:65:
28:f7:5c:80:80:f6:fd:e9:f5:04:41:ca:56:b6:14:
8c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3A:EA:8A:3D:2A:79:26:4B:3A:44:10:24:F7:D0:21:96:CD:26:C8
X509v3 Authority Key Identifier:
keyid:6B:0B:57:3E:A0:7D:DB:35:73:C4:82:73:DE:5E:E8:F6:CD:46:63:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awtXPqB92zVzxIJz3l7o9s1GYxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/88e6a5-c469-4455-a7c1-a22a1dd40809/1/awtXPqB92zVzxIJz3l7o9s1GYxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/88e6a5-c469-4455-a7c1-a22a1dd40809/1/awtXPqB92zVzxIJz3l7o9s1GYxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ad:d9:55:23:37:b7:7b:cf:b7:66:4c:01:81:22:e8:9e:2a:
6f:ef:93:7c:a9:57:fe:25:b2:2c:73:9c:89:f7:95:2d:82:bd:
5a:58:77:16:30:9b:67:4b:09:c2:20:f4:67:f3:a9:a1:c6:3b:
20:7e:20:90:cc:3b:61:08:1c:d8:72:de:a3:60:7b:e1:82:d4:
54:aa:7d:e8:3d:4e:d3:00:45:ab:e0:ac:2a:ad:e5:ac:61:d6:
ba:45:61:2a:a6:2c:54:76:88:12:6b:81:b1:56:8c:f4:9f:62:
41:6f:58:3f:dd:61:f0:17:6a:e3:54:93:0d:f4:e0:47:f8:07:
a7:67:d7:a5:85:e2:f4:2b:de:95:11:87:de:60:1b:92:73:78:
6b:7a:d9:fc:7f:68:09:f6:36:04:d2:1c:08:20:1e:cc:2d:3c:
41:48:c4:8d:ee:a9:0b:6b:bf:70:ec:fa:44:fc:27:ca:3e:c0:
0d:e2:b3:18:3c:cf:68:e0:ea:c2:3d:9f:40:ce:4d:2f:a5:59:
03:24:9b:38:ba:4b:4b:9a:0a:6e:23:79:31:fa:39:36:3c:92:
3b:39:4d:e9:ac:79:1e:f7:ae:c3:97:72:54:c6:fe:66:39:66:
60:d6:fd:b6:d9:c0:b9:28:9a:55:2e:f6:b6:79:c3:2c:b4:83:
45:23:8f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:32 2025 by rpki-client