Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/a4WJSoS6oOyg5u9EqZL8K6APUnc.mft
File: a4WJSoS6oOyg5u9EqZL8K6APUnc.mft (raw, json)
Hash identifier: YxYiKmon/PoUJjNup74zoLMu8GcHZbqpNze0Kq/mFQw=
Subject key identifier: 07:1F:46:AA:16:78:21:C8:46:6E:81:31:F5:92:D5:F9:51:03:A1:7A
Authority key identifier: 6B:85:89:4A:84:BA:A0:EC:A0:E6:EF:44:A9:92:FC:2B:A0:0F:52:77
Certificate issuer: /CN=6b85894a84baa0eca0e6ef44a992fc2ba00f5277
Certificate serial: 019347F1BD7F78337383F78F31313A4D9A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4WJSoS6oOyg5u9EqZL8K6APUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/a4WJSoS6oOyg5u9EqZL8K6APUnc.mft
Manifest number: 1372
Signing time: Wed 20 Nov 2024 05:00:45 +0000
Manifest this update: Wed 20 Nov 2024 05:00:45 +0000
Manifest next update: Thu 21 Nov 2024 05:00:45 +0000
Files and hashes: 1: CjDWHsxdvR8Zk6bd48GV6LkKCKo.roa (hash: L6ebY4sU08KNzCFkjr2wDQT+RZQQZa1NEjrxijwLThs=)
2: a4WJSoS6oOyg5u9EqZL8K6APUnc.crl (hash: 7lsFExi7yja+cxk595dEd2gRty8z33yfPJsSLSiw2c4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:47:f1:bd:7f:78:33:73:83:f7:8f:31:31:3a:4d:9a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b85894a84baa0eca0e6ef44a992fc2ba00f5277
Validity
Not Before: Nov 20 05:00:45 2024 GMT
Not After : Nov 21 05:00:45 2024 GMT
Subject: CN=071f46aa167821c8466e8131f592d5f95103a17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:33:c0:35:f6:b6:d3:11:37:6e:2d:4f:cf:01:
21:df:f7:2c:f2:b7:be:f0:93:22:73:8f:8b:cb:f6:
82:eb:e3:b6:2b:73:be:6c:e0:11:92:60:35:d9:b2:
6b:08:d4:6c:59:96:ab:63:00:58:d8:eb:01:d2:00:
40:fa:3b:29:6d:f6:61:97:51:7d:c1:86:39:67:b0:
2f:3d:a0:67:cb:be:0d:61:89:28:ab:d5:35:ab:f3:
ed:c4:b9:60:c0:c1:54:76:0b:89:5d:64:1a:83:d0:
36:4e:26:9b:ef:e6:24:9c:80:18:ea:84:28:b1:4c:
c6:70:7a:2c:72:91:8d:59:ec:32:a7:93:e4:70:eb:
77:c9:ea:0c:1d:7b:36:bb:9e:37:92:a6:39:65:8a:
b9:be:80:cc:90:8c:28:b1:4b:59:5d:35:93:20:86:
57:73:e1:ce:3f:45:45:66:56:85:70:8b:05:c6:31:
7b:65:3a:fa:aa:b8:d8:00:39:1a:fd:86:fb:40:06:
97:88:88:10:ac:3c:f7:b8:0e:59:64:c5:0b:c0:fa:
b8:6b:59:67:8f:0b:dc:d2:bf:da:bb:22:21:f5:3b:
02:44:e6:70:f5:52:be:cb:72:d2:9a:c5:01:e4:fd:
6b:00:1a:3a:25:c1:a9:24:21:db:72:88:40:40:57:
96:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1F:46:AA:16:78:21:C8:46:6E:81:31:F5:92:D5:F9:51:03:A1:7A
X509v3 Authority Key Identifier:
keyid:6B:85:89:4A:84:BA:A0:EC:A0:E6:EF:44:A9:92:FC:2B:A0:0F:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4WJSoS6oOyg5u9EqZL8K6APUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/a4WJSoS6oOyg5u9EqZL8K6APUnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/a4WJSoS6oOyg5u9EqZL8K6APUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3c:77:3f:0a:41:a6:51:ad:a9:d9:88:5d:cb:a6:e0:9f:22:
ed:51:ba:5c:86:42:7b:22:d9:c7:71:74:9d:b3:29:b7:75:56:
2c:27:09:41:6f:a3:27:8c:67:9a:71:e2:73:d5:82:98:95:63:
03:25:d8:ce:26:6b:1d:71:a2:52:2d:75:13:bc:0a:fa:34:42:
8c:1c:4e:16:6b:69:0f:3c:95:51:37:5e:a2:2a:d4:91:c1:e1:
60:f6:6e:9a:84:6e:e5:81:f3:26:3e:32:42:a9:eb:1c:b6:b0:
24:e7:70:30:cc:b3:be:a3:f1:6e:d5:12:bf:be:fd:33:30:f7:
df:0d:90:fb:da:34:16:aa:02:d0:24:2d:fd:eb:ae:9b:30:14:
cf:0d:ee:40:3c:1e:c9:16:03:5d:77:cb:4f:ec:2b:79:09:0a:
49:3b:fd:8e:13:00:c3:7a:e4:27:49:93:2a:82:80:d9:a3:2e:
a6:c0:10:d6:c2:11:d7:1e:c2:38:bc:5d:6e:69:3a:5d:17:9a:
11:2e:55:b6:9f:a1:57:6b:04:84:0a:15:38:60:25:be:01:ff:
07:bc:12:ed:93:b2:c1:08:83:88:3d:06:f6:19:8e:e7:2b:d9:
92:61:10:4f:32:e0:4b:82:4e:a1:3d:6e:f4:56:90:5a:df:70:
66:1a:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:56 2025 by rpki-client