Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.mft
File: ar_WA8cUHPY0bXXcFMCINTWWjMo.mft (raw, json)
Hash identifier: m77xZAhhYGC1dGa2XY5fwTKJVAdV5GuH7A0eV3VyFxc=
Subject key identifier: 22:9C:3D:C3:EB:8E:E7:7D:42:C5:26:D5:1A:71:3D:FA:4E:C4:54:F7
Authority key identifier: 6A:BF:D6:03:C7:14:1C:F6:34:6D:75:DC:14:C0:88:35:35:96:8C:CA
Certificate issuer: /CN=6abfd603c7141cf6346d75dc14c0883535968cca
Certificate serial: 019544EC39E082106D2C2A632AF26E18BD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar_WA8cUHPY0bXXcFMCINTWWjMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.mft
Manifest number: 08BC
Signing time: Thu 27 Feb 2025 01:01:26 +0000
Manifest this update: Thu 27 Feb 2025 01:01:26 +0000
Manifest next update: Fri 28 Feb 2025 01:01:26 +0000
Files and hashes: 1: ar_WA8cUHPY0bXXcFMCINTWWjMo.crl (hash: jo8KmIYErgaDggZV8ZmPvZaMcDXsEw4lwu90/cVB8Oc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:44:ec:39:e0:82:10:6d:2c:2a:63:2a:f2:6e:18:bd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abfd603c7141cf6346d75dc14c0883535968cca
Validity
Not Before: Feb 27 01:01:26 2025 GMT
Not After : Feb 28 01:01:26 2025 GMT
Subject: CN=229c3dc3eb8ee77d42c526d51a713dfa4ec454f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:35:57:93:43:a7:02:e8:05:c7:fa:20:d5:
d8:37:95:c8:7e:78:41:e7:9e:38:c0:82:79:8d:68:
8d:e2:92:2c:6d:d0:dc:a9:95:22:e8:b0:77:d4:c0:
fc:48:e1:bf:f7:ee:58:a4:4e:d4:9e:b7:34:23:40:
35:ea:d1:bc:15:d1:85:db:26:71:53:e2:92:c4:d5:
f0:ab:3e:cf:e4:2f:91:0f:be:38:40:58:15:e6:6b:
ac:a3:cf:fe:ed:cf:55:2f:82:b5:aa:f2:b2:e6:c9:
27:83:b1:b0:8a:ec:eb:77:b7:14:e6:8c:2f:be:ff:
64:e0:95:0e:59:5d:76:64:62:6e:4d:05:39:38:ca:
c6:e2:73:99:d5:30:b6:8b:32:b2:6f:18:89:75:0d:
58:9b:ae:e8:66:09:ef:34:98:da:54:56:65:14:6d:
d3:f5:e9:39:2c:42:f3:57:e0:4e:eb:a0:18:55:ce:
48:7d:c4:0c:41:c8:80:e7:32:d7:ed:f7:d6:67:b5:
a5:2e:d7:93:e6:ba:22:b9:15:31:0d:e9:5e:f1:3f:
09:bf:95:2b:67:a7:b0:7d:a3:e6:3c:b8:38:1a:1b:
a2:89:c7:0b:9e:07:63:b5:62:63:b9:42:73:4b:78:
83:9d:3b:e7:4d:2d:69:0c:b1:c8:d2:ac:ee:b6:26:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9C:3D:C3:EB:8E:E7:7D:42:C5:26:D5:1A:71:3D:FA:4E:C4:54:F7
X509v3 Authority Key Identifier:
keyid:6A:BF:D6:03:C7:14:1C:F6:34:6D:75:DC:14:C0:88:35:35:96:8C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar_WA8cUHPY0bXXcFMCINTWWjMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7b5a34-baad-4422-ad3d-be272975248e/1/ar_WA8cUHPY0bXXcFMCINTWWjMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:de:f9:2e:da:5f:09:75:68:f5:5c:51:cc:f1:02:a3:12:bb:
e1:2b:5e:89:82:e4:d0:f4:8b:8d:86:09:75:1b:80:aa:f3:d1:
b2:7f:a4:39:78:12:1b:e3:79:31:bb:db:7d:1a:a7:de:c2:6e:
85:e3:fb:24:b5:06:4f:24:3e:f3:22:ff:95:a3:06:0d:96:3b:
fd:52:26:d6:82:e6:5c:a1:d8:6f:f9:12:52:29:f0:10:7c:0e:
f2:94:e0:cd:1d:40:82:89:de:90:fe:84:3c:ef:c0:2c:fb:84:
d0:e0:64:b1:28:88:ce:29:ab:b8:94:70:fe:82:63:27:71:43:
43:e8:1c:21:9c:62:32:ab:e8:2c:69:3e:26:74:fb:60:14:e6:
7a:8f:0d:65:be:1e:f5:5f:02:fa:6a:db:d7:23:4d:bf:f0:9d:
b9:fc:79:8b:74:3e:cf:a7:7e:c4:0f:a1:d9:43:3f:40:cc:d7:
56:fe:05:c9:18:e6:24:0f:7c:12:da:a9:1d:b0:55:06:98:0e:
dd:ac:12:0b:54:36:4a:05:04:1d:4c:7b:c3:b1:4f:8f:15:00:
4b:32:6a:76:99:af:0e:e2:50:df:b0:3c:89:e9:d0:99:96:ec:
b0:ad:63:72:41:59:0c:c7:42:97:23:18:70:9d:1c:e1:29:fb:
78:76:0c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:00:08 2025 by rpki-client