Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/0aEkSjxXuf67aNaEqDKwZx4-TIQ.mft
File: 0aEkSjxXuf67aNaEqDKwZx4-TIQ.mft (raw, json)
Hash identifier: 8yPA9Rl/OVFwC3S83c7aUr48IqgFGOzjKVmI1mVCDVY=
Subject key identifier: B3:88:DB:69:94:3C:5A:41:C0:9C:6D:4B:24:D3:95:41:27:AC:2C:60
Authority key identifier: D1:A1:24:4A:3C:57:B9:FE:BB:68:D6:84:A8:32:B0:67:1E:3E:4C:84
Certificate issuer: /CN=d1a1244a3c57b9febb68d684a832b0671e3e4c84
Certificate serial: 018EC24ECADBAF52ABA07CFC9D7501C17741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aEkSjxXuf67aNaEqDKwZx4-TIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/0aEkSjxXuf67aNaEqDKwZx4-TIQ.mft
Manifest number: 10A3
Signing time: Tue 09 Apr 2024 10:02:07 +0000
Manifest this update: Tue 09 Apr 2024 10:02:07 +0000
Manifest next update: Wed 10 Apr 2024 10:02:07 +0000
Files and hashes: 1: 0aEkSjxXuf67aNaEqDKwZx4-TIQ.crl (hash: 6RyzOu80YR7JOJkgMMgbMYxJTAIxL40KYqwaV7s68Y8=)
2: ltulORma-P3wSZy8kJxgbvD19do.roa (hash: 3uqahYMVTtnE2H28OWI+8QzVU2R+VXC5p06rtgEZIiM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:4e:ca:db:af:52:ab:a0:7c:fc:9d:75:01:c1:77:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a1244a3c57b9febb68d684a832b0671e3e4c84
Validity
Not Before: Apr 9 10:02:07 2024 GMT
Not After : Apr 10 10:02:07 2024 GMT
Subject: CN=b388db69943c5a41c09c6d4b24d3954127ac2c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dc:aa:cc:b4:ea:33:b9:a8:fe:8f:84:a5:32:
94:a8:b8:6f:10:85:d6:d3:26:51:57:62:54:f9:ff:
5c:4d:0d:ce:9c:7b:2e:38:8d:57:fc:00:6c:37:43:
9d:d2:b3:0e:45:d3:d1:17:00:dd:48:43:e5:54:d3:
28:14:00:bc:86:5b:ce:cf:14:c7:8a:5c:a0:84:9c:
d7:4e:10:fd:49:dd:e0:5f:85:61:b2:f1:48:cf:e6:
14:b7:82:49:d5:ff:11:a4:89:e4:ba:43:3b:7d:a3:
86:c1:3e:ee:05:f1:a6:84:c5:1f:90:6b:47:8b:ba:
3d:1d:c3:fd:ea:90:58:c3:65:87:83:11:6b:b0:88:
c3:fa:e7:67:40:46:78:04:01:77:c0:87:af:43:0a:
6c:98:0c:b1:01:68:ab:9a:52:9e:dc:39:7a:38:2f:
96:31:82:59:63:0d:66:2b:19:98:1d:4b:35:39:eb:
ba:6c:92:06:52:84:2c:16:55:98:8d:25:5e:77:51:
77:42:7f:28:0c:d7:11:73:ec:ad:f5:6c:80:f3:b1:
1c:e9:8c:b0:49:4b:9d:57:af:24:74:9a:ad:3a:a9:
93:66:8b:22:b7:67:bd:67:fd:c2:11:4a:e6:e3:06:
da:aa:78:40:5f:fe:70:19:2a:53:6a:eb:02:ce:a9:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:88:DB:69:94:3C:5A:41:C0:9C:6D:4B:24:D3:95:41:27:AC:2C:60
X509v3 Authority Key Identifier:
keyid:D1:A1:24:4A:3C:57:B9:FE:BB:68:D6:84:A8:32:B0:67:1E:3E:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aEkSjxXuf67aNaEqDKwZx4-TIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/0aEkSjxXuf67aNaEqDKwZx4-TIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/0aEkSjxXuf67aNaEqDKwZx4-TIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1d:bd:10:db:ae:b0:d4:a1:a4:52:8f:8d:93:c5:36:86:22:
91:d8:87:37:e1:17:1f:00:64:e2:75:c9:95:5d:2e:69:6f:b3:
95:2e:ed:94:f3:84:41:69:71:d5:d5:f3:23:e8:5e:b7:06:38:
17:ed:8d:39:d4:75:d2:7d:3d:20:42:f2:c9:b6:5e:77:01:0c:
76:d5:b3:c2:0b:23:dd:07:67:5d:f6:61:01:23:ef:f6:be:80:
d9:22:9f:9d:f8:5b:67:eb:28:2c:f9:28:d9:ea:82:01:e1:08:
d2:ab:50:7a:9e:85:78:56:e4:75:7a:65:b3:c1:4d:64:a6:d1:
5e:b1:bb:bf:14:8b:e2:12:db:d3:85:6e:ed:0c:e1:f9:bd:c9:
ef:03:50:97:f8:63:2b:39:b8:1c:4b:97:a4:3b:41:64:bc:51:
0e:6a:bd:4a:f9:d6:68:6a:f7:21:e6:55:f8:4f:35:bf:b2:6b:
5f:b1:b7:f9:28:26:4a:99:4c:22:60:93:e8:1f:2e:ca:dc:40:
0e:1a:4b:b4:de:76:37:9d:28:c1:1c:ca:b1:ec:da:7d:23:ec:
32:b6:fd:ff:7c:9c:19:13:14:4f:c4:e4:65:c5:1d:19:0c:db:
ba:49:a1:ff:74:f2:ee:2d:58:1f:fa:ae:68:b1:6f:e9:01:cb:
61:22:f0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:33:28 2025 by rpki-client