Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c0cce-0752-4e5a-ad5a-2d402d55ad5a/1/a8Ef6I7on9gaZn_z3QAj73dGlzY.mft
File: a8Ef6I7on9gaZn_z3QAj73dGlzY.mft (raw, json)
Hash identifier: 9NcL7ObDPr8QWEb8I6tii1w8+IfTkZGUl2a29zL9HTo=
Subject key identifier: A6:70:EF:63:0D:90:BF:DA:95:39:64:54:66:AC:2C:8C:AD:74:CE:E2
Authority key identifier: 6B:C1:1F:E8:8E:E8:9F:D8:1A:66:7F:F3:DD:00:23:EF:77:46:97:36
Certificate issuer: /CN=6bc11fe88ee89fd81a667ff3dd0023ef77469736
Certificate serial: 01953F8DFE2F86CEA35296D78F12DCFFEDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Ef6I7on9gaZn_z3QAj73dGlzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7c0cce-0752-4e5a-ad5a-2d402d55ad5a/1/a8Ef6I7on9gaZn_z3QAj73dGlzY.mft
Manifest number: 06EA
Signing time: Wed 26 Feb 2025 00:00:25 +0000
Manifest this update: Wed 26 Feb 2025 00:00:25 +0000
Manifest next update: Thu 27 Feb 2025 00:00:25 +0000
Files and hashes: 1: a8Ef6I7on9gaZn_z3QAj73dGlzY.crl (hash: Pmx0purhrMOqk5Faw4DJdr9Ok3qVXfnlGQrj3Iq0nIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3f:8d:fe:2f:86:ce:a3:52:96:d7:8f:12:dc:ff:ed:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc11fe88ee89fd81a667ff3dd0023ef77469736
Validity
Not Before: Feb 26 00:00:25 2025 GMT
Not After : Feb 27 00:00:25 2025 GMT
Subject: CN=a670ef630d90bfda9539645466ac2c8cad74cee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:6d:4f:2f:e0:95:77:75:fb:6b:ad:c6:24:
e4:7b:99:25:e3:25:10:9c:70:2d:1b:8a:1c:03:d3:
9f:03:bc:5c:3b:73:e0:c2:ec:d9:7b:8d:57:b9:fe:
8e:4b:3a:29:3d:97:ab:b7:de:a4:fd:f5:1f:54:bf:
6c:12:38:36:83:67:9c:ac:2c:47:91:af:7a:33:d0:
f7:4c:73:53:4d:ec:6d:35:31:fd:09:47:67:ee:93:
09:d2:d2:e3:d6:25:89:3e:9a:62:95:f9:5f:22:9e:
2d:89:53:ea:b5:6f:ab:30:91:f9:96:2d:c8:bf:1d:
a5:45:f4:8e:50:12:ec:a9:af:3a:a5:4d:95:bd:fc:
0e:0c:f5:bf:75:15:29:ec:c0:d8:d0:39:52:b8:c9:
2f:a5:af:a6:47:d4:d1:df:d3:24:31:ac:9c:ae:3a:
09:2d:ab:2e:a2:12:e2:72:8e:d8:b7:90:97:ab:0d:
38:2e:55:e2:43:cd:c9:88:2b:66:38:63:58:54:a9:
2b:8a:6e:5f:a1:a0:45:f7:c4:28:52:ff:80:e6:b9:
67:9a:c7:bd:7e:39:9c:90:92:34:c9:57:05:fb:67:
91:c7:81:83:f2:54:05:74:75:ca:ba:f8:9c:36:a8:
75:7a:33:24:f4:44:12:02:8a:a0:41:0f:7d:e5:55:
dd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:70:EF:63:0D:90:BF:DA:95:39:64:54:66:AC:2C:8C:AD:74:CE:E2
X509v3 Authority Key Identifier:
keyid:6B:C1:1F:E8:8E:E8:9F:D8:1A:66:7F:F3:DD:00:23:EF:77:46:97:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Ef6I7on9gaZn_z3QAj73dGlzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c0cce-0752-4e5a-ad5a-2d402d55ad5a/1/a8Ef6I7on9gaZn_z3QAj73dGlzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c0cce-0752-4e5a-ad5a-2d402d55ad5a/1/a8Ef6I7on9gaZn_z3QAj73dGlzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:54:d2:80:aa:2e:50:1a:1c:66:6e:b0:e3:fa:47:d2:7e:b3:
6a:fe:ca:c3:fb:f7:68:2b:80:8b:15:20:a7:69:15:a3:2b:1a:
63:c6:29:b8:80:5c:bd:fa:4b:8c:90:00:06:10:2e:d3:82:26:
7d:8e:4e:d7:64:08:e3:e8:12:3f:03:47:65:00:21:01:5a:d1:
1f:da:ec:00:20:da:ab:f0:c5:9c:9e:cd:05:02:c4:b1:a0:24:
3d:1c:09:25:ec:c0:f7:63:bc:0e:04:db:a3:2c:9d:92:47:06:
cf:45:18:41:9e:12:a2:42:c3:6a:df:29:b1:a7:99:df:3a:fd:
75:11:9b:53:e1:08:76:6a:d9:a2:26:f4:06:cc:9d:18:f6:55:
89:44:2e:aa:c1:79:b6:e6:dd:c3:13:86:6e:90:d6:c8:3c:7d:
36:f8:90:f2:bd:d9:7a:b1:2c:49:f3:8e:d0:67:75:e2:e8:67:
f8:64:99:f5:4c:fa:39:5d:ef:7b:25:f0:96:76:99:90:27:80:
93:30:79:99:9c:24:d1:db:72:86:36:3c:4c:d2:11:43:bd:54:
a0:fb:b5:36:16:c9:c1:64:65:b2:57:40:e4:c2:b7:46:cb:75:
b8:9d:7d:33:c8:f1:4e:f7:c8:d4:0c:f5:ac:1c:24:04:3c:1c:
4d:c9:69:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZU/jf4vhs6jUpbXjxLc/+24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzExZmU4OGVlODlmZDgxYTY2N2ZmM2RkMDAyM2VmNzc0
Njk3MzYwHhcNMjUwMjI2MDAwMDI1WhcNMjUwMjI3MDAwMDI1WjAzMTEwLwYDVQQD
EyhhNjcwZWY2MzBkOTBiZmRhOTUzOTY0NTQ2NmFjMmM4Y2FkNzRjZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi9tTy/glXd1+2utxiTke5kl4yUQ
nHAtG4ocA9OfA7xcO3PgwuzZe41Xuf6OSzopPZert96k/fUfVL9sEjg2g2ecrCxH
ka96M9D3THNTTextNTH9CUdn7pMJ0tLj1iWJPppilflfIp4tiVPqtW+rMJH5li3I
vx2lRfSOUBLsqa86pU2VvfwODPW/dRUp7MDY0DlSuMkvpa+mR9TR39MkMaycrjoJ
LasuohLico7Yt5CXqw04LlXiQ83JiCtmOGNYVKkrim5foaBF98QoUv+A5rlnmse9
fjmckJI0yVcF+2eRx4GD8lQFdHXKuvicNqh1ejMk9EQSAoqgQQ995VXdywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZw72MNkL/alTlkVGasLIytdM7iMB8GA1UdIwQY
MBaAFGvBH+iO6J/YGmZ/890AI+93Rpc2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThFZjZJN29uOWdhWm5fejNRQWo3M2RHbHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS83YzBjY2UtMDc1Mi00ZTVhLWFkNWEt
MmQ0MDJkNTVhZDVhLzEvYThFZjZJN29uOWdhWm5fejNRQWo3M2RHbHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS83YzBjY2UtMDc1Mi00ZTVhLWFkNWEtMmQ0MDJkNTVhZDVh
LzEvYThFZjZJN29uOWdhWm5fejNRQWo3M2RHbHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1TSgKou
UBocZm6w4/pH0n6zav7Kw/v3aCuAixUgp2kVoysaY8YpuIBcvfpLjJAABhAu04Im
fY5O12QI4+gSPwNHZQAhAVrRH9rsACDaq/DFnJ7NBQLEsaAkPRwJJezA92O8DgTb
oyydkkcGz0UYQZ4SokLDat8psaeZ3zr9dRGbU+EIdmrZoib0BsydGPZViUQuqsF5
tubdwxOGbpDWyDx9NviQ8r3ZerEsSfOO0Gd14uhn+GSZ9Uz6OV3veyXwlnaZkCeA
kzB5mZwk0dtyhjY8TNIRQ71UoPu1NhbJwWRlsldA5MK3Rst1uJ19M8jxTvfI1Az1
rBwkBDwcTclptw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:20:39 2025 by rpki-client