Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json)
Hash identifier: 7uacTJ9er/FSalScAijlGMn6YlCGn+0YioOlNYemo44=
Subject key identifier: 08:45:7C:97:B7:8A:A0:EE:BA:71:B3:E2:3A:16:05:98:43:93:5D:4B
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial: 0194BCE0C26155D0AD0F3A2CD17115C6AD8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: 1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa (hash: eIRoaJMdc/l4AU70hG0PC/LPtYaLw4xgou2xPhRFPhE=)
2: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: L/aAQLwiTZgUMbIZDPEiEkpnagqMC5Op/ZSGisu1Xkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c2:61:55:d0:ad:0f:3a:2c:d1:71:15:c6:ad:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=08457c97b78aa0eeba71b3e23a16059843935d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:09:2d:09:70:0b:6c:bb:f9:83:09:35:f0:
d6:c1:9c:33:64:c8:d5:1d:10:af:8b:e3:08:a1:1d:
d1:87:6d:6e:cb:f9:f8:73:74:d7:d8:0e:ec:37:87:
ae:9d:37:3d:03:ce:7d:d1:9c:9a:75:61:c8:59:f0:
d4:03:62:38:c9:c5:79:78:7d:42:a0:3a:82:01:31:
b1:17:e2:5a:38:cd:2c:92:22:1b:5b:55:e7:67:58:
94:ed:f8:27:e9:ee:25:22:40:bf:aa:62:ea:d8:99:
1f:48:3e:16:9f:ad:4d:cf:05:72:e1:43:f3:d2:9f:
fc:b8:09:27:73:6d:a9:79:18:81:df:5b:ff:a8:cf:
4f:c9:e6:09:9c:67:79:19:41:19:00:f3:04:6d:6b:
b8:2d:53:ce:6e:40:f5:ea:14:7d:e6:1a:2c:4e:5e:
e1:ba:fa:3b:ce:f1:3e:aa:6f:3a:22:8a:30:b1:f8:
10:39:49:c9:70:13:c7:41:a3:fd:49:0c:ec:68:32:
0f:5b:e5:e4:61:9e:08:21:ff:dc:f8:9e:2c:4f:bc:
1d:cd:0d:6d:94:ef:3b:47:43:95:4d:73:cd:57:47:
4d:f6:cc:28:c6:47:ec:56:b5:7f:e3:ae:62:37:cd:
5a:5c:94:65:d7:01:69:dc:62:ff:a3:3f:94:ce:0c:
97:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:45:7C:97:B7:8A:A0:EE:BA:71:B3:E2:3A:16:05:98:43:93:5D:4B
X509v3 Authority Key Identifier:
keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:54:6a:e6:f5:8b:98:87:76:31:e3:e0:91:40:08:d1:40:ef:
70:8e:27:c0:8d:6a:8a:25:08:98:9d:33:78:b5:06:35:42:ed:
34:01:61:e5:82:a8:c5:0f:ff:f7:85:42:0a:e0:68:1b:67:15:
3c:34:4a:dc:c0:25:2e:a8:bb:e4:a6:d1:07:b5:f0:ee:ac:34:
0d:d1:21:28:53:c2:ff:45:30:af:84:6c:64:d6:3a:74:fb:79:
38:73:de:55:cb:21:93:f8:d0:17:ab:54:71:e2:01:e2:32:b2:
a1:a2:48:69:90:79:f8:4d:af:08:63:c5:90:9b:cc:78:86:b6:
43:c5:b6:45:cc:24:fb:ff:80:07:57:fe:52:a8:8f:26:a5:dd:
e1:dd:e2:42:33:28:5d:05:b4:4a:6a:e8:cb:3c:4e:c5:d6:28:
74:8e:f3:85:94:f7:a9:3e:15:30:c5:26:84:56:3f:b2:fe:70:
bb:e4:15:2d:fd:fc:1f:b1:21:e2:01:f5:7b:54:95:0b:3e:f6:
88:47:5e:e5:f4:c8:b7:73:5d:e6:c8:ed:d2:34:87:7c:e6:af:
10:42:af:00:a6:87:85:76:30:08:3d:bd:2e:7f:4e:aa:90:f2:
cf:80:fc:98:a5:d1:31:7a:12:28:a3:45:58:85:be:fb:3c:eb:
44:0e:fa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:38 2025 by rpki-client