Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: 3Ukk4lYK/uq4psYgVL4zMnZ9dutpH8JTNL3tdeVdG04=
Subject key identifier: 9A:5D:E2:CB:7E:CD:1D:C0:75:BC:77:31:38:B1:DA:AA:35:E1:B6:B8
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 0194BBCDF53BA1AB993DB0F8E265055B699B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: DWowDQGQ5yNgx6ayhodRq1LUBHY.roa (hash: NLpjx7jhodNZVl2qQ5spSLVWb6VaFpApzVnCjvFyH/A=)
2: _4Ze51PkjeQX75n6sYes67AAloo.roa (hash: TazMQ9hYRcPMHpN2jE1CGgfAASu92VcJx8NusDceESI=)
3: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: /cVVc/mZms9jKMNfO8dYHOzV48dkRldl5JSAlOq8WDw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f5:3b:a1:ab:99:3d:b0:f8:e2:65:05:5b:69:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=9a5de2cb7ecd1dc075bc773138b1daaa35e1b6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:34:bd:9e:ce:31:42:e9:dc:e9:bf:50:33:
33:95:26:ae:36:51:5b:34:c9:eb:13:b7:1e:33:d8:
f5:ee:04:ca:d8:91:7f:66:0f:55:24:25:3a:6f:87:
56:53:4e:d9:a8:8c:f8:a0:ff:c9:c3:4e:4b:64:1f:
44:f4:1e:df:42:24:2b:68:02:15:9f:bf:94:50:a3:
51:8e:6a:27:77:3c:88:81:b7:71:46:94:d5:b7:0b:
6e:56:bd:ab:0a:a3:b6:7c:96:c9:57:41:76:ec:8d:
fd:e8:22:7f:14:34:aa:ac:f6:c0:c5:f7:41:96:52:
49:15:a7:37:73:9d:93:17:28:bf:a4:b5:24:f7:60:
81:6a:f8:17:e9:a1:55:a5:02:a0:e4:58:89:e2:30:
45:0a:d8:6d:d1:83:4d:b5:31:a5:b6:5d:99:09:8d:
d2:74:f3:c3:b0:f2:41:0f:45:40:ca:6d:1d:ca:4e:
99:9c:bc:bb:c4:ed:a5:dc:58:e2:8e:7d:1c:38:ac:
48:e7:75:18:09:23:c1:3a:d9:c6:8f:c5:28:e9:e0:
5d:5d:77:fa:bf:c2:f9:c6:60:7b:97:35:c7:85:53:
ca:d9:88:b1:b4:26:b1:ab:95:05:db:2c:73:13:b9:
7f:65:3a:c6:c5:2b:99:73:db:15:7a:27:20:e4:64:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5D:E2:CB:7E:CD:1D:C0:75:BC:77:31:38:B1:DA:AA:35:E1:B6:B8
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:cd:8f:f7:5a:f6:7c:18:9f:f2:38:45:11:fe:4a:e9:f2:46:
bb:90:bc:36:75:72:fe:f2:35:84:ff:36:ae:cd:bb:c4:05:af:
4d:9d:1c:1a:14:39:fd:2e:a6:cc:9f:6c:44:6a:8f:d7:25:27:
79:a6:65:aa:b2:b2:ff:24:07:8f:12:68:25:d7:3e:38:7f:37:
fa:1b:fd:0c:50:a9:99:73:ed:93:85:a0:24:9e:f4:ff:3b:85:
38:13:ac:3f:6a:24:7a:5e:75:e0:35:c1:f1:69:b4:1f:16:02:
27:80:97:2e:b1:c8:62:2f:30:fd:09:21:bf:4e:f2:10:ec:0b:
e7:73:88:3c:19:f6:3b:c6:f9:11:aa:27:72:e4:84:8e:db:5c:
ac:69:42:a0:1d:3d:f6:9d:2c:4a:1b:25:2e:14:f1:1a:0e:93:
5c:44:a4:2b:a2:87:b3:e5:96:0d:64:33:e1:3f:63:c1:a0:21:
2f:20:be:d5:7f:4a:78:e5:3c:01:88:87:a8:f2:ce:07:1e:fe:
8e:5d:02:10:c4:80:d7:ca:41:4d:da:95:41:4e:ad:e9:49:82:
6e:57:51:06:6d:71:7a:2f:7e:ef:5f:b5:2c:87:29:4a:a7:b1:
7e:f9:1a:c5:26:36:aa:89:97:75:e5:df:04:54:e5:98:8d:84:
e5:6d:ad:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:24 2025 by rpki-client