Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: gecPD4kdbVmRzSV+wxfKaSUrMf7LFvaQ5qcmNyrd4Ts=
Subject key identifier: 8D:4B:38:F5:DD:43:45:7F:12:C0:B2:5C:E5:E3:D7:D6:06:4A:B8:1B
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 0194BD4E4CC7021A6DAAAA3471CC92886520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 0527
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: casId6bSRHTNn5PL96DuG2TJvlE.roa (hash: L+JMLEBjCTLo3pT1VkKD/pB+PbvKkE5XXjy3KroLN1g=)
2: kqpQozJYbiOeF5Yf2auzSJ7PAQw.roa (hash: 1P+cwreujhRRyFPgrb8zcY4I1d2u+NU9now7YdN+EEs=)
3: oj3iDtlWEnyZOpJzAiAlB4UDFF4.roa (hash: IfBN2GCeO47guRCeMpP/j/B8Qqw6117P1ZV2//+hOLA=)
4: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: aWv8bv5R1ikmUgFG2PwuXIrdXaXJIOOQF/lh5B8n+q4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4c:c7:02:1a:6d:aa:aa:34:71:cc:92:88:65:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=8d4b38f5dd43457f12c0b25ce5e3d7d6064ab81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:12:33:a5:78:2f:30:10:31:98:bd:10:3a:
2e:6a:e1:f0:ed:ab:34:78:8a:ed:3f:8c:df:57:ea:
89:d5:43:04:c9:f2:5d:ab:30:cf:5d:43:93:44:9b:
4b:0f:f6:43:c6:3a:49:4a:af:37:5b:f1:3f:9d:c0:
46:87:10:89:6e:c1:42:f6:b3:09:07:c0:80:03:2d:
e3:1d:08:4a:0c:75:fd:2f:cb:b6:9d:be:23:b7:61:
cb:06:d5:43:5b:b1:fa:3e:28:f8:ed:ec:f4:81:17:
98:a8:ac:7c:ac:d8:95:5e:d1:0d:2b:2f:95:9d:24:
73:a1:9c:96:98:74:70:a2:03:2b:fc:30:6e:12:64:
f3:89:df:57:95:f6:23:9d:c4:16:a6:f5:f7:62:ae:
dc:55:fe:95:2b:6a:16:b5:a6:f5:0c:0d:fa:2f:71:
2d:bb:99:8a:10:09:88:a1:de:c9:e5:98:6b:a0:38:
2a:c0:ed:4c:71:1a:de:1e:3a:51:e5:f6:b4:62:8b:
f4:fb:ce:a1:1b:69:8e:00:c9:b5:06:ab:22:5d:11:
3d:ea:7a:6b:5a:29:8d:17:69:00:d2:2a:47:12:1a:
4b:a4:a4:56:0e:31:a1:06:e8:99:50:e8:a9:88:26:
bf:90:24:a4:c2:85:be:8f:8d:0a:de:84:22:74:99:
4c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:38:F5:DD:43:45:7F:12:C0:B2:5C:E5:E3:D7:D6:06:4A:B8:1B
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:75:f8:16:c3:49:8d:fc:ef:88:89:3b:3f:34:db:fc:94:5f:
76:4d:cc:80:75:27:af:08:8e:42:a2:3d:25:bb:fa:a4:10:13:
47:16:9e:46:8e:53:d0:fc:aa:f5:d6:6f:da:c9:10:5f:1f:ad:
87:ac:f3:f7:91:85:4a:66:cd:d1:7c:7a:2d:7f:dd:af:b2:1c:
b4:b5:c3:8a:a5:cc:b9:ea:c7:60:a3:af:7c:33:ac:48:63:d0:
68:a3:4e:e6:ed:bc:d9:67:56:07:47:52:08:e7:04:f3:f4:26:
22:e9:6a:7c:73:89:e5:22:14:8b:af:de:05:f6:a5:11:c2:f7:
db:63:e1:3b:af:8b:27:3f:8d:cf:43:9b:18:ae:9a:29:2b:cd:
e3:d9:0b:83:38:13:e5:79:57:ed:4e:a6:e0:06:3f:23:74:78:
cd:43:2c:fb:f2:fd:2f:56:32:b6:c2:a3:0e:83:a0:a5:4e:df:
bf:cd:b5:49:09:ad:b5:ab:22:da:05:82:45:97:2a:1d:eb:02:
3d:37:a9:f7:e9:bd:04:36:07:57:12:ae:0b:a9:a2:00:b5:41:
6f:a2:62:78:0c:31:f6:a0:46:94:1c:86:8e:77:71:fb:02:cd:
63:dc:ce:90:fb:f2:0e:2d:84:26:7b:7e:b5:56:50:1a:cd:61:
46:bf:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:24 2025 by rpki-client