Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
File: aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft (raw, json)
Hash identifier: 6R9Vtpcwvh6brDf1g2/I3I9s0zGW3+R1gfspuK4ytTQ=
Subject key identifier: 74:80:ED:C3:AA:71:07:78:6B:DC:4D:6E:53:73:2B:39:43:CD:C4:57
Authority key identifier: 68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
Certificate issuer: /CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Certificate serial: 0194BD85BC1B809E11B504D6B7DD14D4F31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:45 +0000
Manifest this update: Fri 31 Jan 2025 18:00:45 +0000
Manifest next update: Sat 01 Feb 2025 18:00:45 +0000
Files and hashes: 1: Hpq861GqA5RqLih08GH13MdllW0.roa (hash: 6UGmd69y3tVELywuvYudCcD/UUgHO86OmDHx4Pt/TNE=)
2: aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl (hash: DfpyWQesVYW+XwkN4K5QTs0tRSK+P9Ogbz3gLAoR8eU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:bc:1b:80:9e:11:b5:04:d6:b7:dd:14:d4:f3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Validity
Not Before: Jan 31 18:00:45 2025 GMT
Not After : Feb 1 18:00:45 2025 GMT
Subject: CN=7480edc3aa7107786bdc4d6e53732b3943cdc457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:dd:af:d4:02:10:a7:d5:21:57:21:9a:5a:
90:0a:b5:a3:fa:d3:82:be:e5:be:ba:a2:7c:7b:f6:
2e:31:c3:64:3b:c9:0a:19:bf:7d:89:c3:8d:7e:e7:
7b:38:8b:06:26:2d:fd:67:77:6d:45:8a:b3:45:4f:
22:8c:47:cd:cf:72:7d:43:72:0a:c3:66:47:36:d9:
41:79:9c:0a:e1:9e:e2:8a:08:d0:e2:56:83:9c:52:
3c:5a:b3:ae:0c:be:36:d4:3e:72:c2:57:3a:06:20:
0d:96:20:45:1d:22:57:d3:f4:21:31:60:8e:7e:3e:
6b:f1:cc:48:b9:be:33:d4:b1:fa:40:f1:cb:1c:02:
f4:93:d7:ea:35:ed:9e:f9:4a:aa:d3:fd:de:a9:81:
59:54:ce:81:65:2e:d8:e5:92:4f:ad:18:cb:cb:40:
42:02:f1:0a:4c:16:d4:99:82:ba:aa:c6:c6:2c:8d:
34:e6:2f:36:c8:00:58:f8:28:28:48:7b:29:ac:9a:
f9:22:f4:c9:ed:3c:bd:42:5e:1b:ea:70:88:d3:ce:
9d:3a:99:15:5c:20:81:60:43:1a:0d:5e:33:9f:0e:
de:b1:74:8d:f6:54:d3:bc:32:d6:23:f7:89:77:81:
93:5e:08:c2:3d:c7:3d:1e:07:40:00:c5:ef:97:29:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:80:ED:C3:AA:71:07:78:6B:DC:4D:6E:53:73:2B:39:43:CD:C4:57
X509v3 Authority Key Identifier:
keyid:68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9b:62:01:e4:bf:fc:8f:62:3c:bc:8d:86:05:93:ea:cb:e7:
38:a7:45:c1:1a:f0:af:7b:ce:da:ad:f3:92:51:2e:aa:85:88:
7d:ef:24:d4:78:b9:b7:ab:27:a9:e2:c5:48:92:1b:e8:02:4e:
b4:70:c5:a8:17:bd:17:d6:4c:f9:aa:02:c6:49:7a:9f:c6:6e:
fa:da:ca:99:79:44:51:40:d6:e4:30:72:cc:fa:3e:b8:f4:e7:
61:88:ae:95:aa:53:9d:dc:37:b4:9a:7b:d3:e3:67:08:4c:44:
d5:cf:a2:17:e1:5b:f7:f8:15:08:78:00:f9:69:9f:9e:2a:ac:
41:e0:36:41:4d:6a:78:da:ac:0a:93:ba:96:94:42:2c:68:1d:
f7:02:ee:7e:2c:45:14:37:41:7d:47:e8:fe:ef:7f:84:05:8a:
9c:2d:54:7e:b0:58:37:80:8c:f0:6f:61:8a:af:96:95:e6:bf:
71:da:53:36:c8:3a:3d:4a:1e:4d:51:b6:c8:5e:d3:71:00:55:
da:32:cf:0f:48:4f:ce:8f:86:cb:a8:2b:bf:d7:b0:31:9b:f4:
80:1e:68:fa:fe:de:f9:f4:a8:ab:99:1e:75:32:9a:06:30:30:
72:f0:e1:d3:74:a7:2d:33:ce:74:19:f0:3e:4e:a1:9d:d4:e7:
37:f2:47:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:43:27 2025 by rpki-client