Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: WlHPeSGrway4GhORlPeZFK8Zz9A+LJjCTcKcXFMB6xk=
Subject key identifier: 5E:8A:F5:C2:BB:A3:76:68:48:1B:47:48:DA:59:AE:E2:D1:A5:20:2D
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 0194BD4E89CC70159D36827F63A20BC0C509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: TUphJ-jTdc6RyopsPbQVUooNovI.roa (hash: 5SMLcPW5pd+tHnvqH88hThCDDFketkICiSOllb1LCN8=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: ynEEcmk+iKK1V2k9o9zwMw+sqIGVAMFxKfHSM+vRPrE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:89:cc:70:15:9d:36:82:7f:63:a2:0b:c0:c5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=5e8af5c2bba37668481b4748da59aee2d1a5202d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:cc:e3:81:01:bb:35:46:85:bb:34:78:f5:
b5:76:a5:a9:2b:33:eb:3f:37:91:44:a2:27:9a:a2:
a9:4b:3d:d8:ba:57:00:10:af:8d:41:26:c3:22:ad:
08:a5:ef:05:b3:b2:df:93:01:d3:1a:a2:2b:78:78:
9f:3b:08:d8:1e:be:aa:c0:c2:33:07:0e:9b:61:fa:
74:2c:6f:4f:09:ca:90:5b:1d:2f:28:d2:fe:e4:e6:
0e:b9:8c:86:40:e7:29:af:26:b0:a8:23:92:57:23:
73:8e:ef:21:6a:47:70:62:87:f7:a8:34:ca:36:93:
fd:08:b4:bb:75:ac:c5:e7:23:86:6a:13:12:c7:94:
f2:84:c2:13:af:1d:b9:2c:ce:75:50:20:0a:dc:3d:
41:30:bd:b8:62:41:86:96:21:f2:3c:fe:65:07:0d:
b7:6a:fd:7c:88:38:a8:54:f9:c5:cc:10:35:e8:12:
8a:c3:e6:bb:c3:0e:7d:2d:fa:63:df:51:47:95:bd:
01:c3:53:57:84:39:74:86:8c:a4:17:0c:16:eb:83:
a0:2f:c0:e0:d0:47:f4:63:f2:43:64:de:8a:09:8d:
5b:c2:0f:3c:8f:da:ae:26:8d:b1:d0:7b:ab:c6:0b:
7e:4d:cc:c7:81:b4:51:c2:da:de:4d:81:48:58:74:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8A:F5:C2:BB:A3:76:68:48:1B:47:48:DA:59:AE:E2:D1:A5:20:2D
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:34:4d:e0:3b:98:fc:93:27:19:d5:b7:3c:bb:df:f2:e9:36:
39:8d:a4:8d:a3:ba:4c:15:45:0b:ab:5f:df:bb:ed:c9:04:ad:
64:e8:03:df:60:25:c4:2d:8f:29:1b:b0:4e:da:41:f6:13:51:
92:8c:52:69:61:4c:60:01:d1:ba:b0:df:d6:16:e2:4f:ea:c0:
4f:31:d5:9a:b3:be:11:65:70:e2:d3:ae:29:2f:a9:ec:e5:5d:
64:00:0b:bb:1c:e2:53:fe:1f:63:fd:15:dc:ae:35:9e:c0:e2:
2d:20:bf:b4:63:25:93:83:95:3e:d5:aa:21:01:20:06:2f:a4:
16:a9:10:60:0a:8a:f9:f4:a4:3a:79:65:f7:b4:5f:59:60:7d:
80:81:66:2e:c7:db:68:d3:2a:3d:99:30:32:7d:3e:5e:94:90:
97:93:e7:6d:85:30:17:a5:98:3e:83:a7:98:d6:9f:db:cf:cc:
c2:62:47:b0:9d:ca:f1:92:35:99:c9:ac:1f:de:73:b5:96:78:
73:f9:17:64:c5:71:f1:29:8a:c1:f0:48:ca:6e:db:39:1e:fb:
5a:45:73:31:47:cb:cf:b9:e8:24:3d:f3:57:fe:f1:1b:74:f4:
e4:c2:3b:b6:34:d3:9b:63:c2:d5:19:90:a8:75:8f:d8:07:dd:
03:30:63:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:47 2025 by rpki-client