Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: 4fC/+Cv8M0GDbHKYFG9Wj5Xl5sSs6m3cm+6qAaAnzew=
Subject key identifier: E2:78:E1:84:27:AA:D4:D4:06:E8:24:1A:1B:FB:5B:DE:37:F3:FF:F5
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 0194BD855F20C8D516D33BCB18346AAB5F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa (hash: tUW+ah0ofkg4/88FsRUE5OcUfQMkD6Zq0UYxy47va9A=)
2: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: gqVghKLAaWFzSwuHLGlUOTNiUZFzMF4YtpA8AHgQ7fM=)
3: z4qOlf0RFKvmrLipGybi9vRSQo8.roa (hash: ekx6TWWmFCXsO4PnzGvIUJMQy90Loghm7Y0vzWHJWE8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5f:20:c8:d5:16:d3:3b:cb:18:34:6a:ab:5f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=e278e18427aad4d406e8241a1bfb5bde37f3fff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:b1:73:5a:6d:bc:4e:32:a2:2e:e9:5f:7f:
07:c5:c4:29:7b:5b:a1:ef:e7:de:5d:1c:0e:76:95:
f9:d8:44:65:7c:3f:b1:a1:80:a3:d5:44:21:d4:39:
c6:c7:15:69:d3:34:b6:20:ae:1d:00:ab:2a:a3:eb:
a9:b0:03:bf:da:2c:c8:27:56:88:df:c8:9a:32:57:
5b:3a:50:53:d8:c8:1b:89:6e:b2:67:a7:fc:5b:be:
01:4b:b5:ae:57:26:fb:11:b9:82:49:0c:12:9b:71:
73:78:ef:f5:06:bc:b8:c3:78:26:5d:72:fa:02:8c:
6c:37:b8:cc:2d:59:a1:9c:f2:8b:f7:36:fa:ff:83:
10:e1:96:4e:da:5b:0b:59:b0:41:0a:b2:7f:e8:f1:
c5:4c:d8:70:94:3a:2c:01:17:48:b8:45:7b:3d:f7:
ff:de:c9:6f:b7:de:09:3c:0d:b6:1a:ed:b7:5b:c5:
ce:01:a5:64:05:0e:31:09:42:dd:1e:90:f9:70:33:
02:66:d5:72:38:d1:77:8b:2c:84:31:e3:9d:16:ef:
62:77:1d:68:57:2c:a7:02:48:39:16:f5:82:56:3e:
d1:74:7c:36:98:39:55:e2:6f:01:d5:5e:ba:c0:dc:
c2:70:c2:1b:cd:e4:9c:48:18:b9:75:6c:56:d6:0c:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:78:E1:84:27:AA:D4:D4:06:E8:24:1A:1B:FB:5B:DE:37:F3:FF:F5
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:38:00:f9:cb:ef:8d:80:01:80:9b:dc:db:38:a9:ec:45:9f:
21:75:f1:95:6b:7e:c1:9f:10:e3:48:8b:b8:3c:2a:19:af:53:
27:81:ea:ca:29:7f:4d:30:b8:59:ae:9f:70:7b:1a:40:dc:c6:
b5:8b:dc:60:69:f4:72:60:11:19:3e:2c:b7:68:24:6a:ce:c6:
37:76:db:31:02:5c:c2:b4:f4:48:d8:c1:b2:15:1a:9b:76:cf:
20:06:04:95:17:49:e7:67:8b:7e:04:dc:4c:ee:09:b9:cc:53:
78:fa:7e:65:a5:4f:8c:3f:82:49:72:48:c1:9d:46:03:0d:10:
fa:38:84:6d:05:76:9e:c5:fd:17:9c:7d:21:4a:5e:90:96:a5:
97:d5:02:72:50:6c:9c:60:44:6d:b1:9e:3c:59:fa:07:0a:87:
31:94:96:ad:e8:88:eb:27:f9:49:d6:47:a3:1c:da:93:82:a2:
31:09:6e:8b:30:81:43:b8:40:48:de:b1:5d:c6:6f:2e:4f:29:
7e:c5:2d:7e:7d:f3:0b:fd:3c:d9:62:6c:61:62:1e:9d:a7:0c:
d0:16:59:18:51:cb:15:81:cc:fa:8b:e1:06:e1:00:bf:9e:ff:
fa:3f:bc:72:18:ba:5e:3c:3e:45:b2:0c:85:c5:17:3a:f5:07:
0b:64:09:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:46 2025 by rpki-client