Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: Kp2ZtVXIz2khUhMVvQ0LuQUIMdMX4m6jhbkaSdX0VqY=
Subject key identifier: F8:37:73:93:D7:A9:19:2C:ED:78:FC:F0:25:A5:06:B1:62:9E:32:F4
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 0194BC3C5FB19A26E5B2D0D0C5F469514F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: P1en3sohe2DbyNzA71GiPNHyPMA.roa (hash: V8PIuABmlXR/9zmJ4CmVSW6y4BQ+AXThzkLiJ6dRREE=)
2: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: KmZ9ZMlaRv8TkD9Wh5E4frF5zC9uOcNXbl1sZJrkAGk=)
3: jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa (hash: 2Itp3B8O+5dmTKgGLY+BCEZM9Sy2Ho8d4oe+RtL2s4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5f:b1:9a:26:e5:b2:d0:d0:c5:f4:69:51:4f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=f8377393d7a9192ced78fcf025a506b1629e32f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:90:2f:d5:18:d7:cf:c2:a4:8d:da:aa:e3:
ed:d6:47:aa:d0:7e:81:81:58:32:c2:d1:0d:7d:df:
09:57:24:af:34:35:c6:4b:ea:7c:a9:41:5f:32:53:
77:98:55:49:ae:d7:a4:4d:8e:26:31:8c:97:1c:f1:
f8:30:cf:11:40:a2:c0:4e:be:bc:f6:24:0b:7d:68:
97:56:0e:13:47:80:10:19:83:59:4d:29:90:a1:0a:
5a:63:16:86:92:12:13:10:32:bc:34:de:69:31:43:
dc:46:5f:b7:18:b9:e9:89:ea:59:96:1a:94:46:26:
66:f7:dc:27:a7:78:d3:46:05:33:b4:70:a8:c7:3f:
b9:9c:1f:62:ca:f2:3d:cf:11:fd:06:62:9b:37:93:
79:ca:7b:42:fe:cb:e3:26:df:09:08:fd:f7:5c:54:
e9:4e:f0:90:7b:8f:19:55:5f:82:ad:a0:ce:59:89:
8c:f6:c1:ba:33:9c:8b:a8:18:cd:be:bc:af:f7:d4:
0d:3a:22:a1:19:ee:ac:71:31:08:33:3e:64:97:12:
88:ad:80:66:04:c9:7b:66:c5:0f:3e:18:fd:73:43:
e8:b6:3d:88:9e:67:b3:75:1e:05:c8:66:53:6e:0b:
fc:84:2c:c6:13:c8:26:a8:cb:ca:f8:08:a5:bf:fe:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:37:73:93:D7:A9:19:2C:ED:78:FC:F0:25:A5:06:B1:62:9E:32:F4
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f0:ce:1d:43:17:84:43:bb:01:4c:80:f7:bb:ec:ec:43:5f:
0f:ab:e0:75:08:64:de:07:d2:d4:c2:09:dd:70:8e:48:0b:74:
92:82:6f:a6:2e:1f:db:3b:d7:d4:ff:e2:6d:41:f0:a3:05:5b:
2e:36:58:db:19:4f:e3:88:3a:49:bd:8d:9c:89:5d:79:0b:5e:
bf:3e:3c:1a:ed:ae:dc:37:eb:3d:30:3c:19:f2:35:bd:7a:fe:
21:1a:4f:c3:a1:9f:bb:55:a2:69:5c:6a:cf:59:b5:6b:12:a1:
f5:45:fd:77:da:9a:44:67:9e:eb:f9:5f:65:55:cd:df:59:df:
8c:a8:61:d8:44:48:0f:61:9f:49:0f:c3:e0:e0:a3:95:a6:9e:
6d:72:d0:3f:64:48:af:53:be:6c:d6:69:bc:78:72:45:6a:7f:
52:aa:f6:27:01:5e:ef:d0:2e:e8:6b:ff:a6:1f:8b:ed:95:89:
2f:6c:35:91:c5:ab:63:44:d6:94:38:9a:d6:bc:61:33:2c:08:
19:e5:31:dd:56:2c:95:19:47:48:a2:90:01:f6:1b:34:03:dd:
be:c1:b2:c8:a1:54:0d:e0:4d:d1:90:13:ae:45:34:86:96:0d:
b3:47:1a:74:19:85:77:23:47:40:55:e3:ef:4a:89:4c:83:23:
0e:0c:89:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:54:56 2025 by rpki-client