Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: iP4kNRvZL+RSptA2roO/leOA3BxI4z6Ulc7eogE49Ds=
Subject key identifier: 5D:CB:33:8C:F5:40:FA:64:1B:C9:3F:31:BA:03:9B:65:59:02:E1:B4
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 0194BCA9AB1B6452806231E6421C8F92D8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 0EB4
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: MMauTW5D41slq5n1_BTnfOz6WE4.roa (hash: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=)
2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: rVfhDfBxeVRwyxguD78VX93sZTl11bulTziU7PVQauA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ab:1b:64:52:80:62:31:e6:42:1c:8f:92:d8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=5dcb338cf540fa641bc93f31ba039b655902e1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:24:0f:81:b9:36:3d:53:f6:21:1d:1c:97:
fa:3f:c8:5c:bd:4b:be:e8:b1:80:2c:6e:66:ef:7e:
45:63:b8:6d:d1:21:13:d4:a3:51:c7:18:6b:0b:45:
d4:50:cf:aa:82:80:03:47:90:0c:21:40:46:0a:d5:
82:bb:bb:86:97:f3:72:28:1b:de:bf:19:7f:de:a0:
24:0b:6d:90:08:02:0b:b6:4f:ee:6b:cb:e3:f3:2a:
d7:fd:0b:d1:6e:9e:7b:d2:b7:6a:1d:42:c0:47:28:
3d:67:16:89:1f:28:df:4b:07:2e:c1:c7:26:46:08:
f0:b9:e6:0e:e8:c0:87:ff:86:0d:92:37:3c:47:c4:
c3:f2:56:48:5c:d7:38:07:50:34:5a:a0:a8:38:2e:
74:32:4c:3c:3f:7b:ea:d5:87:12:df:04:2e:ea:08:
59:76:6b:54:6d:65:e7:f5:55:76:96:a2:f8:80:92:
24:a2:3e:ed:f4:85:01:8a:40:ec:35:ac:7d:50:d4:
21:d8:4c:15:e2:2e:ba:61:5e:26:5b:f1:87:14:7e:
04:7f:6e:47:b9:64:4f:ea:40:e6:c2:3e:56:6d:72:
c4:1e:5d:06:5c:c4:46:ce:fc:72:4b:9e:50:64:60:
1f:41:ef:f2:04:25:3e:2f:9d:64:6c:2b:01:2f:3b:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CB:33:8C:F5:40:FA:64:1B:C9:3F:31:BA:03:9B:65:59:02:E1:B4
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0a:db:75:c4:19:7d:ad:b6:ff:c3:5a:d8:4f:92:37:5a:91:
e2:16:f6:29:8a:1f:88:24:40:24:19:82:0b:4b:00:71:e9:47:
60:88:01:fd:71:b6:4f:b5:66:a8:be:f9:c6:fc:3f:60:da:96:
83:9d:42:4c:4b:b1:20:ba:67:82:5b:66:ab:c6:17:85:64:15:
d5:3b:b3:c0:f2:62:08:cd:77:86:1e:99:07:81:71:b4:32:3b:
42:e2:3a:ec:5b:17:39:4c:81:21:31:4e:a9:9d:7e:2c:09:0a:
19:f6:27:86:87:db:05:e8:ed:b4:c1:40:8d:43:49:21:c4:1c:
48:73:a0:37:09:87:ad:df:98:74:ff:9e:4f:c5:95:0c:45:02:
93:38:6e:17:dc:a9:84:c9:6d:6e:84:40:81:5e:d1:77:b8:fa:
f6:46:72:2d:e1:49:66:7d:cf:e2:44:7d:fb:ad:0b:67:40:f4:
44:21:be:17:60:9e:b5:9e:d6:4b:ff:a9:05:ce:e6:5a:a9:06:
67:87:dd:89:0a:41:70:6e:67:66:33:6f:06:f2:ec:02:49:ef:
ab:5f:18:f1:32:ae:51:66:40:3e:f8:21:56:a3:a6:e3:b9:5c:
b7:a7:95:4d:a8:2f:bf:2e:93:af:c0:09:ec:4e:3b:c2:80:2a:
e7:1d:62:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:02 2025 by rpki-client