Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
File: afM-l5tD6I0OXsp5h5R9sh73yrk.mft (raw, json)
Hash identifier: NMV5JUsN8gwC8Y6lSgV2RdKEoSfks3Z+58O9nH7S04s=
Subject key identifier: C4:5C:9A:7E:2D:78:34:F6:10:4B:9D:74:38:5A:BF:E2:D3:87:85:ED
Authority key identifier: 69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
Certificate issuer: /CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Certificate serial: 0194BC3C1FBF926E1D26D789DA0C5A97433B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
Manifest number: 02E3
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: afM-l5tD6I0OXsp5h5R9sh73yrk.crl (hash: 2GkSLn3SKrdDz+QS9qtxRpRA2u7pt/o383uAlyUxLhc=)
2: rjuN-ZTOCGAomaycIkzHFBIupdk.roa (hash: mpitT9m9PBhweeULsMgo7mL5tvByadSSpZctsThk9Hg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1f:bf:92:6e:1d:26:d7:89:da:0c:5a:97:43:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=c45c9a7e2d7834f6104b9d74385abfe2d38785ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:2a:34:c6:a4:f4:3e:78:78:7a:b1:6e:9c:
9f:a9:60:52:07:41:9f:9c:12:c2:a8:c7:b5:5d:21:
b9:de:d8:67:9d:2d:e4:f6:82:5c:fb:e1:59:07:82:
59:fb:dd:8d:36:4f:66:dd:f6:d0:9c:48:f4:ab:ad:
3c:de:4b:33:81:cb:28:d9:cc:94:4f:f7:42:cd:3d:
9b:b6:7e:3d:11:4a:65:e7:e9:50:6e:ca:a8:b9:08:
d3:81:85:a2:a4:f4:c9:56:96:66:5d:e0:72:3b:66:
14:5f:a8:73:cc:c2:de:dd:ae:d7:58:fc:d1:a1:78:
2e:84:46:ae:4b:6d:f1:1b:53:f2:7d:da:c1:83:00:
63:69:7a:94:24:a4:37:53:03:94:79:20:9e:bb:94:
ec:a2:1d:99:12:e8:4e:72:d6:5e:17:f0:0b:f3:c8:
ef:82:6b:aa:7b:92:a0:5d:42:4b:94:de:ca:26:3f:
cf:ef:d5:a1:32:dc:bf:f3:cb:b0:35:bc:90:4a:8b:
42:93:a1:d4:f9:ce:fc:74:89:6f:de:17:1d:f6:95:
80:2d:f3:18:0a:c5:09:5b:ca:10:6b:56:af:1b:b2:
70:2c:1c:b8:d2:fd:c6:38:76:76:6b:37:5d:e7:7e:
46:92:f7:65:49:3b:1d:bf:08:f3:1e:55:59:33:2e:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5C:9A:7E:2D:78:34:F6:10:4B:9D:74:38:5A:BF:E2:D3:87:85:ED
X509v3 Authority Key Identifier:
keyid:69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cc:55:37:0a:09:ad:31:7d:c8:93:78:8a:e6:5b:0c:87:bf:
7a:a9:4b:10:7e:8b:b5:9b:1b:70:4f:aa:6f:96:9e:67:f0:cd:
f0:ac:2b:1c:a8:b9:08:0d:46:f1:91:59:37:42:a9:c5:31:6e:
57:a5:7c:78:12:f6:71:0b:83:1b:8c:48:8b:d3:45:8b:76:89:
a2:ec:4d:80:7e:80:36:53:07:f7:c9:44:e1:3a:28:b3:3f:be:
9b:31:ed:de:fd:f4:65:9c:03:69:fe:b8:c6:45:cb:23:3d:df:
d8:1b:ba:af:d4:7d:c1:2d:8e:d8:59:17:5c:9b:76:2f:9a:84:
04:2c:3a:de:f6:30:e2:6d:d0:14:9e:e4:ca:9e:30:a2:ab:e9:
f2:53:42:c5:cd:bc:a6:cc:90:40:16:54:1a:48:d0:eb:03:85:
4b:a1:ea:e2:f4:21:5d:54:dd:83:c4:36:c3:96:da:b9:06:78:
21:62:2f:19:7e:2f:92:80:a6:1b:99:78:cf:56:78:cf:a9:6f:
d9:0d:e7:8d:ec:06:3d:6a:16:65:81:45:05:4a:65:15:23:26:
c8:91:c4:2d:69:34:ab:56:dc:9f:4d:c8:00:b3:3b:78:98:02:
54:c4:b0:d0:c3:6e:88:50:7d:84:0b:93:8c:1f:3e:ff:71:f4:
da:ae:a9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:24 2025 by rpki-client