Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: EkIt9A71XUlHnBElcEu0Y7jTeq1VfBhTuffEf+0YsUo=
Subject key identifier: 25:98:FC:7E:8A:7F:01:EF:5B:A1:A4:9F:55:F8:26:54:D0:1D:67:D2
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 0194BC3BE9D4B29C3FB827E6C3641B73A5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 086D
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: 2K0uKSMybLcdA8jtmNxG5Ki84QY.roa (hash: 5mE2Q4t19bkfyumGCGmg6dxDWvIkT1fJkVfrU9nbK78=)
2: 6FGsGLFn7A73WCT0SPiFHEX5nI8.roa (hash: 7Hh/w12WqCnZ+Rx2BO6W7oVN9o4uT5fOf8UbGGxI1Zw=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: aA1oZLWcGrKr6J/noXdlkqyv+TNNa4J5cn4YJb9qJgU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e9:d4:b2:9c:3f:b8:27:e6:c3:64:1b:73:a5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=2598fc7e8a7f01ef5ba1a49f55f82654d01d67d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:b6:f5:f0:17:05:5c:fa:eb:7c:cf:b5:a6:
42:00:c7:fc:98:ec:ff:6a:ec:aa:34:09:b1:46:9a:
5a:2e:41:ca:53:8e:ab:08:77:5f:94:bc:be:1b:1a:
83:6e:cc:9e:f1:7f:8a:57:d5:54:30:b6:80:66:43:
58:dc:ba:49:e2:6f:63:33:18:da:16:67:aa:82:7e:
1a:49:94:80:05:1c:5f:9c:ae:e5:32:c1:46:e2:55:
fa:a4:ab:96:ed:33:79:85:45:64:c0:55:4d:16:ca:
b5:79:24:1b:f6:55:b1:86:06:18:94:76:5a:c5:e4:
0c:45:97:96:28:8c:8a:e0:63:ae:a6:fd:da:cb:47:
4b:28:8c:48:82:51:08:9b:35:56:75:df:c5:36:b9:
93:ec:cf:82:59:82:da:42:12:77:99:be:99:e0:ff:
96:c5:71:44:87:a5:ba:1a:bb:19:35:a7:0d:70:62:
ca:88:b9:9f:32:28:8c:ca:ff:06:29:12:58:7c:04:
e3:2f:16:ca:95:b3:06:d5:99:76:c1:9b:d4:57:c0:
ea:b0:94:8e:1e:49:67:32:95:3f:47:41:04:7a:4d:
6b:6f:ad:67:43:b7:3e:0e:e0:44:64:3f:16:e4:25:
b8:ad:91:2b:2d:60:f1:5d:71:31:76:a9:1f:c6:dd:
e0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:98:FC:7E:8A:7F:01:EF:5B:A1:A4:9F:55:F8:26:54:D0:1D:67:D2
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ed:a8:a7:1b:72:70:53:eb:be:2d:1f:e8:50:10:5d:3b:85:
85:be:07:c5:d5:09:c8:79:6f:ad:30:d4:f2:dd:86:05:9f:79:
c6:11:3d:38:27:92:80:bb:2e:7d:a6:77:68:06:4c:0a:23:32:
cf:c9:29:0d:df:0e:62:65:1a:01:bf:f9:8e:83:a2:c9:92:5e:
5b:cb:f9:19:e7:a2:b2:d3:91:79:10:cf:27:d3:80:f8:3e:09:
02:a6:81:4b:39:4c:05:20:4c:99:ea:90:93:56:fb:cf:92:30:
ee:84:7f:98:47:a0:a2:7d:f8:34:c4:85:bb:5f:04:51:89:69:
a8:6a:20:10:de:a6:0a:f8:fe:5a:0a:a9:96:ab:c8:e5:90:16:
64:7a:2d:21:8d:ce:4f:07:c8:51:2f:2a:f7:ea:65:52:fc:68:
f6:03:88:7a:99:b9:64:f2:7e:fa:1a:6e:ee:d9:23:f4:fe:15:
d3:3b:cb:e9:e6:6c:96:3f:11:5e:7b:31:94:3b:4e:c4:b3:d6:
d3:26:6a:1a:2a:28:cd:c3:43:fa:d5:18:f7:55:5d:da:67:0f:
6a:fa:1b:4a:90:76:07:f9:12:a9:d0:d4:19:b6:fb:f9:d9:9c:
9a:cd:13:74:9c:d3:6e:5f:08:4c:79:6a:3c:7c:90:99:a8:ac:
29:3c:f9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:53 2025 by rpki-client