Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
File: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft (raw, json)
Hash identifier: 1D9HOQJHw53smzovCjCtowTAJAodBVKfr7nQfU+AIIs=
Subject key identifier: 39:53:59:D2:63:DE:09:3B:1D:AE:49:DE:D0:60:6D:27:DF:A7:59:D2
Authority key identifier: 68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
Certificate issuer: /CN=68a8e93d3f590f4450d1db3c2074598244353e93
Certificate serial: 0194BD176A6DA4EBE0B4EC51D57AB2C8ABD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: 2w6cJY-65VWC2NML2owk2yJnMiA.roa (hash: EQdIIOaZeOY4ggj992egRQ+P6maqigxMmD0PENzh+00=)
2: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl (hash: 5PhRTmJYFjQvOmooDTcf7gamyN12IZuoT2coLhSaYeg=)
3: l4aIYhbLccbBZwXTeT_6PEOTTbs.roa (hash: OfqZJaI8CjgQFoP7qk8rodEs//86jLcKqzVBcPAG3oI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6a:6d:a4:eb:e0:b4:ec:51:d5:7a:b2:c8:ab:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a8e93d3f590f4450d1db3c2074598244353e93
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=395359d263de093b1dae49ded0606d27dfa759d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:10:9c:dd:b5:e9:8b:5c:a2:e4:41:2b:1d:
e6:32:d9:32:3e:ba:1d:3f:79:0f:e2:ac:22:a9:a4:
17:d3:9b:ba:ea:9b:60:47:2f:e1:fd:1e:d0:6e:6d:
db:94:cd:e0:2e:9f:27:a0:da:c4:91:2d:24:9c:5e:
c5:73:bd:0a:1d:58:ac:32:59:ee:20:f2:33:04:db:
13:e7:90:f0:00:51:d2:69:58:21:4b:19:2e:fa:de:
ca:6c:61:72:ff:3c:72:05:e5:30:f7:56:12:47:86:
1f:f1:ef:ae:0a:0b:31:4b:97:39:12:f9:5c:a1:48:
25:f5:74:84:7a:53:af:6d:3f:42:f0:a8:56:59:13:
b2:c2:31:73:bc:c7:3d:f2:84:06:5e:a4:03:e1:63:
19:4d:a6:1e:64:df:bc:5a:7f:31:e5:b3:32:20:be:
79:b4:83:4f:7a:96:72:5d:9a:db:40:29:74:5a:5a:
d9:5d:1f:83:5f:5a:2d:ab:23:b5:97:ee:e6:a5:df:
a2:e1:4b:dd:ac:ca:16:74:ba:90:d2:e5:76:bd:ad:
4d:34:df:b2:90:60:45:56:c7:1f:ed:73:af:52:bd:
85:62:78:eb:d2:e3:ca:48:2a:94:b2:a8:3b:2a:c1:
5e:6c:7e:d3:3c:cd:43:50:db:8d:cf:1f:3b:0c:66:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:53:59:D2:63:DE:09:3B:1D:AE:49:DE:D0:60:6D:27:DF:A7:59:D2
X509v3 Authority Key Identifier:
keyid:68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fa:e5:df:dd:5d:31:97:71:83:00:84:29:c2:10:25:4d:1a:
e5:73:6a:04:8e:56:b4:b1:23:6c:f8:52:e0:a0:c4:02:b8:a1:
f4:b3:4b:82:ec:39:79:73:56:3a:11:ff:19:e6:ce:d7:43:42:
45:0a:1c:82:69:7b:0a:e4:c7:48:40:2a:a3:41:15:c8:6b:a3:
5b:09:7a:72:be:51:bb:c0:d3:a8:da:07:94:c1:90:ed:e5:05:
cf:3a:9d:3e:85:c2:84:19:b1:30:16:48:b1:be:8f:fb:94:a8:
22:7c:82:93:f8:1f:7a:e0:17:7a:ec:1f:5c:39:d8:17:ff:6b:
ad:48:fc:31:d9:04:a5:55:d7:a3:5e:fe:d6:8d:60:19:8b:e2:
f1:a0:4e:98:a6:f4:92:af:3e:b4:07:9a:c5:da:fb:29:78:a3:
7e:22:89:a3:e5:46:0e:f9:8d:ad:7e:da:99:a9:54:15:1d:5d:
38:cf:23:6c:85:73:33:a7:5c:b1:b7:a1:a1:23:7c:db:7f:f7:
ce:47:33:ef:e5:01:c4:58:ee:67:a8:ac:f7:46:05:6c:4b:c4:
f6:94:40:37:ac:59:73:00:02:d7:84:b8:e9:3d:bd:dd:37:f7:
ea:95:58:2f:33:9a:90:3e:ca:8d:7a:f0:97:5a:5a:ce:e9:3a:
7b:14:4c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:53:21 2025 by rpki-client