Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
File: a3YD1VVBw1n46HRHfL6K8h9peHw.mft (raw, json)
Hash identifier: z9wAk5pqR9K3UKyUHOwzxbv8wRHcHHZ4xqP3KwL5CYA=
Subject key identifier: 69:73:B9:C4:5D:BD:8A:EE:BC:0F:EA:37:65:74:84:34:E7:79:A3:5C
Authority key identifier: 6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
Certificate issuer: /CN=6b7603d55541c359f8e874477cbe8af21f69787c
Certificate serial: 0194BC0502C27E1230BA5DAC9D4CF736A051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
Manifest number: 0122
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: 1cCURNbnhc3kVSx5LshZjXVHwGw.roa (hash: 9CYah/f0+YHG95521mbKC2yWBj7VliIIkMmUm02v1aQ=)
2: a3YD1VVBw1n46HRHfL6K8h9peHw.crl (hash: OhoHV99jXcOtGTxUBFL23Yq3KU3CpHexqvT9bNzUOaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:02:c2:7e:12:30:ba:5d:ac:9d:4c:f7:36:a0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7603d55541c359f8e874477cbe8af21f69787c
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=6973b9c45dbd8aeebc0fea3765748434e779a35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:9b:ff:93:72:d0:ad:15:1f:84:8c:5a:26:
3b:c0:50:72:96:f0:a6:42:08:ad:cf:fa:b5:2d:b2:
eb:37:85:ad:16:f6:df:74:ca:04:65:f1:93:ca:53:
c6:f8:50:77:44:1f:8e:69:8e:1f:b3:99:c7:4c:5f:
46:c4:cd:c7:2c:6f:47:36:54:13:44:99:29:3b:24:
a3:c7:46:6a:cd:19:88:da:8f:c6:be:5e:24:40:50:
95:aa:da:d1:4b:26:8e:8c:50:b8:aa:04:9c:00:61:
6f:96:de:88:10:c9:84:78:e2:c2:ea:87:23:e1:3b:
18:ea:93:69:07:b3:48:14:55:17:35:93:34:41:89:
29:72:e9:f2:a7:c9:d1:4f:3f:f8:d8:8f:85:cc:81:
71:1b:f3:ff:17:b6:54:89:a8:6f:fe:ff:50:59:6e:
fb:33:16:5f:3b:17:9e:73:3f:f3:ae:04:c9:5e:6a:
86:a4:b5:ff:e5:d3:18:de:e2:92:6d:96:1e:4d:06:
0f:9f:57:17:98:32:b1:6b:1d:88:a9:e6:c7:d3:c3:
46:73:80:15:f7:f1:b4:5e:97:5c:e6:e7:28:2d:7f:
b5:f4:a0:04:85:63:32:7e:11:c8:87:fe:5c:dc:36:
9a:67:55:1f:56:1c:0e:45:8f:1c:56:e8:b2:bf:fd:
df:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:73:B9:C4:5D:BD:8A:EE:BC:0F:EA:37:65:74:84:34:E7:79:A3:5C
X509v3 Authority Key Identifier:
keyid:6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:60:cd:48:f9:b2:18:f2:30:db:01:e0:0a:5c:08:b2:52:75:
c8:8c:32:b5:65:9b:cf:e7:14:e4:7e:cb:4a:89:0b:18:07:bc:
fe:aa:17:04:33:0d:32:33:24:3a:d3:20:d6:46:9e:cd:16:65:
13:56:9d:f8:52:cb:6a:fe:60:e3:2b:3a:43:81:26:c1:9e:88:
4c:d4:34:e5:5b:fb:0b:be:58:ba:ff:8d:0b:a6:09:a3:a4:a8:
49:66:27:7c:68:bb:16:95:47:7f:e6:a5:b2:82:f8:ab:ce:87:
20:6b:cd:35:a6:c0:8e:91:32:d3:26:36:da:f8:25:52:c7:5e:
d9:47:c4:dd:90:00:1d:67:83:33:f0:79:94:20:7f:6a:ea:3b:
1c:5e:4a:81:02:83:57:73:1e:71:f8:59:f0:e2:48:e0:b2:47:
c1:f0:01:c2:6b:f2:ac:5b:44:db:a0:0f:46:17:ab:4c:d4:03:
fc:5b:a8:7e:36:01:f3:9c:98:57:09:dc:9f:b4:88:ee:68:0b:
85:e6:ae:12:f2:04:fb:c9:ae:50:99:06:5a:4f:ad:99:9b:e4:
aa:7f:2d:5a:1e:97:d9:72:56:c8:4b:de:8d:8e:18:19:65:24:
68:48:93:4a:c1:b0:87:ce:2a:f9:65:13:01:20:50:05:d8:14:
88:66:63:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:15 2025 by rpki-client