Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
File: aLw5QAVdFXTyY7X5arCQDGu0xfk.mft (raw, json)
Hash identifier: ByYcXvZT+vnlF4Ztw5q/9HJiLJdBmEUoMx37+ioCDEs=
Subject key identifier: E7:CB:8C:DD:D8:28:16:46:74:E9:1E:8C:C3:BD:57:02:8F:96:FC:9B
Authority key identifier: 68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
Certificate issuer: /CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Certificate serial: 0194BD85A9251910087EE17B0362C100ED38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
Manifest number: 0196
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: UTuku2NoRg5M3213fHsTSechO5U.roa (hash: mmVExhdm+qlv5wjD1nNIr2CTIIUIWrulidPSaVkzZdU=)
2: aLw5QAVdFXTyY7X5arCQDGu0xfk.crl (hash: BDMLZcfgBSiy+k7WPRXj28F6owj5sULdEIWHVTWMUas=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a9:25:19:10:08:7e:e1:7b:03:62:c1:00:ed:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=e7cb8cddd828164674e91e8cc3bd57028f96fc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:0c:f6:a6:98:9d:12:85:89:93:cb:25:d5:
61:5f:32:fc:e9:b2:43:76:a9:48:01:d4:85:93:8c:
f9:67:6a:52:bb:b7:c5:5e:56:92:e8:da:11:53:6a:
ff:f2:4c:f0:ed:a6:09:11:2b:38:99:f2:23:01:6c:
eb:40:4e:bf:09:f6:a4:f3:b0:6b:11:5e:63:0d:98:
5f:a4:4b:b0:13:2b:07:ca:14:68:ad:e4:1f:5d:14:
d6:4f:5c:64:7d:0e:31:07:c9:00:56:e3:a4:89:d7:
e7:a0:f0:91:82:be:57:c6:b3:44:4b:bf:cb:23:47:
2b:d3:79:9e:97:c9:1c:7e:d9:3c:a9:d6:2d:47:30:
fa:54:12:8c:06:10:7e:f1:1b:7f:a1:6c:fc:10:aa:
c6:55:54:b3:1e:ac:17:94:09:54:d4:ff:e1:29:82:
94:45:8d:ea:b3:c2:58:70:c1:1a:f0:f9:0e:1d:b1:
29:fc:9f:c7:77:88:35:0a:1a:1b:65:1e:8e:aa:4e:
7a:29:44:e2:1b:2f:d3:1f:1f:58:91:f6:c5:1c:cc:
0c:1d:fa:ba:d0:9a:a5:f8:56:8c:0a:42:2c:3b:8f:
d5:6b:0e:35:a4:45:6d:19:81:dc:4f:63:27:ab:88:
73:f5:21:93:f3:ef:a3:6b:53:d4:d5:e8:18:04:9f:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CB:8C:DD:D8:28:16:46:74:E9:1E:8C:C3:BD:57:02:8F:96:FC:9B
X509v3 Authority Key Identifier:
keyid:68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:da:1e:5f:8f:f8:be:bf:14:8b:61:35:b9:f1:66:f2:3e:f0:
6f:f5:09:1b:8e:6f:b7:d7:1a:be:aa:8c:cd:1c:2b:4b:3c:34:
03:0a:ad:db:6d:59:55:6d:64:5a:16:d7:db:a7:4f:59:fa:b9:
1b:d7:82:7c:5d:a6:63:86:5d:e9:9a:6c:e5:8b:ae:74:c6:c5:
a3:2e:35:59:a6:8e:6a:b8:a6:6d:aa:c0:5e:d1:c4:1a:ee:66:
7d:61:f7:e3:23:57:d4:5f:07:7b:d2:28:64:72:9b:9f:78:11:
08:9f:03:b4:14:0f:5e:c3:bb:f3:5f:75:54:8d:f6:b4:ca:f5:
76:f2:d7:8d:e7:68:a2:b6:85:b2:a2:e4:3a:84:6e:1c:12:82:
d5:81:1e:89:53:aa:12:d5:1a:ef:0c:3f:87:8f:c1:d4:cf:d1:
b6:d3:91:3d:e7:50:da:36:33:95:e6:99:d5:5a:78:e5:2e:c8:
f4:3d:88:dd:93:98:a1:ab:38:dd:02:bf:6b:50:f6:44:2a:cc:
d1:ce:81:3f:01:62:2f:cc:82:05:1e:4c:af:12:75:e1:f5:8b:
71:4f:a0:f9:28:d2:68:50:23:d7:b9:cb:fb:ea:f9:bc:67:b2:
fe:19:08:ad:9b:93:13:28:65:3e:1f:e4:df:77:00:e4:6c:d9:
87:9c:a3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:21 2025 by rpki-client