Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: +Y3vCxLx0qjM5C5mqpglS5RoLw93K3uuMBtm2dGGUHc=
Subject key identifier: 55:2A:ED:79:F6:13:10:BB:55:2B:DB:63:F7:00:DF:FE:9B:63:13:ED
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 0194BD4EAAE3E6EF1C658B16FF0F8E47A0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 1439
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: PhAdv-HJnlbg1VJ9bdzkQZ0YfS0.roa (hash: iSIRCMFBMSqE4z8S3JoTtCf3BJrvo4BK0Aotf9oHvEM=)
2: bpJQADgUamylt2o_w_KHeqymchY.roa (hash: narn2zF+w6BAt5TNk48BM6B9fT9dHMMHb9pvuxXZczs=)
3: o6ZBsBJmDidSJEQHGXWmeVRCms8.roa (hash: GwrZpgToKxBN/Z3vluAbzRPkv9FXCdnTNy9hbU0gr3E=)
4: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: Nw8K4uUIIbUJnlLBpiFf9tiHf0EQ36lE2+Pc983czfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:aa:e3:e6:ef:1c:65:8b:16:ff:0f:8e:47:a0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=552aed79f61310bb552bdb63f700dffe9b6313ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:c9:d2:2d:15:80:df:b1:e2:0f:1f:83:fb:
cc:1a:33:71:e5:62:ed:ca:a4:94:bf:98:4b:2f:61:
fe:ca:07:68:54:83:eb:1f:97:0e:eb:9f:df:7b:f3:
04:e1:12:ab:9e:69:79:06:41:73:d0:13:49:cf:d6:
69:1c:20:56:a4:e9:a5:1e:94:4d:91:5e:02:8f:35:
15:94:2e:7b:04:ee:c8:49:6c:c4:88:2e:45:c9:fa:
50:c6:1f:d6:4d:04:63:f6:9e:2c:93:b7:f5:4c:68:
5f:61:00:fb:37:3f:5c:bd:ca:6d:05:5c:87:74:24:
bd:e4:91:02:e6:f2:53:28:12:fe:46:a1:79:6e:bb:
df:18:95:28:83:41:61:ed:50:1f:e0:be:50:2f:7d:
ee:4b:b7:ce:88:16:da:d9:a7:af:6c:1b:7e:64:9f:
bf:b3:4a:97:42:a9:89:bc:ab:a8:ef:bd:fd:d5:77:
3b:26:37:4a:b1:74:b4:9f:fe:be:07:2e:24:4c:52:
e0:f2:27:64:3b:6a:f8:16:95:e8:d4:6c:09:bd:a1:
a4:0d:fe:e3:ca:a0:01:e6:a6:43:82:27:69:cc:67:
39:b7:03:5a:44:c5:47:1c:d1:f6:47:3b:d1:f4:8d:
37:67:ed:27:1f:30:b8:b3:09:90:0d:8e:c4:f4:9c:
92:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2A:ED:79:F6:13:10:BB:55:2B:DB:63:F7:00:DF:FE:9B:63:13:ED
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5b:86:e5:c0:0e:87:86:6a:5a:a6:c5:20:03:7e:6b:a2:43:
af:a0:ca:8b:f7:37:75:05:db:d2:2e:ff:09:c0:25:ac:9e:00:
32:0c:13:a8:bd:3c:76:97:69:b8:cb:0b:14:b8:80:ee:37:ac:
b6:b7:4e:c4:91:fc:d6:c9:64:2d:4d:b6:b1:3d:d5:9b:b4:01:
c6:7d:e4:37:90:14:97:a5:d4:9b:0d:6f:56:fa:7e:64:27:05:
f6:a6:0f:59:38:29:06:51:9a:7b:dd:57:2a:eb:aa:e4:67:ba:
bf:cc:49:de:d4:1f:39:20:e0:e1:cd:50:c5:91:45:f0:1a:63:
07:9b:39:50:ac:0e:da:e6:7b:4c:89:1d:e5:2f:75:cb:1a:5a:
bb:07:36:fd:49:df:1b:92:3d:3e:85:0a:60:bd:47:10:83:79:
48:bf:66:16:cb:84:5b:60:33:23:50:6c:11:fe:e0:c1:2f:6a:
a6:87:c2:79:72:6c:4d:e3:38:c4:14:4b:14:33:af:e2:ac:81:
b7:e6:44:19:ee:bf:b4:00:2b:25:87:69:b0:51:f0:da:6c:ee:
3b:f4:87:7a:f7:07:3a:a8:5a:69:43:e9:f7:04:f8:c0:a6:cc:
22:a6:51:75:ba:dd:df:b6:57:47:c4:d9:7a:d3:6f:b5:58:03:
4e:24:20:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:45 2025 by rpki-client