Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier: epW6B5c4g0hyf5J/Kd3Ki05TiEL5BkdoNVzQuDI74Cc=
Subject key identifier: E1:6A:46:85:1A:C4:0D:1E:9D:04:C3:FF:CC:5E:0A:B3:75:CB:6A:6E
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 0194BD856CEDFD238D068CD2EAC5E7EADB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (hash: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=)
2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: ohqVhge13X9WggNzDpGDMPGFlo+nSICcDfl2e7vM3Wo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6c:ed:fd:23:8d:06:8c:d2:ea:c5:e7:ea:db:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=e16a46851ac40d1e9d04c3ffcc5e0ab375cb6a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:8a:a4:e3:3b:17:87:cd:5e:01:ee:61:0f:
3f:6b:2c:96:19:f8:93:48:8b:b2:b8:d0:20:a2:4d:
63:c7:54:01:be:e9:f9:8e:97:21:dc:f1:ac:74:9f:
ad:25:bc:2c:2a:5b:57:57:fe:94:ec:7b:5c:0f:07:
34:ff:ce:a8:b1:12:73:3d:5c:95:b7:b7:5a:d8:14:
48:95:d1:3f:3b:0b:13:d9:76:a1:88:03:2c:c2:6e:
ea:db:a2:ab:20:cb:23:b0:df:2d:db:d3:95:ba:e1:
e8:46:0c:9e:f3:58:f5:4b:c8:80:82:59:78:6b:dd:
6c:f7:ce:d3:41:39:03:36:af:22:54:07:a6:e2:22:
a8:92:a7:4b:94:55:7a:9c:ff:ab:84:99:12:b1:92:
55:86:8b:95:50:d3:5a:42:cf:d9:2e:32:ac:ea:e7:
e4:8a:04:3e:53:13:ab:d2:38:a2:39:63:75:36:b7:
09:27:fa:ef:4b:7b:7e:b5:f6:d0:fc:56:5d:ce:f2:
d4:31:8d:b5:7f:18:c6:44:e3:5b:dd:fe:67:a0:33:
00:01:c7:08:72:35:01:c7:7f:ce:18:7f:09:0b:06:
db:71:3e:7f:26:2a:44:7d:c0:a8:6e:9e:c4:04:87:
06:7f:ff:ee:d3:43:a0:1f:3d:fe:8e:51:d7:c2:b3:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6A:46:85:1A:C4:0D:1E:9D:04:C3:FF:CC:5E:0A:B3:75:CB:6A:6E
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:d8:05:1a:23:a8:1a:23:a6:b0:21:cd:31:cb:66:ae:10:e9:
c2:c7:22:f9:ff:38:49:95:95:78:41:2a:e4:2d:7e:6e:45:25:
ee:36:b6:be:98:27:5f:5a:85:2f:47:9b:17:1e:06:0c:bf:73:
05:03:45:1f:08:1e:d8:7b:f9:77:20:27:b0:91:b6:5a:f1:77:
18:2a:0a:2e:5c:46:d8:ca:5a:4f:d1:0d:98:0f:81:fb:3f:e8:
83:b9:27:49:69:5e:3e:51:13:43:f7:e4:67:dd:0e:d9:0e:1e:
b0:9e:38:de:83:bd:aa:eb:8b:c8:d5:e4:b7:5a:a7:f9:81:bc:
72:36:d2:cc:97:7a:62:be:d3:25:ba:ed:1e:c1:87:ad:17:19:
0d:fb:06:61:3f:f9:7d:db:77:59:28:5c:2c:5b:08:c6:26:f6:
0e:5b:27:0c:7d:90:12:5d:5b:2b:f8:e8:86:c0:37:18:bd:d1:
fb:85:12:76:a4:1b:b2:d9:57:e0:3f:43:dc:8d:da:d0:05:97:
14:1d:53:b5:d1:87:8f:ea:4e:fe:2e:c4:7a:06:c4:dd:7e:5d:
c5:ae:b7:cc:da:9a:f4:79:1b:2e:52:84:fe:66:80:c2:89:f0:
51:d8:6e:52:7f:8c:fb:73:ce:1b:31:94:45:48:c3:be:82:1b:
16:a5:b3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:48 2025 by rpki-client