Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json)
Hash identifier: PWG5wqKu7G+89r4by3rlMIrxxAUKPBfTsHkF/Rky9Ms=
Subject key identifier: 39:8D:80:F5:85:AE:E1:D9:08:C3:5D:D2:D2:EE:E5:B5:CF:F3:27:A1
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 0194BD857DECCF976E899C9120078E9C7BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
Manifest number: 0E8D
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: 8criSeClq2Eu3zzop6X6ae-0yfY.roa (hash: nOinS53G7GkxN9bqxtcws3EdTvx5t+9T2IsaBWfXBg8=)
2: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: BtMx/kObjXhnylO5c+NHVHXNui3NRA8IC1fLlKDwr04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7d:ec:cf:97:6e:89:9c:91:20:07:8e:9c:7b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=398d80f585aee1d908c35dd2d2eee5b5cff327a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:c9:f1:92:29:ba:7a:9f:43:f8:b7:52:0b:
6c:f2:fd:5e:47:6e:dc:df:42:87:4a:d3:24:92:bb:
f9:cb:f2:49:51:67:e3:21:40:47:5f:f4:f3:f2:18:
73:00:16:0d:a9:cf:83:b7:cf:c8:5a:68:61:6a:a1:
44:1c:94:ec:52:b2:db:7a:f8:b8:b1:05:9f:0f:66:
b4:85:e1:2a:46:bd:22:48:47:c9:69:43:4d:7d:be:
8f:a0:15:8d:4c:0b:a4:9e:11:d1:f9:6a:c0:98:2a:
fb:f5:c7:50:ef:0b:f4:2d:2f:ac:6f:02:c8:2f:fa:
8d:bf:fe:78:b2:4e:1a:bf:ff:da:02:ab:86:a6:2c:
d0:b3:7e:54:31:6b:5b:40:eb:e8:23:6f:9a:d6:7f:
db:65:cd:11:55:dd:a0:fd:81:e8:5e:2c:41:95:ef:
43:f8:65:67:49:e9:a1:e0:95:89:45:47:aa:ad:ff:
5c:61:3e:40:de:de:33:6c:1a:a0:be:01:d0:6c:b0:
11:b0:9c:fa:10:a9:a9:0f:29:20:a5:00:48:b9:80:
19:d6:bb:ac:82:03:d9:84:ab:cf:be:e6:01:69:39:
01:57:fe:fa:af:f0:d6:3c:79:e2:94:fe:ab:43:f1:
59:0d:fb:ce:c5:5c:b3:69:10:10:1d:6c:16:8d:96:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8D:80:F5:85:AE:E1:D9:08:C3:5D:D2:D2:EE:E5:B5:CF:F3:27:A1
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:10:e2:37:09:f9:dd:3a:ac:3e:e3:81:da:d0:a5:c1:5d:58:
23:4d:2b:4f:45:4d:45:1a:88:f9:85:7b:aa:79:a2:5f:5c:3a:
71:17:3b:33:d0:28:e5:9a:8a:76:6d:0d:78:7c:73:e2:77:a2:
f9:cf:b3:6c:83:5f:45:23:42:92:77:e5:e9:d6:a9:16:36:de:
65:b8:89:37:59:14:e7:7c:f3:70:e2:b2:91:67:43:1a:01:77:
78:55:54:62:ab:07:dd:58:9b:0d:61:9c:b9:00:13:5c:cf:3f:
57:62:6d:d1:bc:5a:c1:a1:61:2b:f4:b6:5e:53:6a:ad:3c:cb:
aa:e5:54:27:fa:6b:6f:13:86:0e:2b:77:3a:7a:f6:1c:09:6c:
ac:bb:f3:43:59:25:e3:22:06:04:93:8f:7c:62:14:6c:89:5a:
da:52:ff:54:45:55:02:2d:cd:cd:b1:43:37:46:bb:40:0e:a2:
1e:7a:d9:63:91:15:48:2b:e1:8b:fe:97:8f:06:2b:4a:59:76:
a6:fd:76:be:6d:be:4f:2a:59:f8:d2:ca:a3:65:a4:37:78:49:
db:e3:0c:44:eb:e6:32:8a:dc:30:3e:9b:eb:cb:8f:4f:9d:54:
01:04:7a:a3:43:e8:41:b5:ab:3d:84:86:c2:87:3a:48:8e:75:
b2:e5:3d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:26 2025 by rpki-client