Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: ZHXQxaX3+sDl80fL5Oab67NRQp/pvWYY9qTx5XBKCmk=
Subject key identifier: 3A:69:55:06:3C:70:74:04:E2:2D:CC:CD:8F:EE:2A:56:44:25:85:F6
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 0194BCA9F5C45AAEA9BD8C77719536F32A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: oYkhZTLQrnvl-IttxzifaAlw7V0.roa (hash: QiFAHpz1St3NeW4jjfgoztvBboy2Q91P0n4+GCcROlY=)
2: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: S245Zs6lj6yBJaya1fuosBxhl2rucp7riF3J9JnXcZU=)
3: voX6NtFAGSz-Ugo7TPI8c427IMk.roa (hash: +uCML9+GTTpkSUrmQ3BPnWbGJYNmNMhb4t9N4Bq8EyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f5:c4:5a:ae:a9:bd:8c:77:71:95:36:f3:2a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=3a6955063c707404e22dcccd8fee2a56442585f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:1c:9f:17:46:c3:af:99:2e:8e:ab:a6:4a:
e2:44:d4:f4:54:0d:71:d6:20:2d:a6:d1:35:12:75:
ba:55:d4:8b:a6:a9:e8:97:da:9d:87:5e:03:45:2d:
8d:12:00:d7:37:9d:3e:70:12:2c:97:dd:d6:98:89:
37:72:81:18:13:2b:48:17:60:4b:a0:93:83:44:97:
4a:54:ba:1c:08:4c:cc:24:c7:00:05:a1:b5:ca:51:
b0:7a:03:e2:55:4a:d8:54:a3:62:b6:b0:83:01:ff:
53:51:e1:c7:19:8a:67:25:06:d8:40:da:e6:2c:91:
fc:c6:ab:5c:f3:4d:fb:f6:98:9b:6b:62:74:11:bb:
6b:1b:07:c1:30:92:14:7a:1b:45:c5:04:2d:a5:03:
f2:5b:1d:0d:6d:62:28:e0:49:2c:af:ce:48:68:3d:
49:2f:a0:8e:7e:ec:cc:e0:97:4c:22:37:ea:d4:11:
2b:19:f8:9a:aa:d1:e9:cf:0f:30:28:06:af:41:d4:
4b:9a:71:d5:66:69:77:9c:01:5c:74:6e:9c:8a:a2:
5c:ec:0c:c5:2d:5d:8e:71:bc:78:9a:81:a8:75:f9:
18:79:63:62:45:2e:e7:55:29:1f:1b:6d:a4:3f:bb:
9a:84:2e:86:40:48:c2:46:75:e7:b1:d5:31:c8:97:
84:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:69:55:06:3C:70:74:04:E2:2D:CC:CD:8F:EE:2A:56:44:25:85:F6
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0d:10:a5:6b:9e:f2:70:27:28:05:a5:13:3c:92:0b:83:ee:
e7:da:56:2f:bf:8d:60:98:c5:61:a6:e9:e2:8e:2a:e6:d2:23:
e9:d6:1d:80:12:b2:e1:f3:b8:de:ae:a2:09:d8:0c:0a:74:d5:
69:a2:87:2f:af:be:a9:22:dd:c8:b9:3b:73:38:e1:ab:c0:09:
3f:1e:39:b5:d5:ff:ce:77:9c:eb:64:c0:c3:04:76:76:50:6f:
cf:f4:27:37:df:e2:d1:b0:24:02:80:56:4c:c3:3c:95:9b:57:
46:3a:35:8e:fb:0d:28:bc:b5:0e:0b:c0:65:26:3e:24:ca:0e:
d7:80:7f:60:88:58:4c:d1:2d:68:4f:b0:3a:46:ee:e5:34:39:
16:d4:08:e8:bc:65:fb:3c:a4:4f:cb:54:9b:e2:cf:b3:78:46:
6d:5d:d6:28:a2:46:d7:fb:49:ef:00:0d:14:e9:d5:f9:da:e2:
bf:1c:71:f4:4a:33:e9:c8:c3:76:27:8a:71:09:f4:54:14:96:
15:95:d7:93:33:5d:2f:0e:02:ec:fb:ea:2a:6e:3c:24:dd:3d:
13:78:e1:85:a6:d7:63:1f:af:c2:b9:d5:9a:48:14:08:b4:4b:
46:9b:12:61:92:2b:2f:4d:68:03:63:cc:a4:a0:dd:70:e6:70:
6d:a0:d9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:17 2025 by rpki-client