Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: fwuv9D2ZVql8x3sYBgpfgbJLzRywovwAbRpaxgNROMk=
Subject key identifier: 30:B1:0E:6F:2D:5D:97:12:18:24:C8:9A:EF:AE:FF:A9:1C:97:AE:D4
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 0194BD8554D2FC75A397D4D5BEC597FF3772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 09A0
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: 9An93QZ5VcdXnM-SpuqFZ7HTYmU.roa (hash: FvzvcUzn3akzojaHHdMGtSYsI1uUN+lMDojMlOkLqXs=)
2: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: aiyC7d6KEoy/ca9mhR8CXOpm2iyMvPtzwNG0InfONGo=)
3: RAD4tK02ktN0fOfQsDIg0oXzowM.roa (hash: zP2Pk53gLmd7JDeyZonVGODT/lrmnaflf5tGkA0jXzM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:54:d2:fc:75:a3:97:d4:d5:be:c5:97:ff:37:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=30b10e6f2d5d97121824c89aefaeffa91c97aed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:01:e3:12:4a:14:8e:80:f8:d3:27:9b:6b:
6d:6d:da:73:7d:e1:f9:8d:31:2d:af:ce:1f:0b:58:
51:ea:75:f0:83:46:98:e8:c5:09:b2:e0:f8:6c:f3:
a4:cb:47:1d:a4:fc:96:94:e6:33:ff:3e:ab:04:26:
cd:bc:62:e9:28:01:03:d0:2f:f1:9f:fd:28:fd:f1:
8b:31:c1:b9:d7:c6:f5:e1:c1:91:19:f8:41:9c:c4:
7f:bc:8f:f5:9f:4f:40:3b:f8:ee:71:cc:8a:b0:37:
e1:90:56:19:a0:43:dc:81:f5:53:0b:b0:90:a4:8f:
41:d1:d8:60:d5:b9:a0:89:71:a4:2e:69:09:ae:9f:
2c:cc:81:4b:c1:5e:53:87:95:7f:ca:a7:1c:42:7a:
e3:8c:6e:78:59:cb:80:d8:47:cb:48:63:28:33:1e:
ff:eb:41:4f:86:20:4a:b9:34:ca:e6:27:fb:68:ad:
af:67:cd:55:3f:66:e6:e7:a7:fa:4f:e7:19:c4:d0:
33:b7:4c:d9:a1:1c:e9:9d:20:d2:b5:31:5f:32:c3:
cc:93:4e:44:13:01:73:08:45:52:7c:27:b0:21:60:
48:46:87:f2:15:d7:f8:c9:96:70:06:f8:89:1f:ab:
c1:61:c7:5d:f3:62:30:ba:2f:24:b8:a0:ac:4c:56:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B1:0E:6F:2D:5D:97:12:18:24:C8:9A:EF:AE:FF:A9:1C:97:AE:D4
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3b:6c:43:a3:72:70:e8:46:2b:b1:5d:e2:c5:a5:ab:6d:23:
fb:c4:0d:87:40:ac:e9:0c:b6:6f:28:f9:53:15:a7:53:4e:4d:
88:44:4d:5b:37:2b:02:f4:91:c8:e2:fe:ec:60:27:2f:a4:38:
09:6b:c8:39:30:c4:d3:6b:49:c5:dd:52:e7:27:b6:bc:53:fb:
ae:cc:ed:94:25:fb:a1:af:aa:66:56:cf:2e:57:ab:ad:75:b4:
76:97:a4:37:b6:be:c0:57:4a:44:f8:9d:42:f6:8d:66:f7:19:
5b:cf:3e:2c:67:2e:d0:eb:ca:4c:dc:14:c9:7f:b2:a4:99:2c:
17:6e:ab:ff:67:c0:20:40:16:53:0a:d8:69:45:3b:44:ac:6b:
3d:ac:14:e5:f5:55:a9:29:45:ba:7f:56:5e:a1:ae:e7:8d:57:
04:ee:53:80:89:d0:4d:11:4a:31:29:da:30:1d:0d:3f:41:cd:
32:e7:a9:7d:62:67:d5:78:95:e4:60:79:f2:cc:ec:22:b1:ed:
eb:af:b3:88:7e:82:11:9c:dc:c6:7f:e9:e8:a9:ef:39:b3:47:
7f:9a:cb:0e:6b:8e:11:43:6d:e9:a3:14:15:e3:94:3a:a1:cd:
f6:c3:ae:a0:30:bd:d3:4f:05:96:49:8d:17:b1:55:19:63:16:
62:73:53:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:25 2025 by rpki-client