Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File: a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier: jmHLfvnO4XC09xl/hJbrEH+i33SlE/Qnm53ARPslzaY=
Subject key identifier: CF:51:A7:FA:AF:61:3D:E3:D2:4D:54:5F:3C:52:46:FD:58:10:3D:38
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer: /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial: 0194BD4E6AA54EB5364F8071A261E21422CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number: 0C99
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: NFuZfl53-8KYTLVCa1Hv_etfQ9k.roa (hash: mKJy52sXoia7oCRphyiyMklvY+QAOAh6np8WR+mJ8DQ=)
2: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: orBQHog7/UTmfk70XMzbYCE+BIbFaZstZ3leildPDas=)
3: pOxKs9dWhUdQCvSLYTnAr4vpa7U.roa (hash: /5GRlXnM3rNmijk0WyBlasj7lnCycK3nTmymAKQJFjo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6a:a5:4e:b5:36:4f:80:71:a2:61:e2:14:22:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=cf51a7faaf613de3d24d545f3c5246fd58103d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:e4:9b:9f:a6:3d:a4:17:50:15:28:0b:19:
5f:8c:53:ac:51:4d:62:b4:91:e9:8c:32:68:6f:9f:
71:59:d9:4b:ef:26:3c:31:2a:30:4b:89:82:db:0a:
5c:e4:38:bc:14:1d:6b:02:58:fd:e7:cb:94:87:95:
97:cc:4e:98:23:01:e3:9e:a9:31:93:ed:d5:28:2a:
30:03:23:92:8c:8d:04:60:d2:fe:e4:c8:c5:28:d4:
08:58:d9:56:e0:e8:9c:29:54:d6:8c:b8:59:45:df:
97:f6:79:94:6c:24:9d:87:93:60:3e:18:48:35:47:
21:ae:5c:f6:59:4b:3a:d7:b8:7b:0e:d6:a7:86:99:
f9:4f:e4:62:9d:1b:8b:ca:d2:e8:ab:80:fe:f2:65:
55:5e:4d:a2:20:c2:b1:c8:11:0f:2b:92:62:b4:b7:
0d:0c:bf:35:f8:c4:8a:af:bd:e1:b9:d6:0e:82:17:
60:a9:26:34:4b:3e:56:79:82:33:c2:39:95:72:f0:
42:34:21:f5:bd:d3:6d:2f:9d:f9:57:70:02:61:3f:
06:e9:5e:ea:d5:4e:e8:cc:46:bb:df:82:5c:47:36:
14:4a:fa:44:d0:6c:b1:a5:5f:9c:bd:10:f9:fe:66:
fe:7c:2c:37:af:63:bc:55:09:35:7d:52:5b:51:78:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:51:A7:FA:AF:61:3D:E3:D2:4D:54:5F:3C:52:46:FD:58:10:3D:38
X509v3 Authority Key Identifier:
keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e8:c8:a4:fa:3b:05:2d:eb:8e:df:33:f0:77:b2:a9:bb:21:
ad:d6:b2:23:ee:4e:4d:84:b2:78:87:e1:47:01:38:25:90:bf:
ef:d7:d4:ca:6c:44:f5:bd:59:f8:32:e2:8e:4b:84:8c:d0:59:
0b:c7:90:8e:16:bc:0d:d6:03:96:2d:db:f1:a3:99:35:7d:40:
03:b8:75:3c:02:76:2f:64:c1:83:97:c5:41:bd:a9:49:e9:e1:
11:72:f7:04:2e:f9:76:cf:42:e1:21:e4:ff:46:52:1c:eb:6e:
e5:66:12:8c:24:4d:9e:af:ac:c8:52:fe:2a:6e:db:61:93:1c:
d2:c8:c7:e6:f3:a3:be:cd:94:96:4e:ca:b0:22:24:7e:11:6c:
75:65:86:b3:ef:d6:ae:a5:f0:91:6d:c1:8a:c2:88:76:c3:39:
5b:1b:a1:95:7c:1c:06:c9:31:a1:f9:21:b5:9b:b0:51:28:89:
c2:e6:d0:e6:d4:01:7a:84:21:c8:e0:22:70:57:02:39:67:97:
e8:b8:4a:4e:0b:1a:5a:18:38:80:3a:6b:98:83:4d:c8:1e:82:
0d:34:83:64:d6:04:47:d8:9b:64:d9:b7:6c:6a:ae:b5:b2:47:
86:79:ed:0d:64:fc:1e:9c:10:15:6a:d3:e6:6b:e9:5c:9f:df:
d9:38:75:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:25 2025 by rpki-client