Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier: uwfOKHpVUSeHjxZ+gWA8q8XvsWGW/+ZB7ZV11v4/riM=
Subject key identifier: 31:91:B2:69:07:3A:0F:45:B1:D7:7B:0C:19:72:5E:CC:24:6E:5E:78
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 0194BC052EA3FF7C40133E4FD652E98E9B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number: 72
Signing time: Fri 31 Jan 2025 11:00:43 +0000
Manifest this update: Fri 31 Jan 2025 11:00:43 +0000
Manifest next update: Sat 01 Feb 2025 11:00:43 +0000
Files and hashes: 1: 7wo8i41Up9XbCW4B5tKeIytyMsA.roa (hash: yirWyb5pij+onS9AdwvB/WtmePzfdhsn+x4XqsoWk2E=)
2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: 9HwvkrI3mtfAOAb+sigDb3oN5A3X8xqwbd8W3SaQKBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2e:a3:ff:7c:40:13:3e:4f:d6:52:e9:8e:9b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: Jan 31 11:00:43 2025 GMT
Not After : Feb 1 11:00:43 2025 GMT
Subject: CN=3191b269073a0f45b1d77b0c19725ecc246e5e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:d2:6d:d1:f5:2f:49:b0:75:cd:96:cf:8b:
1c:9b:29:6b:49:bb:78:f4:6d:b4:cd:cd:2e:0f:e0:
1b:35:ab:78:3d:86:dc:77:06:81:88:62:b5:d2:51:
02:31:cb:2b:e7:e3:a2:3b:32:66:b8:2e:56:09:ae:
f8:b4:26:61:1e:86:0d:f6:0f:04:6c:55:80:98:e5:
5d:58:c1:cc:aa:dc:09:ca:6e:1d:de:29:a1:ec:7f:
8d:d7:9b:2d:c3:53:c7:37:a2:bd:5b:ba:bb:a0:f7:
69:9b:62:38:ac:25:3e:94:2c:32:90:5a:38:87:a6:
5a:ca:1e:ff:4b:08:13:d7:6a:ba:47:5d:ab:9f:d8:
fd:93:ef:88:1b:16:65:33:6e:f1:3d:0f:20:14:6b:
28:93:e5:e6:47:af:a4:b8:14:c8:79:d6:ac:e0:d5:
ee:ac:c0:1c:92:f7:0b:33:91:a0:fe:fd:4a:ef:52:
66:1f:c0:ca:4e:7a:df:55:53:84:c7:6f:bf:35:30:
98:b3:22:12:5a:50:1f:b2:08:9e:93:d9:26:81:43:
02:11:b7:64:01:0b:92:e1:df:5d:af:0c:59:3a:00:
53:5b:90:c1:8b:96:2b:d3:86:82:bf:2d:4f:fa:f2:
67:66:f0:14:51:5a:a7:01:17:d7:8e:27:94:2e:32:
d1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:B2:69:07:3A:0F:45:B1:D7:7B:0C:19:72:5E:CC:24:6E:5E:78
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:39:e0:10:53:8a:13:d8:89:39:9d:ed:84:d6:b3:37:51:97:
02:ec:c7:87:74:17:27:88:6d:e5:b8:14:12:65:0a:ed:19:1e:
eb:62:cd:d5:67:da:e2:09:4f:5e:85:b4:57:9d:4c:17:e4:54:
f7:c9:c9:73:b1:c9:d6:f1:8c:89:89:5f:f6:90:52:31:d3:07:
b5:7c:0a:04:02:08:be:b6:b3:9b:da:95:68:b2:58:9c:5a:01:
f9:6b:5d:c6:c6:0a:0c:be:43:23:36:10:f7:0d:bc:e4:11:f4:
26:cb:f8:0d:96:a4:e8:f8:28:48:87:be:2e:01:a0:e8:b9:b2:
d8:2e:f5:75:7e:3b:27:db:69:ed:60:12:aa:f6:b5:dc:72:2b:
f3:fa:8f:38:46:d3:bd:01:7a:3b:1a:78:56:52:00:a0:4f:1b:
ee:a3:0f:71:1e:61:1c:45:1d:97:fa:e8:cf:80:4e:e0:f6:89:
26:7e:80:06:8b:8e:d2:e1:0a:f0:8b:23:81:bd:a5:09:3c:f0:
eb:5e:ae:a6:e3:71:7d:1a:21:2f:7b:13:e1:93:0a:d5:e6:21:
b1:42:af:de:4a:e4:02:26:10:aa:62:31:cb:80:c5:08:64:16:
ef:4d:74:70:2b:68:9e:fc:40:cc:fb:80:1b:f7:88:9e:24:18:
e3:7a:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:24:27 2025 by rpki-client