Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
File: aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft (raw, json)
Hash identifier: P14yfdxVidUuXN+YOFAx9jL3qV3Ha+pgPf+qyQpTTuI=
Subject key identifier: 9A:1D:2C:16:7E:94:65:7E:C6:E3:69:55:1F:44:E7:3D:0E:36:69:DA
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Certificate issuer: /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial: 0194BBCE792B073A990BD6A85456078E352D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
Manifest number: 048A
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: 86oammqkU0TE8AzqwBVv1FmzBYc.roa (hash: H3QOeQw7Wu4vQlfZwSufbLTx40TDb5RrgWASWL9m9b8=)
2: aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl (hash: uYTWwSgi3T1xXQ5jxsxH/peKDkRQ35pUvuAeZW08VNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:79:2b:07:3a:99:0b:d6:a8:54:56:07:8e:35:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=9a1d2c167e94657ec6e369551f44e73d0e3669da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:19:71:db:c4:30:fa:02:ab:42:8a:55:58:
eb:1c:9a:d3:0f:ed:2e:52:2f:91:02:3a:2f:2c:b3:
7e:b6:79:9e:b9:da:df:ad:e4:39:36:a3:d0:61:34:
32:0d:a6:85:70:dc:9d:54:bf:38:91:ef:85:36:ba:
07:6d:e2:90:15:26:b9:e3:75:e5:94:bf:6b:2e:c2:
08:87:cf:56:25:0e:58:13:6b:67:3d:5c:78:66:e0:
59:44:16:95:ed:54:ec:a2:ad:39:d9:9b:10:45:d1:
e4:7d:4d:18:91:ed:30:6f:62:b6:43:ed:e9:50:16:
98:a4:d4:04:a4:d0:e2:07:67:be:e4:b1:5d:99:20:
79:37:1e:e5:8b:66:6a:10:d5:e0:93:0f:6f:39:66:
69:c6:b3:d2:bf:38:0a:98:fa:0d:2c:72:fa:b1:c5:
94:51:85:1e:0a:8e:26:8f:14:d0:d4:28:f6:ba:5c:
41:ff:81:d3:48:3a:c3:d8:98:e7:12:f8:8d:d3:01:
59:2e:81:89:93:f8:5c:a7:60:06:b9:a0:32:3a:f2:
a1:88:3b:37:2e:a8:59:35:29:1a:d4:2c:f1:d1:30:
75:23:61:34:64:6f:40:d3:93:d6:0b:1a:eb:48:68:
65:09:bc:79:d1:5f:1b:3f:78:2c:24:96:cd:9a:0b:
34:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1D:2C:16:7E:94:65:7E:C6:E3:69:55:1F:44:E7:3D:0E:36:69:DA
X509v3 Authority Key Identifier:
keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f4:6d:fd:4b:6b:82:dc:8a:cf:06:4d:3c:9c:92:0a:e0:8b:
60:df:3e:c8:f2:c0:cf:b3:1a:fd:1e:8c:80:0a:7e:99:96:f8:
74:db:45:c1:01:09:12:8c:29:c9:a9:c4:96:50:9e:b6:5b:61:
cf:57:b2:e5:5d:f3:8c:28:d7:95:85:3d:2b:34:ec:59:25:65:
c0:2e:c2:85:8e:fb:c9:07:c9:1d:c8:4b:a6:9f:27:44:c1:43:
46:b1:83:2e:71:05:58:81:86:b7:66:4b:f0:b3:aa:78:9a:ae:
ab:d5:e5:27:af:ae:d8:7a:93:32:14:17:58:17:e4:79:38:c9:
5b:03:3f:72:99:a6:58:6b:15:e6:0e:9a:08:1d:4e:31:69:d4:
fd:92:82:1f:48:77:c7:76:51:c4:99:42:f1:24:2b:a7:9d:a7:
1b:f8:fe:12:42:8b:71:6e:5c:86:5f:bd:a8:48:74:01:ee:23:
b3:65:ef:2c:cc:22:20:56:7b:7a:a4:0a:10:62:4d:d1:ef:35:
40:47:03:1d:00:71:50:f7:af:24:e3:4e:c8:27:1e:0b:b3:2a:
59:ae:04:51:49:4c:cd:bf:48:fd:82:4a:d8:9f:f6:07:26:84:
f9:df:d2:a7:b0:1c:38:e9:c4:a7:1a:52:85:90:11:48:20:2c:
d8:4c:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:43 2025 by rpki-client