Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: QHPpuLuFDqQ9XqVwY+nt9YiSQDmhefUH6e07JO+jJiU=
Subject key identifier: 32:81:92:53:74:5A:8B:84:06:56:0C:6E:D7:FC:1F:81:22:6B:AC:6D
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 0194BBCEDCE92E467A19ABB5C1C8594E8163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=)
2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: 6qmS4DoT3+h21Ky8GO7AQEMr7nQXKrybZwPUWiwkVGw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:dc:e9:2e:46:7a:19:ab:b5:c1:c8:59:4e:81:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=32819253745a8b8406560c6ed7fc1f81226bac6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:74:5b:7b:49:22:32:0b:e1:09:93:5f:2a:
8b:b1:4a:b7:a8:44:6b:b3:39:be:91:3f:f4:a7:17:
76:4a:20:7a:8c:f2:63:99:94:c2:cd:e3:5a:bd:b5:
15:52:28:86:8a:e7:30:a4:09:8c:d9:f2:c6:fd:08:
8c:11:74:05:38:03:d8:99:12:bb:3a:a3:e1:70:0e:
1c:3a:0c:fb:0c:28:a2:03:c7:71:dc:f4:83:67:23:
17:4b:b6:9f:6d:5d:d6:e2:41:aa:6b:99:25:8a:b0:
02:46:d3:ff:f4:04:59:49:f3:aa:bf:ae:40:0c:05:
88:2b:14:a0:af:bb:b6:80:28:bc:88:fa:28:af:95:
62:44:3b:d8:2a:1a:f4:8b:a0:44:86:58:16:94:dc:
e2:1d:48:cf:a8:e5:04:6a:fe:22:64:14:1e:d2:17:
1c:89:db:77:3e:db:b9:7c:3c:c4:ff:07:fd:88:bc:
e8:00:80:9e:5f:ec:ed:5a:69:05:04:cd:22:d9:e0:
02:48:7f:b4:6b:4d:46:26:39:f4:38:99:e4:cd:14:
59:03:1b:a5:b5:97:ae:54:15:bb:8f:82:8b:dc:9f:
09:a1:62:e8:3f:40:6e:94:72:b2:34:13:6b:4b:08:
85:c1:12:ac:06:1a:4d:9d:3d:7c:f7:ac:83:6f:9e:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:81:92:53:74:5A:8B:84:06:56:0C:6E:D7:FC:1F:81:22:6B:AC:6D
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:37:13:a2:09:15:a6:99:0f:3c:4e:af:65:31:f0:81:4b:07:
84:5f:56:23:ae:a8:0b:dc:58:77:ba:96:f8:2c:ec:f7:74:fb:
02:2c:85:92:b1:06:82:9d:84:ad:9d:21:a5:fe:7c:30:e5:57:
24:66:79:71:67:4e:c1:c1:d9:15:21:16:f0:54:fb:2a:f5:35:
37:97:2e:df:4e:5f:2e:eb:22:23:13:9b:23:84:42:b7:d6:70:
be:4b:98:95:5a:39:87:88:da:30:8c:25:c8:24:be:8e:60:11:
e3:2b:93:01:16:f8:ea:d0:c4:05:a2:1d:a3:73:95:5f:8c:36:
01:10:95:91:00:f5:1c:07:ff:60:7b:89:7b:aa:9f:a5:b3:e5:
fe:db:bb:ad:05:d9:be:07:49:93:50:02:be:27:20:83:74:d7:
b9:11:6b:8c:72:c9:ac:f7:15:46:f1:17:b0:b9:eb:49:cf:3e:
4f:2b:7b:ef:11:1f:e5:bf:0b:9f:93:3b:2a:32:7e:b2:16:a2:
dc:54:ff:e3:83:ba:56:28:80:b3:e9:10:96:13:39:ec:ef:3c:
a2:49:de:19:90:22:41:40:c1:48:09:37:9a:d2:80:ea:f3:ba:
90:a8:98:1c:b8:a7:f8:dc:0c:a3:60:06:94:6f:89:cb:c9:e0:
91:f5:3f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:34 2025 by rpki-client