Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File: aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier: pNnCS5aNteuLZnyuoEqYfEET9yGKRdXO8vaM2WGp+jE=
Subject key identifier: 41:B4:E8:85:3D:DD:FA:B1:19:81:23:49:F7:6F:04:A6:88:0C:E5:AE
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 0194BCA9C141EF1D9F2FCF5D51E9758CB704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number: 116B
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: 0dT9gx4qOXkpqZlNkbev_-uBl0c.roa (hash: AhSSJUvXXS4MCpfi02OS/Sl/WMScliKSAGKKpGr/omg=)
2: 2X1QTr4pK6dsEEDP0TzEN8x0Xjs.roa (hash: gCJDq0GkaAMrO8N1qqBRsBVELfUsKIVwgsPJV3Su75k=)
3: LdsSfCPLnEB_NCg1ytZZYK3de9A.roa (hash: xDlE5AumyspeWi6omvwOfeKxcezm5RcBxQqKUT0C45I=)
4: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: qhdq4WgkrnskZsqznxHSjqryivkTUzpdBZXf0qyxUYQ=)
5: p5Pxp-2R2mpxd_TdGf_xD9MyhUg.roa (hash: 8XfSlLN4HMzOCIW1k555GHmyKjvtxd9c3WvZ5/ZNc5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c1:41:ef:1d:9f:2f:cf:5d:51:e9:75:8c:b7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=41b4e8853dddfab119812349f76f04a6880ce5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:d4:3b:9c:cf:89:7f:49:75:48:f6:45:6e:
02:b4:58:a5:44:4d:17:5f:a9:70:92:f6:d5:22:a9:
bd:4c:82:fb:88:77:07:65:85:88:33:de:bc:f0:13:
ac:40:af:22:21:2a:be:01:c2:54:b6:4b:9f:18:7b:
14:69:dd:dc:ba:49:4d:f0:fa:c0:9e:d9:a9:cc:c5:
a7:04:8c:fd:6a:21:75:55:cc:a7:19:b0:6f:61:a8:
47:df:9e:e2:90:9e:da:0a:b9:51:31:5a:81:35:58:
b4:76:f5:92:1e:7e:bf:b2:ed:ca:33:c3:43:27:20:
4a:51:35:79:b1:0a:dd:bf:b1:35:d6:04:2d:f8:7b:
da:24:c4:21:c1:69:9e:e1:26:29:b5:8b:74:00:85:
c7:d2:43:41:f1:21:28:6a:97:05:5f:bb:b5:01:08:
ee:4b:fc:c6:04:1a:73:96:e7:79:56:61:d3:fa:76:
94:70:3d:e9:29:58:55:72:9b:94:56:f6:42:a2:da:
7d:ee:7b:02:98:5c:c7:9e:26:7a:d6:55:7f:16:a0:
7b:22:05:0c:43:b6:72:a5:6e:22:bc:4d:c2:da:1a:
a2:93:20:87:df:7e:9a:5a:9a:67:0c:2f:a8:c2:be:
cb:c4:19:dd:26:21:05:d1:e1:97:b0:5d:d8:8d:3f:
a1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B4:E8:85:3D:DD:FA:B1:19:81:23:49:F7:6F:04:A6:88:0C:E5:AE
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:09:0d:67:41:65:c5:2e:73:65:98:5d:f0:c8:dd:7a:21:44:
07:d8:26:e9:e1:73:c8:67:0e:44:81:31:9a:fc:20:75:c1:af:
b6:50:06:1e:94:45:93:26:9e:c4:a0:a4:fd:c3:c4:00:1f:8d:
0c:e7:37:ab:28:d5:e8:d4:d4:57:93:94:06:38:2a:b4:70:c9:
90:60:9c:55:0d:a1:fa:1f:94:cd:3e:35:de:4a:a6:f1:88:e1:
5e:ae:41:a1:e1:b4:58:2b:e1:af:52:31:62:6d:42:df:5f:31:
10:94:4a:12:00:75:b8:9a:d4:46:83:e3:36:ab:a5:f1:bd:2b:
0f:64:eb:c9:60:a0:ed:e7:36:a7:9b:5b:4d:a5:98:cc:16:a1:
b7:8f:28:5c:1d:71:71:b9:08:9b:04:0d:5d:06:16:8e:2d:a8:
a8:db:a9:6c:29:5c:89:d1:a7:a6:3c:43:dc:fe:4e:9d:d4:c5:
9f:63:b0:14:93:fe:ed:77:67:ef:04:61:17:4b:e2:cb:c1:bb:
46:0e:86:c2:20:fc:39:e1:5c:8c:3f:e1:bd:35:7c:98:41:96:
d0:09:38:d2:7b:97:1f:71:75:19:3a:20:55:36:35:0e:7b:b3:
cd:1d:e6:8d:de:bc:2f:e0:1f:a6:a8:2c:71:25:28:9d:c1:78:
1b:5e:61:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:50 2025 by rpki-client