Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
File: aQvbGIma-yf-H_eAUW_MC5PIuA0.mft (raw, json)
Hash identifier: 0v1S96tMOpgsM7Yt9hHTlW4TtsUM0jBm1YNdSYDe2N8=
Subject key identifier: D9:D9:30:62:6C:4D:12:C2:A5:FD:87:EE:A4:F8:65:42:4F:17:34:6B
Authority key identifier: 69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
Certificate issuer: /CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Certificate serial: 0194BC728EBB143BD731D6865D279076A662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
Manifest number: 05B2
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: 5qlyqHqHN9fm7YIJbWQAFC8mvBE.roa (hash: i7ncddTAht6A90LZTtfDRpJSDX/ZI6t1vgckOHtmIjg=)
2: aQvbGIma-yf-H_eAUW_MC5PIuA0.crl (hash: +bU+zDWWj66zX6LXbXzMLBxwhsOOzvSxXAKxG4WC8UI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8e:bb:14:3b:d7:31:d6:86:5d:27:90:76:a6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=d9d930626c4d12c2a5fd87eea4f865424f17346b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:c1:b0:32:44:e9:40:49:83:5b:67:18:c1:
65:67:de:44:b5:4e:74:d9:b3:5c:8c:15:d5:12:1c:
79:c4:b5:e8:8f:6f:31:0b:0a:1d:25:63:b5:27:a0:
8c:cb:10:e1:f0:72:d9:1b:e3:2c:d7:ab:a4:67:6e:
76:cb:cf:3d:6e:3e:e3:2e:78:ed:a6:24:fb:d0:a1:
b3:c6:cf:07:d4:9a:fb:08:e8:e1:15:4b:76:46:f0:
ea:28:f1:42:3f:12:74:12:3a:3e:5b:a8:ed:a7:28:
2f:ee:5d:6f:76:43:b2:d9:77:fb:1b:67:25:f5:e5:
ca:22:fb:dd:d7:67:67:99:54:2d:46:b5:3a:0c:83:
36:ed:79:1d:b7:a2:18:99:f3:21:dd:57:ad:4b:c6:
05:bb:69:0f:1d:04:5a:15:3d:39:c4:cc:dc:32:d9:
11:41:75:8d:f9:c6:80:2f:9e:1c:44:bf:f0:e8:91:
cb:e0:ad:ea:75:cb:88:69:7c:d0:ae:e1:13:3a:71:
46:56:46:c1:52:c0:70:a4:2d:78:83:25:2b:6b:0b:
9b:56:a2:88:73:b6:a7:38:b0:f5:33:78:86:f7:bd:
3d:a8:85:84:85:58:a0:53:bb:23:e8:ef:87:d9:c4:
ea:69:ae:08:c8:55:4f:96:59:6c:75:63:b4:06:dd:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D9:30:62:6C:4D:12:C2:A5:FD:87:EE:A4:F8:65:42:4F:17:34:6B
X509v3 Authority Key Identifier:
keyid:69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:05:ab:b2:22:7c:f6:82:30:1c:d3:89:9c:d2:cb:6b:95:e8:
6c:d6:a8:ba:e3:67:83:c1:ab:ba:92:58:e5:5a:2b:cc:98:f0:
b0:ab:5f:d7:58:a6:22:04:46:19:63:ce:af:92:7b:5d:ce:4e:
f8:37:7e:32:86:0f:00:16:b3:26:61:9a:a2:30:7a:2d:77:47:
8e:9b:bd:cc:c9:5c:10:94:92:54:59:de:97:30:b7:a7:32:94:
32:31:34:1d:1c:8a:36:52:0c:cf:36:9d:21:68:26:9b:d1:0f:
00:cd:23:f2:d9:d9:ba:8b:ae:2c:3f:e9:65:77:7b:78:39:d3:
2e:b4:61:17:5f:a2:cf:c4:99:d2:f2:a4:72:db:2c:1b:1f:b3:
74:7b:39:92:a9:df:68:9d:d6:29:43:bf:84:23:20:2b:94:95:
e2:39:1a:1e:45:71:e9:6d:7d:37:b6:15:2d:e3:6a:41:39:a1:
43:c1:71:a7:ca:ce:0c:fe:ce:64:4c:75:ef:dd:23:b4:74:d9:
26:d1:de:0a:c1:b0:f6:02:56:0d:3f:23:39:1e:25:2b:09:69:
f1:ca:b4:f2:1f:a8:e7:69:83:8d:06:08:0c:81:de:5e:33:99:
19:8d:8d:71:90:64:5c:38:e3:80:11:27:5d:df:79:40:ea:38:
3f:87:d6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:24 2025 by rpki-client