Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: GWKQKduiFG4qhMoYatKE4Vn50KIMhuq/ilSjeKyVdBE=
Subject key identifier: 25:BF:A9:CE:2D:98:BB:C7:FE:9C:60:98:99:CF:0E:97:85:69:4A:92
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 0194BCE060386A02F4CCADB9D6429BCC455E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 096A
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: eZOZdw0xvypBF51rN4RfpY5h6vA.roa (hash: Rrqkszl7rnzrAJTcRtFLjvZXJPc9ZovjcSYFWUvutzY=)
2: hefvQQC5HBlbQ-EPV5xNwJ9mr8s.roa (hash: Ud9jnh2NMlpw3d8NsGfrdGK8oljkEFrFbqnJTHG6eJE=)
3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: YkFYduu0zCscGw0lqr3pVVTDPlKakZMja52kj/yxkUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:60:38:6a:02:f4:cc:ad:b9:d6:42:9b:cc:45:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=25bfa9ce2d98bbc7fe9c609899cf0e9785694a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bb:08:2d:59:23:ce:5d:96:bd:bf:b8:f7:37:
c2:29:d2:5d:26:79:64:ea:b8:75:71:6e:e1:3a:8f:
19:ee:a2:0e:7c:38:eb:86:ae:a0:81:93:63:17:28:
9b:bf:31:ec:94:a7:d7:fd:9e:29:0a:bd:53:4d:ca:
c8:e5:df:b4:8e:a1:d5:ab:5d:9a:8b:8c:71:39:ff:
5a:c1:10:63:d5:25:15:4d:70:e6:e8:b4:05:3d:68:
6e:e2:f9:55:09:56:a4:14:43:a7:17:00:37:cd:e5:
47:dd:71:9b:16:73:50:17:2b:e7:f9:b7:c7:aa:01:
01:e4:7b:b1:6a:3d:b5:b8:40:87:87:14:38:33:2c:
dc:b3:4c:7b:9c:d9:b2:be:68:21:e9:93:97:70:88:
c1:d5:3f:08:5e:92:bc:67:f4:8d:9b:40:1d:79:c8:
12:7b:48:60:fd:c2:db:d5:1e:02:c0:84:be:f9:b2:
e0:38:12:27:4b:2a:ad:0b:d5:74:4f:81:20:e8:1e:
9f:65:bc:86:54:0a:0f:6c:72:22:2b:96:e8:fb:ad:
0b:de:a5:a2:5e:a2:40:b8:63:b7:03:49:b9:9e:f3:
34:b8:1f:17:4f:69:dc:58:e3:fe:d8:3d:b7:b2:a7:
39:df:1a:b5:af:71:38:8a:eb:46:fd:23:ae:bc:9f:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BF:A9:CE:2D:98:BB:C7:FE:9C:60:98:99:CF:0E:97:85:69:4A:92
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5c:a1:ea:bd:14:28:19:07:e4:59:8d:25:8c:1d:ee:56:ad:
e4:ad:eb:02:05:fc:1c:d1:df:29:29:8d:c9:c3:97:cf:ed:0c:
6d:be:8b:36:fb:cf:0b:55:59:94:3b:59:93:ec:6e:a9:cf:eb:
89:33:3f:0e:08:74:4c:f9:b3:1a:f3:25:ad:f9:4b:22:d8:4f:
4a:7a:04:08:77:01:97:55:3c:65:88:3f:8b:17:c3:e7:fc:67:
b8:97:ba:56:4a:32:e8:f8:89:ea:7b:4e:98:7a:35:74:16:0d:
18:38:a9:77:4a:8c:87:89:3b:af:8b:76:3a:0f:83:33:44:72:
04:34:ea:1e:95:a4:c7:10:13:3e:db:92:40:70:c3:40:db:1e:
b8:04:c7:8b:e5:58:9c:8a:75:94:46:26:b9:ec:5b:ab:73:b7:
b5:b5:90:bc:2a:a0:db:f4:fc:3f:a5:16:8d:43:07:f9:15:e8:
6f:f8:4b:36:4f:d2:06:c7:ea:f0:d6:84:17:42:dd:ea:59:4c:
07:0b:f2:d6:7d:f3:32:fb:e0:70:7a:4e:cd:47:2e:fe:83:37:
e5:df:58:56:77:bd:34:5a:80:f9:d6:d9:39:39:2f:db:a7:5b:
15:26:91:7f:1c:05:ac:65:58:c7:99:97:8b:37:4d:b6:5d:11:
ed:70:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:12 2025 by rpki-client