Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
File: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft (raw, json)
Hash identifier: SEVXQhp8xQajsqKb77ADTUkCbELbwPrtSjXUKwA2WK4=
Subject key identifier: 69:7F:A1:E4:34:19:87:F4:0C:B8:A0:68:39:2D:73:CD:65:2A:4C:DC
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Certificate issuer: /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial: 0194BD17758A9A7774A62784898921720B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
Manifest number: 0F87
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: Qm0v2QB0N6w8qGQL8ta92rDkpA0.roa (hash: aEK3PYUQq1E1pzkJ/CLkmP6YwUe047cyT3qoeHQ2dn8=)
2: dS8Rkw8dzyED62hL_7OXnHLvH04.roa (hash: qEmro5fJia38aDC86kQ3vNKBrJLyPDYdvwDe7Qknl6I=)
3: jIx4n0qvGCMbvZ4nZHfe7AlAvc4.roa (hash: PbvVUSgN0dLFWz6bc4odaxxggERGNNwAo8M1AiayrEs=)
4: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl (hash: u9U9dPW6LQByWiW5z7/I4VNYiuKXH8kbmDLRyEYajLg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:75:8a:9a:77:74:a6:27:84:89:89:21:72:0b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=697fa1e4341987f40cb8a068392d73cd652a4cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:40:17:a7:59:c1:25:a1:d7:bf:c0:f1:e4:
03:d3:33:e5:de:52:88:f7:cc:2f:d3:2e:30:84:85:
15:d0:1a:76:00:a9:22:a8:76:39:17:8d:74:b0:de:
64:e6:38:cc:48:27:27:ce:75:dc:6e:77:c2:60:7a:
a7:c5:26:6e:dc:b9:34:5e:24:ef:73:dc:52:3d:49:
37:c4:48:4b:6f:f3:39:69:c6:ed:c9:7a:09:84:82:
1c:74:d4:71:f1:90:6e:2c:4d:ed:dd:63:00:69:e9:
19:77:05:c1:ed:ab:36:71:32:97:b5:08:6a:7e:cc:
aa:7c:5b:cf:a3:dd:fb:08:76:8c:b4:7b:9f:6a:33:
3a:ea:2b:11:e1:03:62:d9:10:d5:29:42:c1:c0:dd:
6a:50:e9:c8:6a:cf:e3:a4:5d:c9:d0:6f:ee:35:05:
c2:d9:4a:ce:d2:c6:0a:ac:e5:dc:d7:6c:bf:91:7b:
f2:1d:27:6e:9f:b9:75:ed:c2:78:6f:20:13:1d:14:
24:12:8a:11:b8:c4:2a:20:13:51:97:22:90:d9:55:
82:27:e1:eb:d5:c3:a9:90:fb:0b:9b:82:16:7f:9e:
5f:45:8b:d1:0f:59:29:d7:ad:ee:ee:57:6e:10:7c:
bf:a9:25:47:6f:23:96:bd:14:dd:9a:96:fc:17:8d:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7F:A1:E4:34:19:87:F4:0C:B8:A0:68:39:2D:73:CD:65:2A:4C:DC
X509v3 Authority Key Identifier:
keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:76:9c:15:1b:05:62:73:2e:c8:4e:c4:f4:9a:01:72:15:3c:
8b:81:a8:d3:96:e6:53:d1:fa:bf:3c:51:ea:fe:8c:7c:9b:f0:
3c:6e:b2:05:41:98:06:7f:ab:70:31:03:97:84:0d:f0:23:7d:
51:20:5d:68:bc:6d:d9:10:34:b9:02:98:e8:68:32:3f:f1:50:
46:66:9f:b1:68:44:eb:f1:9a:c2:9d:dc:b6:08:22:08:0d:90:
9a:2b:02:ba:e6:78:64:16:f7:82:35:8c:a9:7b:d2:3d:4a:38:
b5:3d:7c:1d:9d:3c:50:0f:60:2f:d8:eb:04:07:69:d0:38:16:
80:01:a3:4c:f9:cd:06:b1:95:a2:11:f8:3e:b5:0b:89:0d:c4:
41:f4:fc:c2:3f:8d:20:f2:28:88:bc:30:f8:51:21:e4:66:68:
06:d5:a2:30:9d:0d:e9:34:20:5e:ef:de:0a:5f:a7:f6:5a:48:
bb:a5:f8:0b:60:cf:61:21:f0:61:a9:18:f4:05:36:e9:9d:5f:
fb:e7:ff:79:f5:00:7d:09:1e:b7:57:49:6d:74:cc:7b:66:bd:
30:04:ce:25:b2:f3:6f:ec:4b:bc:15:0b:12:ad:49:8c:54:1e:
52:39:47:7b:89:9b:d6:a0:3a:a0:93:b0:4a:5a:63:99:d4:28:
be:22:40:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:07:30 2025 by rpki-client