Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
File: A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json)
Hash identifier: QDoJdhnO23iXT7Bm3BBruvGmR4nxywGB1HP+Yzh7UEM=
Subject key identifier: CB:9E:09:34:03:F0:3D:1F:1E:DD:DB:2E:C6:14:21:4E:3E:7C:B4:90
Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
Certificate issuer: /CN=039e78b45b5f59594eb811f3ac69062967f28c77
Certificate serial: 0194BD85885FF13EA63CDC345C7B5B46BAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
Manifest number: 029F
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: 7h2grz8OfZg3_f3qnvjsQOWeT0M.roa (hash: F0gJrE4+UT2zrGrF6oXGx/pjZ35hmL1zwnN5iPSHMCs=)
2: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: MWpl9rUg7Mg8X3UHpWPBEImqqBeOJwcI15BayBszDcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:88:5f:f1:3e:a6:3c:dc:34:5c:7b:5b:46:ba:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=cb9e093403f03d1f1edddb2ec614214e3e7cb490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ab:48:52:40:15:1b:d6:ee:b3:48:23:55:7f:
4b:2e:fb:8e:fb:aa:0c:e6:76:c4:5f:25:6b:65:21:
9e:d7:a3:9c:82:fb:14:31:bf:46:e4:9c:b6:f3:80:
65:f9:6d:14:60:3c:00:bf:f5:e7:b3:a7:86:ff:75:
56:c5:ad:ef:7b:bb:56:00:bb:67:6b:8c:33:c4:34:
d1:0f:53:0c:cb:20:3a:6e:0d:05:0b:16:dc:d2:33:
11:37:60:03:8a:c5:9c:b9:71:7e:77:ee:5c:ba:67:
62:90:53:dc:da:03:76:a7:ef:32:50:f0:8c:15:53:
bb:56:88:fa:72:6a:88:84:df:0f:1f:c8:5b:e0:9e:
12:e1:21:38:a4:a0:3a:9a:bb:7f:80:fd:c7:8f:b5:
63:08:47:a3:5e:9a:79:8a:4e:ae:8e:05:77:9e:89:
8a:41:8e:22:75:20:61:e8:28:b5:1c:fa:2f:a6:63:
db:70:94:dd:73:12:5c:0f:32:1e:a2:fb:fc:a7:07:
f6:06:8b:d7:c6:25:46:be:e0:1c:f8:75:4a:06:dc:
56:4d:1d:31:70:27:e3:77:fe:18:9b:29:cb:da:20:
8b:a7:88:1d:03:a0:b8:69:f9:94:4c:2a:f0:e8:3c:
40:a4:ad:86:d3:16:02:b1:19:bf:bc:b3:39:88:4e:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9E:09:34:03:F0:3D:1F:1E:DD:DB:2E:C6:14:21:4E:3E:7C:B4:90
X509v3 Authority Key Identifier:
keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4a:15:eb:b5:b5:11:71:bd:d7:18:3c:e5:04:b1:c9:7d:ef:
c8:4b:db:88:77:5c:94:93:f0:72:e4:34:e1:54:7a:a1:c8:0d:
de:d9:68:25:d0:8d:a0:00:b8:66:55:73:d9:fb:a9:a9:03:26:
d1:67:2a:06:55:b4:43:81:7e:f4:95:65:bd:dc:f5:9c:73:a6:
98:7f:25:ab:83:de:23:c6:9c:d9:6e:37:10:02:3b:2e:97:f5:
6b:34:3b:a0:6b:f9:1d:7d:bc:d3:79:a0:68:60:d3:9d:a6:c5:
14:13:c5:ba:44:7c:76:45:a2:09:af:33:5e:0a:4e:e0:f3:27:
08:90:f6:2f:ce:a6:95:88:d3:7a:b7:3e:fd:60:64:f0:e1:78:
0c:d1:a0:ce:32:e2:5d:31:f9:69:ca:9c:e9:fa:ee:e9:af:2f:
f7:77:b7:a1:46:99:7c:e3:99:ee:4a:7b:d0:0a:07:19:e6:74:
88:66:7c:24:e0:77:d4:ae:f2:53:ea:da:22:d3:a6:c2:0c:7f:
78:75:be:51:09:13:e4:0e:4d:25:5c:4a:d3:6b:15:81:21:ba:
81:d8:fb:9f:f1:f7:af:fd:48:74:50:f6:97:8d:5a:cc:28:69:
44:4a:0d:fd:57:a8:25:2d:d9:30:3a:3c:37:53:3b:e6:67:c3:
e3:07:0d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:22:13 2025 by rpki-client