Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
File: aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft (raw, json)
Hash identifier: wRab8IBpVlJCLPTYUNE7pFZm6n8EpG2Ec/7yRXUxyDk=
Subject key identifier: ED:61:22:AA:60:80:4E:92:6A:4A:B1:CF:CC:89:E4:32:13:D2:80:9C
Authority key identifier: 69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41
Certificate issuer: /CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
Certificate serial: 0194BC73268170EB6CBE7612006CF63F0880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
Manifest number: 0463
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: WhLENsO2y4UEzkuswA1wx41c4K4.roa (hash: qqWz2hpUFCfdOvnndjkfI9tgPQ2D7KLxkWgnxyi1reI=)
2: aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl (hash: 5lj7GU8d4TW0zmo5XeO02a5kPp/p7xSC83Wb91wpg+o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:26:81:70:eb:6c:be:76:12:00:6c:f6:3f:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=ed6122aa60804e926a4ab1cfcc89e43213d2809c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:5d:f9:7e:95:46:56:d6:1f:13:50:7e:a1:
5d:2c:4b:b2:ca:d7:a7:4d:98:42:7b:a3:0d:07:f6:
dd:0a:f0:4c:d9:f3:f2:ca:93:58:5d:30:13:e4:1b:
3d:6b:44:cc:1a:d8:d1:a4:b3:16:54:ce:7f:d3:81:
37:ed:83:35:8b:c2:54:34:76:3d:24:9e:b5:90:66:
57:b3:28:ab:94:1c:c0:09:d9:b2:99:51:46:50:4b:
94:24:94:31:b1:47:40:ef:d6:6c:e3:13:d0:7e:6a:
41:cd:b4:8f:37:34:d8:78:71:bb:6b:51:71:98:7f:
b8:22:a0:36:05:85:e3:44:ef:15:2f:f4:59:d6:f7:
ac:fb:e3:46:ca:ce:10:9d:f7:56:8a:6b:03:2b:8a:
f4:55:f3:ec:2a:da:ca:7e:1d:58:cf:01:81:4d:46:
4b:c4:1c:a7:28:b4:97:2c:23:7a:9a:56:51:ac:47:
6f:bd:3c:db:43:76:80:a9:35:cf:41:d5:c7:7a:3a:
ee:ae:66:e4:e7:d0:d1:3d:4f:57:16:aa:e4:64:61:
98:2a:86:81:c8:f2:99:d7:bc:d3:2d:01:4f:1e:be:
9e:1f:ad:0c:bd:b0:5f:69:82:89:11:ae:b6:74:5d:
fc:03:4c:2b:c0:d8:6e:d3:0d:47:2d:49:03:60:62:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:61:22:AA:60:80:4E:92:6A:4A:B1:CF:CC:89:E4:32:13:D2:80:9C
X509v3 Authority Key Identifier:
keyid:69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:82:8a:55:c5:3f:27:10:1f:e9:1d:c4:0b:31:da:fe:52:02:
d5:3d:a8:cf:53:49:c1:25:c2:fd:2f:c2:ea:1b:2d:23:98:82:
43:0a:b2:ea:27:ee:9c:ff:da:ba:e8:f8:f8:17:1e:7d:b8:20:
17:fa:e0:2c:bc:72:5d:e4:df:84:32:41:ce:f5:f5:60:d7:ac:
63:78:ef:21:b2:96:d8:9c:f7:5f:94:a4:6f:23:47:26:bf:b7:
5d:f3:d8:46:8b:51:46:eb:ad:cf:05:04:86:39:d3:5f:75:f9:
d7:64:3b:30:7e:b8:f6:28:32:b0:a5:d6:ed:05:fd:5d:c8:0c:
a2:a0:07:1f:5f:72:07:0f:1b:f2:18:a6:ea:34:69:81:8f:8b:
8e:d0:af:8e:82:fd:f2:f4:90:55:71:b8:51:ee:dc:d1:eb:13:
9b:42:68:fa:7f:06:93:f9:6a:e5:42:26:ad:51:4f:0f:98:07:
68:12:bd:b0:e8:b8:ce:ed:8c:86:8b:39:a4:e5:90:4b:e3:f6:
5d:0a:02:51:79:8c:59:84:d5:72:e5:4d:30:5c:c2:a7:66:ef:
d8:49:e5:e7:b5:35:fe:f9:32:34:e1:84:19:33:72:41:e6:cd:
0b:95:df:81:61:cb:0a:40:3e:ca:5c:f0:7e:05:ef:d0:bd:ca:
37:c8:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:57 2025 by rpki-client