Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File: a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier: IJ8RXs4VepMO5psZzF0pXvUfrNAPQD2tgFTeJbGDlOU=
Subject key identifier: E3:32:04:3D:21:10:27:D3:66:3A:0E:B2:CB:AB:E3:D7:6A:52:12:DB
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial: 0194BC04ED0152639B82A5E20DD109B6C021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: 3VrPGjUQ3Y-l-f7OeEozbIvcsLg.roa (hash: bLeP0OV6qVbEnqwfvFZWrAEprQe0NgLJqVsqQYDqQEk=)
2: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: 4RqLN8RInE4oRqluySTVztteZ8HILrADpsNsQ8ploIk=)
3: hNx5M08bBB4LNOoJFKhlbkgWWJM.roa (hash: cqMnw1dZerM4/zZuXP5i5wijuCSzDOC7D7skn29vFmk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ed:01:52:63:9b:82:a5:e2:0d:d1:09:b6:c0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=e332043d211027d3663a0eb2cbabe3d76a5212db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:51:8e:ba:ff:bf:9f:da:1d:ff:e1:31:fc:
2b:81:7b:9c:4c:0a:cc:13:8c:35:41:51:e0:c6:d1:
34:b0:7e:97:d9:7c:7a:91:b2:0f:d5:dd:14:6e:af:
b0:6b:28:4a:46:70:a9:1d:ea:30:20:5f:20:d1:be:
47:30:27:fc:5e:12:ac:fb:b9:66:f6:fb:70:8a:7e:
f7:a9:89:b0:cc:a9:bf:2f:52:47:8c:1e:34:6a:f3:
df:65:02:22:3c:99:a0:30:a6:be:c1:5b:b9:cf:01:
1d:bc:e0:1e:6c:56:82:79:d6:73:9e:37:45:35:ed:
68:76:d2:89:7f:50:f1:eb:06:60:df:44:fc:dc:32:
29:bf:f5:9b:e8:90:d0:88:12:43:61:5b:41:1c:e9:
4e:e9:54:2d:54:79:2c:11:48:bb:8b:42:78:ce:f1:
70:10:7a:15:d8:65:e2:98:c5:d3:e1:03:ee:90:bc:
a2:f8:ae:6f:57:e3:ac:4f:cf:ed:11:05:fa:26:f5:
9f:87:4c:a3:b0:4d:9b:dc:d0:dc:06:cc:56:e0:e3:
15:10:6e:14:e3:83:cd:f6:7b:8e:e4:47:1f:68:65:
9c:49:f2:ae:a7:df:12:00:3d:b7:fa:b2:14:96:48:
84:52:e4:f1:14:fd:dc:df:42:58:63:20:1c:a8:4d:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:32:04:3D:21:10:27:D3:66:3A:0E:B2:CB:AB:E3:D7:6A:52:12:DB
X509v3 Authority Key Identifier:
keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:52:49:9f:22:7b:c6:7e:74:ec:27:fd:ef:de:a8:cd:ab:ee:
81:59:f4:63:d9:2a:50:25:a4:64:7c:ad:8c:21:00:c1:7b:1b:
01:81:1b:81:f1:7c:0a:d5:bc:da:c9:57:27:61:95:92:cc:23:
c4:6e:2b:fd:61:77:b7:a7:65:e3:30:04:91:63:25:4a:75:70:
ef:12:9b:ef:56:60:ce:79:46:84:5d:11:d6:ed:9e:54:a1:b5:
3c:7c:91:e1:3c:de:7e:4f:e9:2f:07:96:e7:b2:0c:b6:fb:de:
fb:fa:51:8f:70:90:c7:2a:0c:60:99:72:37:96:bd:a6:a6:84:
45:4a:41:c8:1c:32:ee:80:62:e4:50:59:5c:01:28:bf:97:3b:
52:06:69:0f:38:8b:b9:1d:6a:71:d0:09:49:d8:13:21:e9:30:
c2:a4:ee:2c:4b:8d:71:23:41:81:c6:b1:45:39:fd:5f:d4:75:
22:71:61:e8:f8:df:a4:70:0a:b4:ee:c6:60:58:b3:b9:6e:32:
c3:e8:9c:c1:ad:dd:b2:55:d3:ff:72:dd:e1:5b:38:6b:8f:6b:
9e:07:c1:2b:b8:05:9a:91:10:bf:29:37:1d:5c:5e:98:82:aa:
cd:63:31:2d:0d:0a:70:e5:65:50:ac:24:d7:83:e8:97:cb:6b:
5f:94:ef:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:42 2025 by rpki-client