Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
File: aa24Jfn9vKDNfHkB3reiKuF5fAY.mft (raw, json)
Hash identifier: /BXxJEgdN71qe9OceNs9jhW56dNFxep4mztmWOvSAhE=
Subject key identifier: 05:EA:91:6B:95:63:AE:1D:2E:6E:02:5C:3C:2F:C1:7C:70:7D:34:17
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 0194BD17940B29C0A392112F689F78B3C5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
Manifest number: 1145
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: CcO4X5owbp8OTsQUAi4Se0U0bGo.roa (hash: Rjhil4a1bZ7IivISF1+emC+myyX4/SSXPPEDg9r6bJ4=)
2: aa24Jfn9vKDNfHkB3reiKuF5fAY.crl (hash: Z4Df6hwbsNAByMm6mzlzGMJ9i7sK4wESUw6tpF77mpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:94:0b:29:c0:a3:92:11:2f:68:9f:78:b3:c5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=05ea916b9563ae1d2e6e025c3c2fc17c707d3417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:e0:45:17:29:42:02:b5:7b:36:78:56:99:
e5:5e:5f:02:e4:7b:11:7e:e2:00:b4:a7:44:ff:28:
61:62:3d:91:04:60:44:b6:5a:9b:59:c1:66:7c:32:
f2:af:4c:8d:f2:f7:06:bd:68:2a:33:a2:36:30:44:
75:c7:e8:a5:41:8b:ec:24:45:09:11:60:e7:54:8c:
36:e5:da:98:db:d8:68:63:f5:72:47:83:73:53:3d:
60:02:85:2e:15:bf:27:d9:e2:89:a9:9a:ca:ee:16:
3e:06:cd:18:d9:92:b1:ff:56:be:d5:a2:52:ff:ac:
58:bc:d6:66:7b:87:f3:0c:b4:f2:6d:1d:66:c1:06:
41:70:39:87:0e:1e:ec:11:74:92:4c:f2:23:74:29:
87:41:51:4f:ff:e9:eb:67:bd:e3:34:40:5e:c2:8b:
c8:10:40:46:d5:86:bc:52:1c:e4:f0:2b:74:dc:f1:
32:30:b6:65:5b:d3:04:ff:c3:a5:15:91:33:87:69:
d4:15:43:66:9b:0f:73:05:ed:e8:c2:32:e0:37:84:
7f:92:73:3e:e6:c0:47:da:ab:4a:cb:19:83:e8:0a:
78:28:8e:89:66:9e:47:95:1d:c7:53:17:2f:af:6f:
55:e3:22:b2:c3:cb:01:56:54:cc:e0:43:36:06:be:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EA:91:6B:95:63:AE:1D:2E:6E:02:5C:3C:2F:C1:7C:70:7D:34:17
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:52:36:52:d4:e6:e3:d6:91:6f:5f:c3:01:e5:73:ea:06:b5:
71:41:09:72:21:a5:73:fc:05:d5:cb:ff:bd:e0:6f:fb:16:09:
a3:36:12:d4:c3:d4:3b:ba:28:c3:a7:15:c1:93:72:5e:d2:f2:
2d:e1:3f:70:f0:41:f2:02:6c:2e:ca:37:8a:45:bf:ce:5b:c4:
34:d3:b5:df:ba:8c:1c:08:cc:c6:16:67:cf:2c:ca:b1:24:12:
31:f2:4f:11:96:e2:55:38:cb:9d:52:24:6a:07:8a:11:23:e9:
f6:b2:4e:bf:fb:f8:36:6f:e2:35:ee:3a:c7:e7:8a:c6:91:6e:
84:ca:52:6a:4e:ee:0b:b7:f9:c6:2a:da:4e:bc:7b:8e:90:22:
ca:cf:ec:f7:3d:e1:b9:05:88:88:b0:71:80:5f:96:c3:4f:f6:
c6:d4:d0:b5:01:36:e9:17:4f:1d:62:d8:db:74:f3:eb:05:b6:
70:d6:9e:83:d0:91:17:17:b1:2c:b4:9b:56:44:47:e0:0b:11:
27:f3:1a:4d:d3:8e:d8:47:5b:25:71:0a:86:b6:ca:46:0d:22:
0a:f1:da:14:84:21:85:f4:b2:5a:da:ca:f5:2f:f9:df:e2:cb:
20:b8:be:ea:c2:e4:39:cc:78:64:b0:f8:dd:27:50:9d:fb:49:
f0:ef:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:27 2025 by rpki-client