Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
File: r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json)
Hash identifier: NPDYBZ0tbwW8lRAk+XxbMypof8CcHtE7V6+hXFs1Rpo=
Subject key identifier: 9B:22:A4:DE:42:AA:61:56:89:DB:57:13:7F:93:41:88:37:86:D1:30
Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Certificate serial: 0194BC3C51AF5E73A348F66455699AAAA6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
Manifest number: 07B6
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: EdKEOZXwSgqw7Bu_DizXNwNUu7g.roa (hash: YaLUi/WCyF+z1PE1hT5J9Z4ZVraA/YT5/9yCeg4jCDs=)
2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: 14pSHv7Lf0gjQgGgHsDMSwglnPtCf2vRe4pscanVgkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:51:af:5e:73:a3:48:f6:64:55:69:9a:aa:a6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=9b22a4de42aa615689db57137f9341883786d130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b7:41:64:b9:2d:93:9b:8a:57:fa:12:26:87:
21:7d:98:e5:c1:50:4b:d4:49:04:36:a2:17:ad:68:
79:58:bc:00:82:fd:6b:e2:89:2f:a9:d7:eb:74:14:
bb:d3:4d:ed:a6:8f:99:23:18:58:14:d4:ec:01:0b:
22:35:ba:70:2d:6d:69:15:09:b2:f9:97:01:6f:21:
eb:56:0a:93:09:08:a9:46:2d:ca:23:4e:69:4e:20:
d0:b9:a4:73:3b:ef:96:6a:6b:11:b8:0b:5c:45:26:
56:30:a1:8b:79:bd:bd:c5:84:48:7d:47:7e:26:f3:
f5:f2:37:fc:b7:c5:60:64:5e:97:c4:60:65:ab:14:
89:59:71:55:43:9b:f9:2b:d6:de:e5:2f:c6:84:c4:
a7:8b:4c:ae:1e:1c:39:20:0f:9f:fa:2d:30:29:bf:
bd:72:1c:da:04:cc:e6:80:89:ab:7f:fa:d1:54:96:
cc:f5:33:59:48:00:39:b1:4f:f9:c0:34:d8:88:ec:
83:e6:89:84:ea:ab:23:0d:fa:68:cb:9e:89:74:1f:
9a:b6:cd:e8:bd:3c:a7:fd:b3:16:26:2b:ee:dd:df:
a1:8f:52:fd:a8:2e:a6:a9:c0:5a:c7:49:f7:27:88:
26:79:62:3e:31:4f:2a:30:91:2d:ee:fd:92:f5:8b:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:22:A4:DE:42:AA:61:56:89:DB:57:13:7F:93:41:88:37:86:D1:30
X509v3 Authority Key Identifier:
keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b2:80:6f:73:08:db:9b:0a:5c:50:10:f0:4b:f9:f9:85:95:
39:6c:df:ab:12:69:5e:3e:99:05:31:56:b2:48:d7:79:95:e8:
cb:7d:cf:65:62:17:e9:80:1d:92:b9:9e:91:ee:53:cb:fd:15:
61:59:9a:87:e5:e0:33:86:18:1f:94:b4:1e:56:93:55:18:16:
d9:c5:f2:81:13:41:20:6f:ba:65:bb:7e:13:28:65:c6:40:4e:
2f:10:6a:c1:46:85:31:b8:73:f5:7d:d6:c0:67:c0:9e:f8:e2:
1f:40:9d:2a:fa:1f:75:13:58:6f:64:c2:29:71:87:6e:4f:ae:
85:2a:50:27:8e:ae:95:b1:86:9d:47:b3:60:d5:5f:88:77:c0:
5a:b9:fb:ed:16:fc:b1:05:f8:59:a8:b8:f8:a1:f3:d9:0e:b1:
27:ea:af:1e:8a:ac:7c:43:10:8a:2e:87:59:23:e2:4c:09:3b:
44:a7:ff:ec:af:d6:03:a9:8d:62:09:bc:9d:e7:6f:a2:51:4e:
0e:af:0f:f7:66:6f:17:5f:f2:3b:99:b4:ff:6c:52:6f:ae:15:
83:0a:d9:36:0e:be:71:2d:65:39:49:72:08:0c:62:b4:4e:1a:
7a:fc:85:30:23:b8:f9:6c:fc:b7:67:5b:8c:9f:63:c5:ab:78:
93:57:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:32 2025 by rpki-client