Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
File: aZuxClVyF1sDo8fL--k4t7FEGsA.mft (raw, json)
Hash identifier: vzVB2CkDCVUlmc/iMHN7WpFd3FfN/YvV9ar6y3LJFB0=
Subject key identifier: AC:9E:34:66:3D:01:AE:8A:6F:5C:15:2F:35:EE:2F:1C:0D:90:34:89
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 0194BC3C3F919E46AB2BB1EBD3C529DEEC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
Manifest number: 0584
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: N5yHtSmIzjdux70VxbibkigJnPs.roa (hash: 9gzwKXozjeocMD7/cGK25SjjWM/umahL9QM8Kbeipak=)
2: aZuxClVyF1sDo8fL--k4t7FEGsA.crl (hash: xedJ6REJLs4Yf4rtkqisUbWCvqzo0AQS2MHzYjRoWW8=)
3: ha1GFGgyrmpD4R8KeDnEZpxuKqs.roa (hash: nTt2LcLEhACSb9mIP1F5UH8NEmx1EFCAvtQLB71m5zc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3f:91:9e:46:ab:2b:b1:eb:d3:c5:29:de:ec:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=ac9e34663d01ae8a6f5c152f35ee2f1c0d903489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:0c:94:ab:bf:42:27:41:25:6c:08:1c:8a:
fb:9c:8d:fe:3d:25:a6:48:53:7d:ba:a5:94:4e:e4:
5a:85:f4:7d:16:e5:fa:ac:c6:e8:60:50:80:5d:dd:
51:20:1a:a0:9b:d5:89:87:69:35:d5:c1:44:d0:1e:
9d:9c:ca:c3:b2:73:30:75:5a:4c:1a:14:4e:bd:6a:
cb:f8:51:c9:a3:fb:cd:e0:78:6c:b1:3c:f3:4c:35:
d4:96:f6:67:14:6e:be:29:f9:f8:53:46:e9:b8:f7:
be:a5:3f:c8:14:a2:9b:42:eb:de:b2:36:f2:9c:74:
bd:0c:aa:42:01:c7:31:f1:74:2a:c4:f0:2d:3d:fd:
2d:c3:9a:02:cb:c2:d8:c8:22:a6:29:a6:80:25:bd:
90:85:e2:a3:92:31:ca:38:a2:bd:03:79:2a:42:fb:
bb:5e:53:bf:1e:b4:15:bc:7f:c9:13:cb:7d:f0:f1:
e6:84:db:bb:ee:09:82:0b:8f:76:3f:78:bc:ca:37:
64:e1:88:49:9d:04:f0:a9:7b:71:f9:e0:c6:d6:89:
e5:b8:0d:09:dc:69:76:bd:99:36:c5:7f:c7:62:ff:
7f:5a:fd:31:d9:70:fe:bb:12:44:8b:27:46:19:92:
6c:e3:e3:7e:6f:b9:b7:10:7f:1a:cf:6c:cd:ac:cc:
40:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9E:34:66:3D:01:AE:8A:6F:5C:15:2F:35:EE:2F:1C:0D:90:34:89
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:d2:2d:88:b1:ed:f2:6d:34:df:07:39:37:82:0f:6d:62:d8:
44:36:73:82:3a:5a:77:85:48:d3:22:68:3b:7f:6e:f0:b4:5b:
56:f2:6a:b7:51:4b:86:8c:bf:a9:c4:e9:de:61:5c:ea:28:cd:
ed:26:e5:dd:cf:01:c9:9a:22:0f:85:a4:f0:46:e8:d7:ef:72:
7b:b8:3d:68:a2:bc:c9:74:b9:0f:3c:ce:26:d5:ad:ce:36:e3:
b5:35:06:b8:8f:e7:bc:ea:28:ca:f6:9f:54:ed:fd:ad:2d:c8:
65:62:9c:11:aa:73:e0:7c:40:b5:f2:9c:5d:2c:cf:c0:db:59:
68:7e:69:15:5f:8e:0a:21:fd:41:1a:ba:76:f8:04:bd:ff:0d:
38:49:e7:77:c1:5a:72:65:98:1b:07:fb:1b:7f:09:f3:7d:65:
46:3f:1a:9a:81:d0:ac:16:d0:2d:0b:7e:b0:62:3d:c6:7a:61:
32:df:60:bd:b3:13:62:bb:02:49:2f:17:58:62:3d:94:59:17:
3f:43:db:e6:57:0c:bb:95:fc:c9:d4:1a:7e:ee:6c:49:7a:5d:
a2:e1:0b:9b:3c:90:82:ff:1a:8b:87:9c:4a:c6:fd:b6:d5:59:
76:ba:cb:e9:bc:6f:70:4c:b0:56:0b:e5:58:5b:83:6d:63:e7:
94:4a:64:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:49 2025 by rpki-client