Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier: vbH6qZK9FKIHRoL0x/6c2ikrKI4MYM50xb/E0deY36Q=
Subject key identifier: 4E:9A:92:E6:C1:42:E3:76:89:44:FD:0A:61:0A:56:C1:20:FF:AC:D6
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial: 0194BBCE90DA9250A5A2F0DB8DD999A8C185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number: 0AFD
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: CZnT00JxVXA6iAWaLFt9qygzud4.roa (hash: wJhaU7kGG6UC4hZw+OMvKmIWQmn3+xc9WR2/MP/95Vw=)
2: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: xQ6MyyORPMxhE4R1AYZXEchtEdeT8EVlIJO/i2iya2s=)
3: x6GJc4ojOxgz3esDAZaU67m_2pc.roa (hash: zoKZ4awQgsW57nby6hTMjyGrch8AryfCfI+Yae5icPg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:90:da:92:50:a5:a2:f0:db:8d:d9:99:a8:c1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=4e9a92e6c142e3768944fd0a610a56c120ffacd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:47:15:ff:a6:bc:c5:3b:80:17:56:9e:13:
79:0b:f6:25:90:93:1f:1f:0f:07:b4:58:4b:fa:0c:
44:e7:ab:7c:11:28:19:6d:83:ee:bf:ae:dc:98:25:
ac:77:6a:24:e4:f3:87:f5:c9:36:a8:a1:46:46:a9:
11:a0:2e:22:32:e5:e5:08:9c:9d:a4:a5:3d:c5:9c:
e4:e7:4f:6a:46:7c:88:6c:e8:e1:a5:de:6b:8a:7a:
98:8b:cc:06:30:9a:d3:d1:1d:88:1e:ca:02:db:a9:
38:32:4f:f5:99:a5:e8:72:a5:22:fa:4b:68:d7:e7:
07:f8:f3:29:03:64:b6:dc:f4:39:eb:1f:79:40:59:
4a:5a:76:e3:5b:c5:2f:cb:a5:84:29:45:93:4e:33:
fe:ff:28:ee:2d:8d:68:ca:7b:0e:a8:7a:5b:49:a2:
2e:50:b6:a8:ea:4e:df:50:11:7c:38:2c:ca:2e:dd:
69:05:64:3e:80:b4:2b:5e:76:1d:39:46:d8:6b:96:
8f:5f:cf:e9:0b:63:2b:7a:dd:d6:51:ea:51:c2:2c:
83:af:de:8c:af:5e:fc:78:c6:73:52:5f:4d:ef:39:
27:0e:57:01:9a:3f:96:e3:2b:d9:60:8d:f4:bf:8e:
42:46:d0:96:fa:ce:f9:14:92:ba:e8:a6:80:78:0c:
51:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9A:92:E6:C1:42:E3:76:89:44:FD:0A:61:0A:56:C1:20:FF:AC:D6
X509v3 Authority Key Identifier:
keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:31:8f:fd:5d:a4:30:af:f5:c8:22:a2:b3:da:fd:9d:74:bd:
78:42:00:85:7b:0e:62:63:f4:40:28:9a:b0:68:22:ef:15:de:
44:75:12:63:d1:ae:9c:91:9c:f1:61:91:ef:d8:98:1f:da:3f:
8e:0e:28:62:c3:94:4f:2e:ac:d8:43:62:ba:a0:74:39:93:d8:
4a:2c:d0:a0:28:2d:c8:3e:a9:ef:95:9d:73:48:c5:8e:3b:dc:
f6:d0:e3:9b:e4:5a:a5:cd:81:05:32:42:78:7d:b1:95:00:b2:
17:02:5d:ad:5a:55:d6:c9:46:b1:1a:3c:5a:c4:71:b9:87:e5:
8f:fb:61:29:5c:13:7d:0a:11:d1:b7:d9:27:51:e8:6a:bb:c7:
2f:d9:b3:2c:06:1a:a0:eb:98:d3:33:bd:de:33:9f:d4:65:37:
5b:f7:da:35:03:94:d9:5d:cf:68:6b:07:7a:85:b9:b5:93:a6:
84:da:b1:2a:81:f3:cb:4d:c5:89:9c:8a:4f:7d:04:d7:17:fa:
7b:42:47:39:f6:bf:63:e7:c1:0c:31:c2:d2:02:01:05:0d:2b:
13:a8:4f:ad:90:33:d8:d8:7b:43:eb:02:0d:43:10:a2:5e:33:
10:e9:1b:31:4d:ab:e5:87:71:f2:78:66:f4:65:8f:5a:94:d7:
6b:b3:b1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:45:44 2025 by rpki-client