Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/aM_hqssnjBMjGzEORe5XaTL-m04.mft
File: aM_hqssnjBMjGzEORe5XaTL-m04.mft (raw, json)
Hash identifier: 3sG77ABcLNqciEGTDADtqVdntjVOXR86Kn7/hDcfwd8=
Subject key identifier: 7A:FF:7C:50:AF:3A:72:F7:5B:19:AD:8F:DE:F7:66:93:D0:55:2C:77
Authority key identifier: 68:CF:E1:AA:CB:27:8C:13:23:1B:31:0E:45:EE:57:69:32:FE:9B:4E
Certificate issuer: /CN=68cfe1aacb278c13231b310e45ee576932fe9b4e
Certificate serial: 0194BCE0C481673AAEA94797A951182C14E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM_hqssnjBMjGzEORe5XaTL-m04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/aM_hqssnjBMjGzEORe5XaTL-m04.mft
Manifest number: 10BF
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: NAg_2lUwiNc2BXVWx1ALPDBcGK0.roa (hash: I6Xgg/yTyhGgk1wwRR5vfbPkXPHDlymI7Asksvi+yR4=)
2: aM_hqssnjBMjGzEORe5XaTL-m04.crl (hash: fE8ac7PajpXZ4KDHhHjdNlThK0aiZJ2EZCk4rIR8wZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c4:81:67:3a:ae:a9:47:97:a9:51:18:2c:14:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cfe1aacb278c13231b310e45ee576932fe9b4e
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=7aff7c50af3a72f75b19ad8fdef76693d0552c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:61:cf:be:85:26:68:98:a3:7e:f1:eb:3a:
f4:d1:f7:80:95:c7:d5:09:93:22:e5:20:2c:27:74:
69:db:a1:8d:7a:e3:1d:a9:66:2a:4d:bf:c4:1b:06:
2c:ad:17:4b:c2:12:cf:85:fc:fd:8e:e3:d3:86:b6:
58:05:fb:f3:ba:6b:2f:26:a9:45:b8:8c:4f:03:3c:
f7:68:d8:b4:d0:58:79:a3:b1:c3:b9:8b:1b:39:2c:
ca:aa:7d:b5:49:58:ed:38:6c:d0:5d:dd:ca:ed:56:
b8:8b:f0:b5:fe:61:24:a9:32:32:6d:63:3f:c4:92:
20:62:e0:8d:8a:e4:4d:cb:d9:5d:06:d6:3d:b4:35:
6c:82:45:cc:fa:ff:1d:98:17:7a:f7:52:00:ba:94:
9a:5b:73:33:10:5e:28:30:50:4c:9e:dd:67:c5:45:
d0:2d:3e:58:24:ef:a7:5c:5e:d6:a6:1d:c1:69:1c:
90:3b:cb:e5:49:2f:41:14:26:04:91:a9:ed:d1:b8:
76:fd:f7:99:2b:26:39:31:9d:0f:42:f0:ed:5a:cb:
ef:d9:da:8d:15:ab:85:1c:36:3d:f6:09:67:79:96:
24:9a:75:f5:11:61:79:c1:5f:76:75:30:17:4b:20:
9f:08:fc:5e:8c:1e:68:32:00:f1:46:33:52:16:48:
38:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FF:7C:50:AF:3A:72:F7:5B:19:AD:8F:DE:F7:66:93:D0:55:2C:77
X509v3 Authority Key Identifier:
keyid:68:CF:E1:AA:CB:27:8C:13:23:1B:31:0E:45:EE:57:69:32:FE:9B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM_hqssnjBMjGzEORe5XaTL-m04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/aM_hqssnjBMjGzEORe5XaTL-m04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/aM_hqssnjBMjGzEORe5XaTL-m04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:64:6c:1e:35:14:0d:01:11:ca:5c:2d:c8:ac:56:be:7d:52:
1c:6d:8f:04:b9:2a:2b:50:42:7a:8a:6f:8b:c6:bb:a8:15:b2:
13:f5:3c:ec:e9:e7:a9:0a:62:9f:58:7f:d0:c2:e6:70:04:7a:
12:3b:db:2e:f4:60:a3:9f:60:aa:51:42:04:a2:f0:bc:24:95:
88:ab:69:46:5d:41:03:63:95:78:c3:31:bc:d7:56:bd:7e:59:
32:80:3d:cc:b1:7c:64:13:ad:38:6c:a2:75:17:bc:e5:4a:bc:
9e:96:65:55:74:9b:0b:12:b9:c8:7d:ef:19:81:76:14:be:40:
a8:ea:af:86:6f:1c:3e:cc:e9:d9:81:85:76:6c:7d:e7:ad:a4:
73:f8:14:26:fa:4a:8d:b2:dc:2a:03:bd:4f:d3:fb:9d:7d:b3:
9f:d9:31:bb:df:40:26:80:a9:79:10:a8:fa:8a:fa:2c:5a:b6:
2d:aa:b8:47:6a:50:46:cf:58:ce:b3:7a:05:45:8c:73:46:c7:
25:3e:0e:e4:e4:7c:df:30:d5:f9:c1:db:ba:59:4d:6f:ae:f7:
a5:5b:3e:5a:01:bf:ce:19:2f:e5:f2:6a:c6:28:d7:ab:4c:8e:
23:9c:50:ce:87:4b:c1:f7:a8:93:2e:c3:de:4f:22:92:cf:bc:
5a:71:96:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:08:37 2025 by rpki-client