Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier: 6b0B/pgVIIyVQrm4b9eE/05NoclmWuqnHNu0HI3F1Io=
Subject key identifier: 66:16:04:FA:DB:1C:72:AA:15:2D:3C:ED:34:F4:A3:BC:7E:DF:E8:8C
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 0194BD175039316F39A51814047B4AABEC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: 0kNkc387z7I2x4Yteehk0180PTE.roa (hash: Zuu2mJeRDdNqByIOk7bup5wFBYcY2Qe7ktpeoS994ec=)
2: U7m4Gs75d3JRXf0EhW-zh11dv2s.roa (hash: Sm5oLjPUdQpRNHLiGYVW7SM6LirGZO/ZhoEfZrQbxlg=)
3: aGfK0H7bmbg1JjvuXLTz415xNhI.roa (hash: v7ErIvSMJoVGsS9S+0FvhNKIitiqHtag2SKmUqdP0PA=)
4: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: yh4UfjbjQlkytbwLSPuc0/vf/iqui551jSZ/XhlBe14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:50:39:31:6f:39:a5:18:14:04:7b:4a:ab:ec:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=661604fadb1c72aa152d3ced34f4a3bc7edfe88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ba:94:df:aa:ad:45:72:a2:2a:88:16:97:65:
0a:5d:03:e9:a5:b4:65:79:ac:c2:1a:d5:7a:29:58:
e0:64:53:c2:5a:1b:20:39:ae:2e:88:cc:4d:4b:b6:
6f:78:3d:f3:74:ff:26:c6:4e:4c:a4:cb:34:4e:a5:
de:f3:ca:5e:25:a7:16:d3:6a:13:56:c5:c6:77:83:
b1:67:af:e7:7e:91:24:65:04:7b:85:54:c0:fa:10:
0e:2e:da:61:cb:68:bf:a8:83:45:0f:60:dc:90:56:
e0:03:42:53:99:99:84:c5:c0:f1:44:f8:da:21:d9:
33:98:e2:2b:99:b6:6a:ce:0f:62:c5:46:29:81:1b:
19:d6:a2:cf:56:f1:72:3b:9c:71:05:ec:31:e2:34:
0a:da:0a:44:ea:64:e7:95:26:66:e2:4d:38:cb:5c:
ac:5f:1e:3b:54:9a:be:38:cc:2b:85:10:43:14:5c:
19:1b:f2:f8:cc:be:69:ac:88:ee:7b:1f:9f:6d:97:
c8:8a:3d:98:45:77:1e:9c:c2:1b:4b:e0:fe:c0:8e:
82:d6:13:bc:0e:26:d3:18:6a:d8:b5:d0:09:8c:25:
02:51:73:19:4d:85:be:b4:1e:32:3f:60:fc:aa:bc:
ce:64:c3:55:5a:a1:29:60:98:d7:91:e0:bd:35:f0:
fe:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:16:04:FA:DB:1C:72:AA:15:2D:3C:ED:34:F4:A3:BC:7E:DF:E8:8C
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bf:f6:c7:6d:da:ae:ca:a8:d8:cf:64:c6:0b:4a:64:9a:cb:
56:aa:38:ed:da:bf:30:db:bc:eb:6d:13:9d:be:e5:e6:71:e9:
ff:21:73:b0:90:e4:0a:c9:a5:f9:b7:f1:c2:48:97:e1:c9:8d:
95:78:ea:00:cb:bb:2c:78:88:ac:57:9c:b3:ec:4c:b7:d5:32:
6b:92:d2:fc:02:4a:de:6d:65:f6:56:6f:33:42:8a:aa:ff:5a:
ce:fe:60:ff:e9:35:92:94:d5:dd:b8:b2:d5:ea:43:ab:90:b0:
51:4a:c9:ac:aa:1d:aa:52:fd:1f:2c:bb:6a:f7:26:3c:e0:54:
00:d1:87:c3:5d:6d:bd:24:56:4b:0a:53:a3:95:f0:1e:2a:68:
7c:f8:a5:0c:05:58:00:4e:2d:48:19:d9:06:9c:68:4f:56:dd:
5f:ce:0e:b1:aa:a4:f9:04:c0:53:ee:e0:ff:d2:f8:a7:14:97:
5e:19:c9:fd:b4:6a:0a:4e:a9:b7:28:59:b0:bd:0e:97:98:e0:
94:01:ae:cd:6f:2e:5b:b0:6f:19:23:06:19:37:a4:b3:2e:4e:
39:47:c6:35:8c:af:26:ec:d8:d2:5e:f3:ce:73:d1:6d:21:13:
58:4f:9e:34:2a:22:79:c8:74:23:53:cd:0b:e0:5f:8f:4d:8f:
29:7d:73:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:57:08 2025 by rpki-client