Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier: 3khSPJSg11yqaNzmEMfxizbSo3b1d22vh21hYWe2kB0=
Subject key identifier: B9:1E:D8:01:D7:EE:FB:59:59:2E:D7:BA:8B:47:24:7C:2B:93:6B:04
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial: 0194BBCDF996509E243BB0B63C16C7EFA3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number: 0560
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: NaKshVhSKaYmb3Sdi3LLJdyjmds.roa (hash: d86txPLHJOy87A3pf1/eOV7404HvHGLlpkkFt/51J1U=)
2: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: Mc58fVvq3kTMTHZSxe2dy7KJgRSw2SziFoh/crEoJUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f9:96:50:9e:24:3b:b0:b6:3c:16:c7:ef:a3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=b91ed801d7eefb59592ed7ba8b47247c2b936b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:03:ff:d8:92:d8:68:90:22:61:98:22:e8:
61:89:e9:c1:c6:ba:63:b0:74:a2:e6:01:48:00:43:
fa:ed:3f:5c:1a:d8:7e:31:d3:a4:3b:49:2e:37:22:
c9:1b:e5:4d:cc:20:7f:39:d2:4f:de:1e:1a:16:df:
9f:27:a8:3a:ed:06:02:3c:92:54:ee:2f:b3:8c:3d:
b0:42:fc:16:cc:80:08:1d:9e:80:db:ca:d1:e8:62:
2b:fc:e4:d0:67:c8:a3:43:c7:0a:f6:17:f2:d7:b9:
d6:5e:15:93:d8:15:5e:9f:78:53:5d:13:2d:8c:49:
81:2d:12:2f:33:d0:de:c0:86:eb:28:e6:53:b9:b4:
e6:cf:06:2b:6c:d8:33:22:0d:3b:47:84:ef:b8:79:
01:dd:cc:8a:49:47:4f:4f:ab:54:ed:33:70:f4:a8:
27:bc:77:4e:b3:ba:f4:8b:9b:93:f6:fc:01:e0:1a:
82:d8:e9:5b:78:a6:78:57:9b:72:59:5c:e4:66:e5:
18:ef:55:11:0b:73:e6:d5:6d:f0:b9:b9:36:f9:ff:
66:43:46:1a:dc:75:29:7e:6f:20:27:09:48:69:c0:
e0:e9:0d:46:15:33:ec:e4:b2:63:c5:fd:d4:b4:92:
a9:4a:e3:a4:7f:19:40:3e:60:f2:cf:7f:60:ed:83:
17:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1E:D8:01:D7:EE:FB:59:59:2E:D7:BA:8B:47:24:7C:2B:93:6B:04
X509v3 Authority Key Identifier:
keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9b:89:fb:1e:92:c9:50:75:39:b2:54:ea:f0:f5:a2:84:66:
5d:ca:d9:f0:04:0b:e1:76:54:94:33:4a:96:1e:19:c7:02:71:
9e:8c:a1:74:bd:29:49:a6:92:f5:7d:c7:a1:6b:6a:53:cc:1f:
80:c7:f1:a5:19:ab:ed:db:aa:17:4f:8f:2b:ba:34:d5:0b:bc:
12:05:e9:dc:8d:31:46:9d:c9:af:4c:4e:3c:a0:92:a1:a5:0f:
de:13:b8:de:4f:42:e7:d9:27:9e:ac:ed:35:3b:da:5e:5f:d8:
8d:1d:d6:04:39:97:20:bb:f9:11:75:4b:0e:f0:d3:a0:d3:01:
a4:db:b0:16:83:a5:52:ea:42:c3:66:83:d9:27:c8:dc:b7:bb:
c5:a1:61:90:e0:f0:05:71:6c:2f:37:da:6f:d5:84:af:66:6b:
56:36:6c:c8:62:b9:c5:fb:a7:ad:51:5f:5a:6f:c5:ef:dd:66:
ab:66:f6:3b:52:0e:9b:f8:33:cf:96:5e:88:17:af:ca:b3:91:
c2:78:7b:38:6c:d4:04:7f:d9:ff:b4:19:02:23:c8:1a:ac:da:
ed:b2:e5:89:0c:fd:d8:4c:72:80:31:b4:e8:6c:79:57:95:40:
27:93:a2:b9:cd:20:14:25:a5:c9:a9:c2:06:7c:12:3c:eb:e7:
22:54:40:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:55 2025 by rpki-client