Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
File: aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft (raw, json)
Hash identifier: Lr6nYaSCTA8xRCdZhicdQROS5HkUMgw2Fp5PCkGHSyI=
Subject key identifier: CC:CC:DB:77:01:6E:9B:D2:FE:45:45:5C:9B:E6:FF:C7:5E:70:12:56
Authority key identifier: 69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
Certificate issuer: /CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Certificate serial: 0194BC3C0BD5E47A9842899951322767E844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
Manifest number: 0B3E
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl (hash: 9ZHMSxcjXwsoWInwmVl0EjMXrqArtwBGz9aFcPdrPPc=)
2: jT8P4HyIvKh8r7FQFBaidUndh0Q.roa (hash: Wroxjw87hFNcZdv8/bJmsCuX0IjtBBcn8Xp1138BSK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0b:d5:e4:7a:98:42:89:99:51:32:27:67:e8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=ccccdb77016e9bd2fe45455c9be6ffc75e701256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:36:be:12:64:97:4f:69:63:6e:c4:ad:c8:
a9:ad:f3:8b:fc:4f:07:74:3f:28:7d:e6:d7:49:37:
a3:3a:c7:a8:bb:d4:88:97:c4:76:2b:75:34:a8:6d:
b0:c2:38:45:48:d8:e1:f6:a4:1c:55:79:a4:83:5c:
55:db:cf:d3:13:ac:b5:01:3a:53:11:8d:20:16:46:
d9:97:24:e9:8e:de:17:0a:f8:2d:c5:02:e8:f0:f4:
a9:ce:74:14:28:25:d4:b3:9b:2b:56:8d:ee:95:b6:
2b:48:1d:af:71:ea:62:43:c2:db:82:f4:77:f8:60:
dd:7c:00:d7:0b:4e:01:19:e2:ee:0b:51:c9:00:92:
b0:32:46:df:a3:aa:b6:fa:01:ec:74:11:dd:86:01:
e0:39:60:84:24:1a:17:4f:f4:0a:82:e3:66:e9:c9:
cc:1f:85:40:78:5b:9d:f9:72:d1:53:a9:99:4c:a6:
73:c8:9d:ec:0b:ba:a5:a4:9a:de:ed:c8:5f:01:3e:
c8:60:8a:b6:ce:d6:68:35:7f:b7:74:09:03:04:da:
23:eb:54:86:7b:cb:d9:d8:c0:b6:85:05:8b:ab:b9:
27:ec:60:6a:dd:74:fa:c5:47:06:5b:b6:f5:ae:d6:
a5:a9:2b:8f:73:1b:6d:8b:01:2c:4f:e3:7f:fa:f8:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CC:DB:77:01:6E:9B:D2:FE:45:45:5C:9B:E6:FF:C7:5E:70:12:56
X509v3 Authority Key Identifier:
keyid:69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:57:4b:81:38:24:34:c2:03:29:4d:87:0a:44:2a:5c:9c:2d:
11:3e:85:c5:58:c1:99:fe:d2:22:82:bd:c8:69:f8:4a:52:11:
de:d3:3c:f9:6f:82:a1:1b:16:68:c1:18:11:56:e7:79:d1:51:
f4:da:b1:0a:4e:39:7c:ef:8f:39:ce:cd:c8:e2:7f:2b:fc:23:
9b:d9:b7:59:e3:9c:78:cc:6a:1c:48:ad:c1:c2:4e:92:5d:f7:
72:1e:24:87:75:c1:07:2c:d0:5f:c7:fc:e1:c9:40:f4:b7:fa:
18:57:1e:6a:78:4f:09:12:5c:87:8f:f1:56:dc:d7:fa:33:2d:
2e:18:e9:0f:9c:78:c9:b2:4d:b6:ef:1f:ab:ec:f9:9a:c1:b4:
bf:f9:30:38:9e:67:ce:f7:ff:d0:83:93:f0:4e:e3:f2:1d:dd:
cf:cd:ba:4d:0e:3a:8a:64:0d:38:78:f7:99:e5:83:aa:ec:ee:
ee:78:df:24:f3:9d:d5:26:71:21:3f:60:c2:49:d6:33:3f:c4:
33:3a:95:2c:ce:50:6d:f5:e2:a8:13:b3:9a:49:8d:39:bb:f1:
54:39:c6:81:83:08:6d:c6:95:e1:d8:d6:c6:f1:6a:ba:40:28:
96:78:d5:f6:22:65:df:64:08:30:5f:3b:2b:06:f1:c0:4c:7a:
ec:97:bc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:38:17 2025 by rpki-client