Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
File: afKVoxCPXPHTJv_pv2EPvPGNct8.mft (raw, json)
Hash identifier: DXXH9Lxo0RNiV8kPkvIlWYBwZDo6ngSDvx46TLOcXG8=
Subject key identifier: 6D:DA:EC:6F:80:72:B3:E5:A1:47:8A:5D:28:FD:76:A9:7A:11:CA:6E
Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
Certificate issuer: /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Certificate serial: 0194BD85774C16BE9153EC436677BC1102AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
Manifest number: 07B9
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: 2kKgjfyddVwBqBtbcmC591hhds0.roa (hash: J3PsfHURY5KO0r8jrXSygLDWI9PtPmq+khbJ0BwKbpo=)
2: afKVoxCPXPHTJv_pv2EPvPGNct8.crl (hash: B8QIIB4nzbdlumJnd3u8f2A9McdPoly9pZw8Z1ZRiSA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:77:4c:16:be:91:53:ec:43:66:77:bc:11:02:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=6ddaec6f8072b3e5a1478a5d28fd76a97a11ca6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:8a:71:d3:bf:3d:aa:fd:52:0f:dc:ae:0c:
3a:f5:e7:fe:ec:cf:2f:38:aa:5b:81:85:85:1f:83:
5a:2b:12:34:3e:80:84:2d:9c:8b:72:76:c1:62:3f:
97:e0:40:44:3f:76:36:0e:42:33:ce:3d:91:e4:8d:
f3:74:5f:c8:46:3d:ac:96:d8:c1:f2:03:19:c3:06:
5e:5d:dc:2f:b4:57:77:fd:09:bc:5d:0e:1d:63:72:
d8:ae:d8:30:fe:e7:f2:6d:42:9f:db:c5:cf:86:53:
1d:73:31:6e:34:c4:1d:aa:9b:38:d4:22:16:35:93:
73:e2:ac:7e:b7:58:e5:29:c9:e0:47:0e:a8:9e:ff:
10:02:37:1b:4f:51:bc:8a:f9:94:0d:ed:59:47:c5:
e9:52:50:59:11:39:0b:b3:9e:a6:1f:14:90:cc:ad:
aa:25:a5:ce:d6:bf:03:87:46:58:bc:a2:81:a4:e2:
4a:01:55:fc:7d:ac:1d:c4:f3:df:64:af:81:ba:09:
f2:4d:ea:c4:52:fc:8c:08:22:4b:3c:dc:0c:72:9d:
39:e7:0d:95:2c:6a:a1:f7:34:76:fc:88:a7:57:95:
af:f5:ae:c3:0c:fc:c9:53:5d:b0:6f:7c:59:32:c8:
90:a5:5e:b3:58:05:23:89:0c:33:96:41:f4:80:0e:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DA:EC:6F:80:72:B3:E5:A1:47:8A:5D:28:FD:76:A9:7A:11:CA:6E
X509v3 Authority Key Identifier:
keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d9:35:06:b4:42:15:c8:36:af:4a:2e:8e:84:bf:ef:f0:5e:
09:e6:43:05:69:29:ff:ef:ff:69:4e:4e:a4:fe:7c:b6:ba:fe:
9a:bd:02:3f:4c:ee:8a:9c:9a:67:c1:5b:6d:2c:42:20:ce:78:
fd:5d:be:e5:ef:f0:a7:79:17:d7:e4:86:50:98:cc:01:1c:e8:
1a:42:7f:f5:03:bc:a7:6c:2f:86:dd:a4:11:c8:4e:6b:c5:ac:
1b:c0:34:d7:e7:f4:44:57:11:11:c8:98:86:63:4d:77:a3:3e:
9e:e7:28:e0:e3:02:9d:d6:cb:5b:5d:96:7a:82:6f:9d:ef:d6:
3b:cb:8a:f7:33:c4:1c:fb:fd:8b:db:a8:ef:b0:70:37:2d:b4:
87:47:e3:58:68:83:e8:f0:27:af:f7:c1:6c:8a:a1:54:2a:4a:
8f:f6:03:04:24:69:d9:a9:a8:24:4c:f5:9b:0d:ec:f8:d8:bc:
b0:c3:e9:85:e2:7d:e8:6b:e0:1c:5d:3b:01:b6:af:b6:d0:e4:
e3:4d:32:eb:26:c7:9a:41:6a:b5:79:7c:26:9f:80:e7:37:31:
35:21:80:4c:88:0a:56:3a:39:fb:e9:1a:7a:74:36:69:9b:a9:
b5:ca:76:2e:10:50:88:f2:40:96:26:ad:09:58:3c:64:f3:60:
79:26:f1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:16:31 2025 by rpki-client