Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier: MKsGyuiWMp6aBDnp87BHxP1FKzWG2dLL/Xhy4bcdJ/4=
Subject key identifier: C1:7D:03:B5:02:E9:A3:10:F1:40:AC:0C:F4:40:B0:A6:9D:0D:1B:5D
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial: 0194BBCDBEAED3A64934FD35CCB00FA57D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number: 0822
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: B9EMxmyn0afbR1cod841gbTVDK3tm5pIMboPrS0td4s=)
2: eBTbPsjV8Iac9Fj-9vOQH-ERQ2w.roa (hash: iez1H7XNs3tkU5sUoydCWQiAyCLsYR+kgbtLIrffu48=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:be:ae:d3:a6:49:34:fd:35:cc:b0:0f:a5:7d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=c17d03b502e9a310f140ac0cf440b0a69d0d1b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:f3:ff:08:89:0d:71:5c:27:2a:1d:c8:9b:
c9:5e:64:c8:ff:8d:4a:aa:df:51:79:f2:50:83:1b:
02:53:ed:c7:77:09:9b:f9:2c:53:da:11:cc:55:3d:
fc:5d:89:82:bb:db:31:fe:e0:9b:01:13:3b:88:cd:
29:c3:a2:a6:2c:96:62:e0:49:f7:93:cc:85:48:b9:
31:08:b5:16:28:88:e3:f0:d9:05:85:38:07:0b:10:
83:27:55:d2:b5:5e:f9:40:19:8e:41:d2:14:17:8a:
bc:cf:c0:45:db:d2:64:d2:05:e0:9a:71:b7:fc:3e:
12:9a:83:00:ff:47:5f:54:9a:95:38:6f:48:30:a7:
d1:43:f2:d6:30:ee:df:5f:33:56:b6:bc:30:e5:ee:
fd:e6:a5:2b:21:ff:68:76:53:ad:33:34:0a:67:fb:
d9:7f:77:3b:7f:96:63:db:89:54:f2:e8:9f:6d:9c:
73:e3:44:7c:0d:b7:88:93:23:98:80:05:3b:f8:28:
ef:2f:c1:10:63:7f:18:31:d2:ad:73:95:70:8f:e0:
5e:6b:4e:5b:84:23:af:8e:d0:f3:32:90:69:8b:34:
e7:50:50:99:9e:29:bb:69:33:e0:c2:c5:c4:ff:69:
eb:7b:6b:27:d8:e6:29:bb:37:15:58:91:9c:90:d9:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7D:03:B5:02:E9:A3:10:F1:40:AC:0C:F4:40:B0:A6:9D:0D:1B:5D
X509v3 Authority Key Identifier:
keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e5:bc:01:16:b8:1a:2c:83:d4:8f:fe:5c:60:35:b4:4a:32:
d7:bb:3e:b3:e8:b7:2f:05:6e:e3:da:73:63:81:b4:0a:35:6f:
63:e5:5c:82:4f:1e:94:66:f5:28:6c:ba:ef:f6:eb:35:dd:48:
3b:16:f3:75:c6:9a:73:6c:8c:20:0c:13:b9:c5:84:30:d6:4c:
fe:06:e4:02:49:97:0a:03:ee:09:75:10:eb:6f:b2:f7:aa:e8:
a0:56:0b:b3:17:3c:ea:4b:ea:cd:c7:47:cd:19:0e:09:9e:b9:
44:e9:8f:eb:d4:d5:57:c9:9a:3f:92:3d:3d:79:68:41:04:c3:
68:b2:ab:f6:e8:39:fa:70:52:6f:53:79:ea:33:43:37:e9:54:
bd:48:60:a1:3d:47:b7:99:e3:21:3c:99:ee:cc:62:65:79:72:
7c:f9:23:e3:26:5c:82:ac:92:6a:14:b7:9e:3d:79:d3:71:15:
36:b8:b9:99:7d:74:46:11:66:2c:b7:38:61:d5:d2:30:7d:e4:
67:83:71:43:0a:24:b3:d0:62:ad:22:55:af:fb:85:1d:fe:c0:
9d:74:05:6d:4e:b8:06:8e:4f:38:74:17:9c:64:f7:cb:dd:fc:
e8:97:71:f8:77:dc:5e:bc:ed:91:f9:c1:b2:45:ef:67:cc:da:
79:61:e9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:57 2025 by rpki-client