Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
File: anosbb5RGgdHJDepoPtPzNEr6J8.mft (raw, json)
Hash identifier: UwLPxP/y14pE9ZaFkEzAsFElU2SbETWOtoePCGfKc9M=
Subject key identifier: 43:9F:47:DF:F5:EE:C2:D3:02:0A:4B:26:2E:3E:BC:51:A1:B0:D8:D3
Authority key identifier: 6A:7A:2C:6D:BE:51:1A:07:47:24:37:A9:A0:FB:4F:CC:D1:2B:E8:9F
Certificate issuer: /CN=6a7a2c6dbe511a07472437a9a0fb4fccd12be89f
Certificate serial: 0194BCE0D8F3D761DA879A3E06C1056CA338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anosbb5RGgdHJDepoPtPzNEr6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: MTWR2-fK-zXP_vo66N4nyK1kX1Y.roa (hash: 6274b1F9aoiTzplMN8aMf75bval3AD8cdeJgbZU5gLo=)
2: anosbb5RGgdHJDepoPtPzNEr6J8.crl (hash: NgOv8WcqX6LUVkzSPpYEu3x2mMo1hBaiAMLKWcCkFTY=)
3: xWfN2IU-diJGvyXLhrBtpHOen6U.roa (hash: dGi8XxSgvv52xppxzLayzkV/Yel0ZIVTBr2h42n6ktI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d8:f3:d7:61:da:87:9a:3e:06:c1:05:6c:a3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7a2c6dbe511a07472437a9a0fb4fccd12be89f
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=439f47dff5eec2d3020a4b262e3ebc51a1b0d8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:1a:78:df:fb:13:06:c4:52:6d:55:20:4d:
65:d3:75:1e:88:84:91:a7:1f:19:0a:9b:01:93:9e:
2e:76:43:73:37:ed:71:60:df:3a:ac:be:10:6e:5f:
d4:e6:41:79:b5:bb:bf:52:b6:7e:2f:a1:36:a6:10:
6b:1d:e8:46:04:1c:b1:3c:10:9a:4e:74:c0:31:d7:
6b:5b:11:5a:32:65:ee:f5:ce:71:b5:ea:95:d9:b2:
ee:00:5e:33:d6:03:ec:88:f0:7f:b4:27:85:4b:1a:
2d:81:ae:67:44:38:3d:ce:f9:a3:07:4e:8d:63:22:
77:49:39:40:38:69:ef:d3:92:71:c9:c3:fb:d0:5e:
33:db:9d:0b:87:54:0d:ed:ce:be:28:b3:9f:3e:5c:
0b:53:dc:16:32:d9:9d:4c:1a:be:05:06:ab:eb:66:
e9:60:fc:e4:c2:99:f2:08:be:12:0f:21:79:eb:09:
e0:1c:ec:41:2a:4f:78:fa:dd:4a:c2:fd:a3:4f:53:
0c:4a:cb:e1:3d:3e:04:e3:4f:a3:71:d1:9f:34:5e:
cd:74:de:bb:2c:a8:ee:8e:6a:48:dd:7c:b8:8f:03:
4b:0b:5e:24:a6:a2:8b:9c:2d:cf:d6:e8:03:b8:1a:
7c:7e:fb:8a:cc:e5:66:70:d1:a2:da:6b:b5:87:2b:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9F:47:DF:F5:EE:C2:D3:02:0A:4B:26:2E:3E:BC:51:A1:B0:D8:D3
X509v3 Authority Key Identifier:
keyid:6A:7A:2C:6D:BE:51:1A:07:47:24:37:A9:A0:FB:4F:CC:D1:2B:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anosbb5RGgdHJDepoPtPzNEr6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4d53e5-6e0c-46d5-9a88-ce9c149f889b/1/anosbb5RGgdHJDepoPtPzNEr6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:87:39:14:67:64:c4:a4:f8:ff:0b:67:00:db:23:9f:6f:61:
71:92:18:da:7f:cb:ac:f8:65:23:7a:6b:d8:f1:f3:08:b1:72:
85:13:fa:10:a4:0f:56:cd:71:90:67:21:e1:57:b8:a6:6e:6d:
06:4a:35:1f:27:9c:d5:c1:10:99:7b:be:62:66:a8:cf:ef:4f:
fe:ca:ab:c5:81:70:66:01:a6:c9:94:7e:01:40:1c:21:2c:79:
d4:cc:df:76:80:fe:87:6f:d5:83:a7:43:8a:87:78:e2:d5:09:
41:6c:ab:8a:50:14:28:91:3a:2c:2e:03:30:c3:b6:ac:ef:bf:
a5:82:d7:80:ec:5f:5a:db:7d:2b:00:b6:6a:a8:e4:cd:34:54:
88:41:f4:e0:ef:d0:57:a5:93:26:39:da:6c:0c:81:3b:81:e3:
d2:a9:61:74:b2:e0:36:f1:f4:ef:60:54:9f:34:db:b9:7d:d3:
01:46:3e:4b:db:9f:28:5a:ae:3e:73:04:e9:e3:a8:53:cf:f8:
e9:d5:6d:a1:06:1a:03:30:6b:87:49:e6:4e:22:5b:89:e8:00:
8b:df:e6:49:91:0a:a0:12:7c:92:2c:83:a3:43:34:85:ae:87:
03:86:59:28:44:c3:02:13:73:b9:7e:7e:de:5c:d5:eb:34:5c:
6d:be:79:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:05 2025 by rpki-client