Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
File: aaEl4pJtOayGmYIrxXplgPX1F-k.mft (raw, json)
Hash identifier: F4Xagy59XnEUjj+n8RGqutKCm0aC7zLQbGsnQ+y1iWo=
Subject key identifier: DA:65:EB:0B:E8:D8:26:0C:E4:2E:C9:C5:DF:45:81:79:20:D1:9A:40
Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
Certificate issuer: /CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Certificate serial: 0194BCA96B3BBD6F1E3B5C46013F27AB4197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
Manifest number: 0D55
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: aaEl4pJtOayGmYIrxXplgPX1F-k.crl (hash: utnzjClgbbOhCFGRUUvF2/UxSEwXjtDPihklJdrmI5E=)
2: g6aF_sPRUTumEgKyygfiqs9RnAY.roa (hash: rvpq14gdtNJHSBubmTdr4iiG6SshNjIec7cz2rKU0Hk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6b:3b:bd:6f:1e:3b:5c:46:01:3f:27:ab:41:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=da65eb0be8d8260ce42ec9c5df45817920d19a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:90:af:95:4d:41:35:36:79:88:ce:b1:cb:
ae:62:23:0d:6c:02:84:e0:ee:5b:34:4f:c6:a6:4f:
65:87:77:5f:f4:45:48:35:19:0c:ec:72:b5:c6:12:
11:8e:89:cd:24:c8:ad:e4:a6:1a:3b:34:39:be:3f:
5d:76:64:12:d6:c0:59:c9:67:6f:59:87:15:83:30:
6a:db:5b:27:64:45:99:78:d5:7b:ee:94:4e:1f:e2:
39:d8:34:58:97:23:50:f6:f5:7f:c5:59:16:87:fc:
68:21:f6:cc:02:ee:e4:77:6e:70:5a:4d:6a:92:ad:
56:6f:66:72:01:36:75:52:a5:60:72:91:ed:eb:11:
58:0e:e2:64:3a:c1:0a:2c:33:3d:70:c1:8d:8c:ec:
9d:eb:98:90:3b:57:e6:30:5f:43:54:a3:42:a7:9d:
69:c1:33:8f:c9:84:f2:e7:d1:c7:d8:d6:aa:24:e9:
94:9d:fc:cf:0d:90:02:a2:14:10:c5:42:37:7a:6f:
2b:21:3c:4a:1f:4b:d7:41:ce:81:9c:22:11:53:78:
a1:18:d2:7f:1d:f2:91:8c:1e:0c:35:17:87:4b:74:
61:5e:ed:fb:63:28:1c:eb:97:fb:87:c1:12:d6:b0:
08:e7:df:a5:08:b8:d8:16:55:a2:1b:0c:e0:ec:23:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:65:EB:0B:E8:D8:26:0C:E4:2E:C9:C5:DF:45:81:79:20:D1:9A:40
X509v3 Authority Key Identifier:
keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:38:3c:51:c4:75:91:1b:d9:83:d4:f9:fa:08:7b:61:87:04:
b9:4d:21:c3:ef:d3:cb:02:ef:34:33:2f:54:68:d0:e1:90:d9:
75:87:4f:3c:b1:c1:c0:6b:71:bb:38:df:7e:79:07:2e:93:a0:
e7:26:96:45:59:b2:ab:d0:c2:56:77:25:9d:4a:75:34:1f:82:
7d:2a:6c:4d:a4:40:97:8a:62:00:31:c7:15:be:6f:46:47:e4:
16:90:a6:fc:32:41:19:68:4c:66:3f:7e:bc:6b:ea:dd:b6:ab:
b9:f1:56:40:fe:54:ca:75:89:21:9e:44:e9:3a:dd:38:81:a3:
fb:ec:f7:fc:f6:6d:17:a4:85:c0:70:ed:3e:a6:3f:64:56:59:
67:49:aa:91:84:23:2f:d5:c1:74:9d:ae:d9:d3:34:93:04:93:
cf:42:f9:27:cd:ae:3e:cc:c3:43:f5:73:18:10:58:a9:4b:03:
99:20:d0:35:78:02:e2:6d:e6:8a:bb:3a:34:47:5d:92:b0:c5:
5a:8b:6d:61:bf:90:79:e8:a3:6e:af:28:7c:32:20:c1:61:b8:
6b:37:bc:52:9a:ce:b1:aa:ac:72:b5:bb:cd:62:66:cf:77:d6:
e8:09:3f:3c:4e:9c:13:22:bf:d3:8f:2d:08:dc:51:6e:4b:5c:
08:bd:2c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:36 2025 by rpki-client