Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
File: _VOKrk7E0KLzwKZfifSHRrUV5Xs.mft (raw, json)
Hash identifier: pwOJ8IsPnaemhEvpQC11QO8H60EFiN/C4VEegaD8thE=
Subject key identifier: 49:3E:57:91:24:BB:6A:78:8F:91:46:A2:C5:C6:BB:D1:99:DF:E2:27
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 0194BC72B3D9C807D3C5E30B2A04F4B930CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
Manifest number: 0AC3
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: YD_zTsYXZHwOdGihQ9GGGJD2yQ4.roa (hash: MiVKISLoY4yTYfozn6ttBVBGLS9pCG7wKWYNtkMouG8=)
2: _VOKrk7E0KLzwKZfifSHRrUV5Xs.crl (hash: DSae6JXI6uQ1+p7XDljX6XPIZrtcLns4+QwBAP8RwvQ=)
3: wcV-PUcCwSD1_bZOyNtF92C9c9E.roa (hash: YHNUenZzn6rHgL2dA2+pXb/I7NXwkpjXztGNWnA0xb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b3:d9:c8:07:d3:c5:e3:0b:2a:04:f4:b9:30:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=493e579124bb6a788f9146a2c5c6bbd199dfe227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:c9:12:4e:c3:6b:b6:10:a6:d5:4c:58:ed:
f0:e0:7e:24:a1:56:88:f1:51:cb:5b:96:5a:b1:b3:
9b:5e:0c:71:57:e6:86:3a:33:f5:64:14:f7:98:77:
09:7d:53:9c:6f:bc:60:e8:12:a3:45:07:61:8d:ee:
7e:79:05:3c:75:e6:3d:41:d0:99:88:d4:b2:0f:3d:
f9:18:52:40:1d:20:da:fa:89:06:60:3d:0c:cf:84:
ee:f4:b8:dc:93:b3:0a:6d:cf:55:95:84:ff:33:4e:
30:48:81:11:d1:81:6d:69:a4:77:f8:15:32:45:e1:
a8:45:45:83:7f:4f:0b:49:34:1e:86:a0:79:d0:ef:
c1:e6:1e:28:b0:b9:4b:8e:13:cf:fa:8c:15:12:36:
ed:49:e2:2b:37:64:12:66:a0:2c:20:42:e8:62:8b:
68:36:cd:d3:81:4a:a6:49:0a:f6:0d:43:59:d8:ed:
22:b2:66:c9:98:3d:76:85:2f:03:3d:24:19:b4:40:
b4:38:ae:2a:38:92:94:ad:ba:da:5f:2c:2a:a8:72:
10:c6:16:b9:83:21:4f:ce:ea:b6:cc:43:e1:6f:18:
03:be:47:21:9e:f2:29:83:a9:bf:26:73:44:dc:bf:
8e:5e:40:6e:ce:49:42:06:87:aa:36:5f:ed:18:ae:
5f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3E:57:91:24:BB:6A:78:8F:91:46:A2:C5:C6:BB:D1:99:DF:E2:27
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:27:92:23:0d:6a:dd:69:96:1f:6a:79:58:73:bc:dc:69:e2:
fd:8c:38:fd:4b:01:60:ce:f7:ff:00:1d:6f:5f:4f:11:04:7a:
49:8e:d1:64:21:91:67:e7:72:f4:0f:6d:52:12:bb:bb:65:72:
4a:c1:4d:ed:47:fb:28:0d:b9:f5:4e:9b:bf:df:c1:09:e2:d0:
08:77:fc:79:0e:a5:60:ee:dd:e3:d7:0c:5d:b0:b4:e1:cc:30:
36:fe:79:76:34:0a:5a:c6:ec:f1:8b:7c:56:79:39:d8:3b:25:
7e:c6:b8:9d:b9:31:6a:f7:77:de:c5:23:89:cf:93:68:5e:da:
20:de:e3:2a:f2:71:17:7c:39:7f:9c:91:3f:11:c9:10:85:98:
37:7d:3f:a5:da:ee:17:13:fd:55:97:b5:21:3b:63:0f:49:81:
6c:d8:8a:ba:19:36:33:07:55:1b:92:b8:fd:cb:7e:e2:52:95:
ed:ec:57:af:06:05:a6:cd:4a:85:3a:25:03:70:da:9d:e1:84:
d2:17:d9:25:be:d4:e9:9c:42:3d:63:42:47:14:e5:48:01:41:
b0:35:19:01:73:18:90:81:89:b2:ec:58:c8:08:f3:16:d1:c8:
84:29:47:88:11:c7:4d:79:67:34:36:8b:b3:6e:72:f0:41:57:
3b:6d:6c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:23 2025 by rpki-client