Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File: _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier: heVT+oJ0Hc/3k1CJFBbM6Ti6OB5B2h8gxiLjCl+Wa00=
Subject key identifier: 3A:F7:32:EB:CB:46:06:B1:8B:19:DA:FF:81:02:0F:58:AA:A4:FC:E2
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 0194BC3CB5E915DFD3B57078AFABD4E5DA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number: 0A6D
Signing time: Fri 31 Jan 2025 12:01:22 +0000
Manifest this update: Fri 31 Jan 2025 12:01:22 +0000
Manifest next update: Sat 01 Feb 2025 12:01:22 +0000
Files and hashes: 1: Ao97_pljMLzbzu4D7OxcMMVovUQ.roa (hash: 8qLquSxpcjNa5l7/WOAmNHpNNc87P90Uh3Nqulu4hNE=)
2: Q8FRv-AW6LCPe-NhY9NXN5LnC4o.roa (hash: N2JyPxT8+m5HQDRPSXJdJM2oBFZFnSgrTMkI9DghAaA=)
3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: Kajx2cvcC2C+uV87Fvt2Zh/1KtEbPWSJnN7iyciFWak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b5:e9:15:df:d3:b5:70:78:af:ab:d4:e5:da:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Jan 31 12:01:22 2025 GMT
Not After : Feb 1 12:01:22 2025 GMT
Subject: CN=3af732ebcb4606b18b19daff81020f58aaa4fce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dc:df:19:31:54:7a:cc:d3:c8:36:a8:f7:f3:
99:77:d6:08:28:6e:af:f4:f2:41:63:5e:b2:e4:3b:
55:bd:db:0d:96:52:93:22:db:9d:99:9c:94:e2:81:
78:0d:92:f4:1e:92:aa:2b:2a:74:92:ed:d7:04:80:
a9:37:f3:f1:ae:c2:91:a7:92:d5:72:e7:03:cc:66:
ea:82:88:50:3f:5a:88:dc:dc:ed:f5:42:a6:fa:43:
3f:5f:56:63:ec:d6:45:0e:0e:b3:ec:b1:cd:98:99:
b5:e9:36:04:80:7c:bd:5c:55:7d:d7:9c:8b:b6:78:
85:46:f8:b6:fe:e7:49:82:26:f2:26:84:dc:60:a5:
4d:bf:ac:88:da:5a:07:ad:ec:47:9f:30:b7:ac:77:
a7:20:8e:97:57:da:03:f5:c0:c8:38:ed:58:cc:20:
23:14:a6:f5:f6:89:ad:2f:c9:97:5e:9f:0c:61:8c:
7f:db:79:83:5b:99:c9:61:da:6d:80:de:40:d3:c5:
88:16:ea:66:75:3f:73:a9:3d:f0:99:f4:3e:df:ae:
26:9d:28:08:ff:8a:20:54:41:40:95:ae:a4:4f:03:
44:ae:14:1a:35:66:37:57:2a:fa:e3:a2:58:7f:df:
44:61:db:c8:23:bc:47:f7:f9:41:6d:88:f4:0c:31:
24:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F7:32:EB:CB:46:06:B1:8B:19:DA:FF:81:02:0F:58:AA:A4:FC:E2
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c7:b2:fe:e6:ae:50:e3:d2:f5:1a:b3:98:93:31:5a:8d:67:
57:37:41:1d:a9:96:5d:91:84:bc:d5:93:b0:b8:88:a0:4d:6b:
e9:63:6d:e8:ff:1f:fd:51:05:36:f6:92:b8:cd:1f:b6:82:7d:
c2:9a:ce:cb:89:4f:72:ec:3b:09:40:dd:3f:bf:a7:4c:95:06:
c9:af:0f:cc:3a:ba:6c:f7:e5:44:9c:0d:e0:d1:27:57:d0:a5:
9c:a9:7c:3e:71:4f:ee:fc:b1:ae:3a:15:d8:11:dc:f1:01:41:
85:fc:e8:24:e0:d3:99:60:35:ae:98:fe:b7:fb:76:98:3c:7f:
86:98:7a:32:74:e9:6f:a9:4c:05:77:14:f8:7a:73:3b:a6:89:
93:a2:26:8e:6e:f4:a5:ac:f4:61:f1:aa:6b:81:5f:e7:fc:27:
1a:41:90:94:60:c0:4c:52:69:25:6b:ab:41:9a:5f:ba:3a:a5:
56:ec:bc:66:96:a5:0c:50:15:0c:35:df:88:17:09:81:19:42:
04:73:e3:ef:01:89:e8:f1:f3:ba:9f:6c:fa:70:86:a1:02:16:
c0:e1:bf:3d:22:ce:c8:15:e9:49:27:16:d7:6a:f3:a9:41:10:
2a:23:1f:30:7e:d2:f1:c9:2e:02:d5:ae:2f:ae:ff:59:d7:12:
10:16:b4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:23 2025 by rpki-client