Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: g0LJp4cokGW70KV9oKMlQ0fmR91QVzBV5ZVR/MoNbKk=
Subject key identifier: 63:0F:6D:B2:D8:2A:FE:C2:B1:56:E6:8F:50:33:A7:D4:AE:10:02:70
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 0194BC72C80716B7810908EBE37D59AEF46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 11D5
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: IPW3rYP7oE9P_ES0-kMgln06Sio.roa (hash: 9eLRN0ajqZHckDjlFErwwqTneM3/U1IZfbIXWVVHKRk=)
2: S11P7YKPNs_v7YdolA0FgB6j23E.roa (hash: TBKKGcG+I3pRwCi4L7A30ry5+YnjawyAWGjuVum7Pns=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: X5J8SG+BmT2PTN0qi2qtwOMquocn6XWrVSnTHxju4Nw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c8:07:16:b7:81:09:08:eb:e3:7d:59:ae:f4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=630f6db2d82afec2b156e68f5033a7d4ae100270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:15:37:c1:e2:44:68:c5:49:df:0f:42:07:
a9:45:4c:f4:e8:a5:3c:82:4a:42:cc:44:cf:aa:1c:
53:56:29:86:46:4f:33:ce:51:30:77:f6:0a:63:89:
78:85:8f:00:49:70:9e:06:d9:db:45:0d:91:0f:de:
bc:0d:50:1c:fc:c3:a0:d7:8c:77:97:1a:e4:56:9c:
44:e0:a2:7c:02:eb:fc:41:e9:7b:c5:d3:17:fa:a4:
fb:c0:e8:64:44:33:3e:62:ca:41:ff:7f:0a:c8:e8:
a1:ee:1c:ed:72:1b:f3:76:f0:72:9a:2c:58:c2:cf:
e6:1f:df:cc:73:51:4a:a2:78:79:ca:6a:89:a9:1d:
eb:c8:5c:1c:7f:63:9b:f0:49:09:c9:eb:3d:7e:13:
3f:b5:fd:ba:42:ff:99:a8:10:07:7f:bc:7a:99:57:
d5:f8:f9:41:d4:ff:ac:9a:03:f5:72:24:09:7a:fc:
62:8c:30:a4:0b:94:0d:14:76:2b:34:b2:49:40:61:
54:a7:63:93:12:8f:e4:bb:08:0b:c0:03:d9:4f:45:
b2:72:ff:3c:d3:f3:40:b0:c9:57:50:e8:66:5a:27:
ad:ee:99:20:7e:11:93:a1:46:fb:78:db:6e:35:6e:
e3:92:a5:e9:6b:cc:f9:f1:77:62:c3:36:d1:32:ca:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0F:6D:B2:D8:2A:FE:C2:B1:56:E6:8F:50:33:A7:D4:AE:10:02:70
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e0:a3:60:84:e7:bd:3b:56:a1:12:80:b7:10:fd:63:d4:7c:
c2:2d:20:fc:9b:88:c5:e2:2a:cb:f7:67:24:2a:ab:96:82:c0:
cc:79:76:0f:aa:5a:bf:f1:3e:dc:bf:86:33:1e:f7:cd:a0:a7:
67:55:86:12:07:57:a7:5c:d0:e1:0e:b8:f4:e7:69:b4:fc:cd:
cb:28:46:13:a1:b4:8b:25:29:a9:7a:00:33:a8:26:12:6a:5f:
2d:59:6c:ad:8d:49:51:04:08:50:37:43:0b:8d:72:0b:2c:07:
4a:c9:f4:3b:d4:2d:1f:91:15:f6:aa:59:53:37:c9:c5:8a:24:
6c:27:a2:a5:c0:1b:e6:2b:47:e1:00:e3:92:f8:c7:4d:b4:6d:
52:fc:9e:57:03:09:35:72:89:e4:e9:05:96:8f:d0:25:1f:ce:
cd:22:3b:bc:93:25:d6:1c:57:b7:f0:f6:ab:ea:ce:c0:9e:79:
2b:b6:4c:84:07:c4:fe:cc:0f:f3:01:45:34:af:e1:94:a1:ca:
17:30:e8:66:b2:94:4b:26:03:6d:54:de:26:79:84:0d:77:0c:
f4:66:28:43:b5:34:3e:f8:08:3a:95:b0:fd:e8:ff:3b:19:fb:
52:20:3a:7c:66:fd:6a:5b:a5:93:ec:af:93:08:d7:87:c5:21:
d4:75:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:53 2025 by rpki-client