Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
File: AxRRSJegqj_79FtIYGEkYn8V5QY.mft (raw, json)
Hash identifier: TYTIBdrcP9TlV5eo2k+2ZZXsxz6K8xNBYwFlr/gnBQA=
Subject key identifier: 6B:86:7C:1F:80:DC:17:CC:18:A3:5F:E0:74:3A:2E:56:1A:89:32:A0
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Certificate issuer: /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial: 0194BD17E5E56130A98C3A9E7894B0A2C16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
Manifest number: 0DAB
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: AxRRSJegqj_79FtIYGEkYn8V5QY.crl (hash: sQXpRUksUV1hLzZjJwVj3Uy55uMfaDbMiqTRH3zWNqY=)
2: GNbx1AkAYLoFm6m_mtXwLVmpV74.roa (hash: YFrQLxcCpcb9UJSugeyFwUHTNma06dw5BDIyFPPH3Gs=)
3: JFc-fPYxRwpWTL5aYEEZGZcBLZI.roa (hash: QC2E/f+bgiIyYcCoCVg6tWDTa7s+wgp5cwum53PFTzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e5:e5:61:30:a9:8c:3a:9e:78:94:b0:a2:c1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=6b867c1f80dc17cc18a35fe0743a2e561a8932a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:c1:50:b8:39:cf:68:f6:1f:c6:f7:1e:ac:
89:88:23:7a:33:ff:b2:ff:f5:ee:93:4c:1f:94:2a:
53:26:f2:5f:d4:17:32:74:08:9f:ba:d3:38:26:0d:
87:c7:50:ef:95:df:9b:fb:ac:a2:37:80:ca:1d:7d:
19:0c:fb:25:a8:28:b6:7a:2f:49:ef:52:3e:7e:fc:
42:bd:88:53:b8:92:13:fd:82:bc:3f:02:09:56:22:
76:cc:d6:bf:c3:ad:a2:b6:18:a3:92:73:e6:f3:8a:
df:a2:ff:d2:60:b1:6c:fa:b0:2e:34:1f:2d:62:13:
ce:82:ab:ab:45:50:e6:d8:4c:40:34:98:7a:f5:fa:
b1:db:43:87:72:9e:26:d3:a9:34:20:da:7f:00:24:
dd:a2:8b:a9:ee:85:7d:65:1d:91:26:4e:06:53:e2:
2e:4b:1b:14:a5:af:dc:c0:32:0a:9b:a6:f3:dc:98:
5e:a1:06:e0:08:03:f9:04:ff:7d:27:23:95:03:36:
0c:c2:52:cd:ec:bc:7a:64:7b:15:eb:32:86:52:2f:
50:0e:9e:bb:4a:57:ad:6b:70:4e:f8:5c:d1:04:c8:
9b:1f:1a:db:fd:00:4f:f7:66:e0:4a:8d:85:8e:4f:
e5:ea:48:c7:7b:f5:6c:9a:65:42:fc:60:14:82:f9:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:86:7C:1F:80:DC:17:CC:18:A3:5F:E0:74:3A:2E:56:1A:89:32:A0
X509v3 Authority Key Identifier:
keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:05:c7:b5:4c:c3:4f:bf:d8:23:c5:60:0e:36:3f:5f:88:b4:
2b:80:d1:2b:49:57:44:90:77:c5:e5:43:b3:30:d8:4a:e8:ca:
4f:90:99:03:9e:c2:74:8f:d9:d0:dd:43:60:4a:9a:bc:ba:9f:
ab:8a:a7:57:67:fb:46:aa:5c:fb:8e:cb:92:98:94:1f:16:40:
38:d1:63:13:38:f5:96:89:6c:8f:57:6a:8d:f6:03:37:7b:ef:
c4:e8:4b:57:68:47:23:75:8e:04:40:c5:f7:59:88:24:74:0d:
a7:79:23:2e:ee:78:a0:2d:15:ed:67:de:86:05:48:b2:f2:a7:
da:2a:09:d5:40:9e:46:09:3c:00:dc:28:17:fd:4e:de:32:e9:
67:9f:d2:7d:24:40:bc:59:6f:b4:b8:a5:2f:a6:fb:38:3a:10:
fb:9d:6c:3e:89:df:9c:28:93:64:d7:c4:32:12:fa:ff:8e:e9:
6a:47:07:fe:bd:9f:f2:83:f8:4a:d9:44:9a:39:25:6d:5b:e7:
1c:66:6e:32:23:f5:41:57:fe:8d:99:53:6a:af:f2:8a:f4:da:
1f:2d:4a:c6:b3:6b:e5:74:ce:68:b7:95:5a:bd:a3:f1:43:2e:
43:b6:a9:07:37:39:fa:fe:82:20:af:01:56:2d:23:bb:0a:63:
45:98:8f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:59 2025 by rpki-client