Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
File: aDjbfmmRJ9pMHFpek_RPMCtihjs.mft (raw, json)
Hash identifier: SXUjW0g6ijY3orRWMizhS+WMNFyPlWa+/O86wllWFEw=
Subject key identifier: A8:32:8B:A1:94:82:9A:CD:EF:66:7C:90:CF:56:95:C9:9B:E6:23:67
Authority key identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
Certificate issuer: /CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Certificate serial: 0194BC3C49502B524D824BC816347F283D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: aDjbfmmRJ9pMHFpek_RPMCtihjs.crl (hash: FtQHNz10yZxPHwGHL+aztUpNdT2hG5gcWAmdNW7rzEo=)
2: ndozZxXsqqvoYlnvn2R8eG6q9WM.roa (hash: J/bxB2F1VD9ABMhf1I4cZo/1cjeHrt4Cto7ZdYkPM28=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:49:50:2b:52:4d:82:4b:c8:16:34:7f:28:3d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=a8328ba194829acdef667c90cf5695c99be62367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:54:d1:e7:bd:e0:f4:e6:14:61:59:44:9c:
73:5d:27:3a:f2:6c:46:bc:90:e9:00:4a:db:a8:6b:
b9:60:ed:9c:28:d2:65:76:56:d1:85:88:14:19:0d:
64:94:a9:40:90:17:9b:45:9a:fd:62:2a:f9:f5:ab:
d8:c0:9b:01:e0:99:0b:07:63:c6:6a:fd:c0:56:21:
8f:b7:ea:a6:32:cb:f5:7d:8c:10:bb:61:ed:19:b3:
3d:2b:95:f7:7a:a0:70:c2:a2:50:17:f1:31:96:a2:
2e:a8:06:ed:e7:30:30:e4:98:d0:13:a2:3b:a9:e2:
4b:38:ba:8d:25:39:d0:58:de:23:2c:d1:f0:3e:b1:
b9:89:7d:02:c5:50:29:b6:0a:57:bc:59:34:69:ea:
49:9e:ee:3d:00:f6:6d:4f:15:1a:b4:fe:9b:6b:58:
d2:6b:20:c1:30:74:df:e7:c6:73:e0:2f:7d:37:1e:
d2:65:3c:98:36:1f:f6:11:a2:6a:ba:48:27:32:e7:
6f:f2:60:9a:ed:05:76:61:92:21:56:3f:3e:1c:de:
a7:c6:f0:51:6f:cf:59:ba:2d:af:b1:36:18:75:da:
25:a6:30:15:fc:03:8e:56:a1:6b:a7:e7:3a:61:c3:
79:be:9f:8b:58:f9:83:37:10:c1:35:1c:6e:f8:54:
1b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:32:8B:A1:94:82:9A:CD:EF:66:7C:90:CF:56:95:C9:9B:E6:23:67
X509v3 Authority Key Identifier:
keyid:68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a4:da:94:f0:20:1e:ce:80:e4:98:ba:63:fa:5d:da:7f:6c:
db:2f:fe:28:90:86:ac:20:b3:9d:0c:81:32:25:58:d8:b1:a6:
78:bc:2a:bb:ca:89:e8:be:54:7a:c7:94:06:67:33:54:ca:54:
ed:23:83:9b:c4:33:cb:36:3d:9a:a5:62:2c:2c:67:87:8b:01:
ca:c2:0d:95:6f:cd:50:07:3b:ea:d9:e3:d1:48:40:51:5b:a9:
fb:44:ba:38:d8:5d:33:0a:40:f4:ef:d2:fc:62:d2:b0:2f:79:
f3:1b:54:25:b9:dd:69:43:12:f4:5d:54:9f:40:9a:45:14:19:
70:a4:be:c9:68:a7:74:f3:f7:2b:4c:d4:12:e0:21:1e:1e:ad:
3b:56:29:06:09:6d:5c:7f:fd:43:f2:3d:05:c2:78:33:7f:f5:
0f:67:07:5e:b9:55:3e:af:d4:4d:87:bd:8e:2d:1c:1d:54:a8:
e3:b7:6f:58:20:89:69:07:74:26:98:fc:ab:ea:40:91:0f:87:
e3:59:f8:f2:7a:c1:9a:dd:87:cf:da:a0:39:07:ab:37:96:27:
7a:82:44:eb:bb:f6:f6:cc:a8:13:7b:dc:4c:80:2a:45:ab:9b:
e8:4b:f1:9b:40:03:10:06:15:03:ab:40:4d:62:b5:b1:77:b0:
f2:28:de:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:32 2025 by rpki-client