Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
File: rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft (raw, json)
Hash identifier: 9aJyjoNeKdl4pM0YQKP552cG7wiNLdwdp9iErDMWq1o=
Subject key identifier: AB:2F:70:1E:AD:5C:C5:11:78:1B:8D:72:29:E6:B3:D2:BC:24:71:0A
Authority key identifier: AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
Certificate issuer: /CN=ae04106f302c0077e90b66762ebb222e611b33dd
Certificate serial: 0194BC73276BEBB463C6F4CE196292D42E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
Manifest number: 035D
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: GOFFPgaA_FNPo8jH9LLALXPdKRA.roa (hash: JZqDVZ5TyXAW6arfyTRJvqhjtcPlVF0bW1jBuVqcZ2U=)
2: rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl (hash: zgsVm6ImN0NdUn1gH4huyZpL4HYI2rChXi6HqDO9WhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:27:6b:eb:b4:63:c6:f4:ce:19:62:92:d4:2e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae04106f302c0077e90b66762ebb222e611b33dd
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=ab2f701ead5cc511781b8d7229e6b3d2bc24710a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:d6:79:f8:d1:ab:fa:ba:1b:43:75:9c:fc:
2e:c8:43:a4:e8:35:8c:3b:cf:19:84:cb:89:d9:e7:
6e:54:45:06:cb:de:e0:d1:6e:eb:e7:ef:69:41:45:
ec:b3:35:88:9f:18:7f:ec:bb:21:48:75:8b:01:d7:
0a:c4:de:1d:97:dd:80:56:f9:7b:5e:3d:a9:03:02:
47:0e:27:d1:5d:db:fc:20:8f:df:01:61:f9:d5:ad:
a8:8d:a4:8a:35:36:c4:29:02:f0:77:9e:8a:92:4e:
08:ea:73:98:40:d2:5a:35:a0:aa:8a:64:82:9c:a0:
f6:f8:47:3f:36:95:a1:14:99:b8:12:67:a1:da:da:
b3:2c:7f:8c:f3:a6:f1:70:3a:eb:c9:12:53:c9:ef:
88:02:db:6b:bd:f8:7a:01:5d:bf:0f:b5:cd:58:20:
d4:90:e3:0a:01:ba:11:af:16:10:24:3c:d5:ee:fd:
c2:4b:3f:a0:94:01:3b:12:ba:67:e9:5e:45:35:db:
87:87:40:96:29:48:8b:e8:66:f9:d3:69:06:ae:80:
8d:bd:c6:1e:e8:47:2a:dc:fb:a2:e9:3f:3c:e5:a9:
5f:7a:76:c9:1c:40:85:21:8b:8d:d0:65:3b:d5:31:
31:bf:f8:56:a8:15:5c:48:d6:97:ea:b6:b5:bc:c7:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2F:70:1E:AD:5C:C5:11:78:1B:8D:72:29:E6:B3:D2:BC:24:71:0A
X509v3 Authority Key Identifier:
keyid:AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5e:37:8f:3c:0a:b9:e2:3e:95:72:27:c4:ad:a5:3f:7c:3a:
05:20:bb:62:2a:77:c0:27:c6:3e:63:a0:ff:16:e3:23:d2:bc:
e5:1c:6f:01:a7:ae:4d:5c:ed:44:c1:c7:18:02:ab:e2:6b:c8:
4d:b9:89:80:b5:55:52:f1:99:52:f3:25:10:6e:88:21:e3:6f:
7d:6a:80:bd:0b:21:24:6c:d8:7d:05:a9:b8:58:22:55:db:a7:
05:02:36:b8:6f:3e:78:33:25:c9:7d:2c:20:e7:5d:7d:70:6f:
f9:62:44:1d:ed:fe:76:eb:11:59:af:3a:3b:b9:91:2f:a2:8c:
71:d0:81:95:16:98:7b:3b:46:74:45:96:63:31:04:f5:24:63:
9c:a9:a1:9e:ae:71:9f:b9:49:02:87:10:63:0e:0d:bf:91:8a:
31:86:9c:51:d7:35:c1:aa:84:91:44:c8:d4:a2:71:7a:70:66:
4a:27:5f:48:5e:5e:ea:ad:42:a6:37:13:31:c0:b1:db:9a:6f:
43:fb:0b:fd:2c:f3:4d:16:ad:8b:90:3b:81:f4:13:37:a3:44:
0c:22:70:5b:d6:13:1f:8d:00:3a:d7:10:23:2a:c1:97:3c:8a:
85:a8:99:ec:98:d9:fa:47:97:c9:c6:d6:e5:3e:6b:55:03:ae:
38:ad:e5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:56 2025 by rpki-client