Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
File: aqb54-JiKngVolnljVUkOcJVoxs.mft (raw, json)
Hash identifier: ee08/7JPeAWFhFCZe3LdxR8nWIvE6ZNISBGzIKb0sSk=
Subject key identifier: CB:F7:44:E7:85:43:DF:C5:C6:8F:B6:4C:32:AD:F1:91:12:7D:D1:53
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Certificate issuer: /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial: 0194BD85A7FA664FB1732A658B6E4A373CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: PXiDqudXgKmzyY9YiAzq4s46dWE.roa (hash: 5TBNAVFbP2ChjbJK1BJdzLBXEkgEKjRymZk/TEDkDEM=)
2: aqb54-JiKngVolnljVUkOcJVoxs.crl (hash: Fsy7kGk304du8eh3HgqmoIBjTkgdc+0I7Zj+Gnt6n7Y=)
3: q7nNEV5Xjvk4LtZ1ZqHRZsjWZFI.roa (hash: acnCrGpXIM7lWKiBoJxoUduhJbjnt+3LzoU7dLDO7Fo=)
4: yX0Sl7S1CDrX-G7aHHH7HF-0TIU.roa (hash: Y4Ls4yPY2OiPCKdVraBwQCc1dEKhm1VWZBF9yLJSXfM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a7:fa:66:4f:b1:73:2a:65:8b:6e:4a:37:3c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=cbf744e78543dfc5c68fb64c32adf191127dd153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:00:eb:fa:b5:88:4a:f9:da:b2:8b:05:75:
f9:cb:7b:30:70:4e:0e:06:2a:ce:af:8f:d8:c4:c0:
bf:1c:61:3f:f9:e8:fc:53:8c:d6:91:b9:5a:c6:3b:
8a:da:0f:48:73:da:b0:d9:01:12:7c:7f:0e:c0:10:
82:17:00:94:05:62:06:08:04:30:31:62:f4:4e:10:
26:9a:bb:de:45:61:4d:10:f4:8b:40:39:44:fa:db:
eb:27:26:6a:7b:2a:4e:5e:1e:2a:c6:60:4f:d0:71:
71:32:4e:50:a4:4c:88:49:30:91:c8:25:76:d8:17:
c7:cf:cd:6c:5e:71:f6:a7:76:6f:01:bd:72:8f:ef:
03:46:98:bb:4f:e2:48:66:5a:96:99:f0:3f:b6:c5:
c8:24:32:0d:14:41:e3:20:d1:26:f0:7c:49:94:f5:
94:02:ff:47:1d:47:c7:89:bf:05:24:cc:6f:7c:e0:
42:4f:7a:bf:1c:c9:e8:7d:3e:1f:05:7c:90:11:e0:
f3:7f:6e:06:9a:23:73:1b:12:df:1a:e2:98:f8:f2:
ac:94:4b:d2:94:5f:ed:53:d0:0d:aa:f4:89:ab:e5:
4d:d7:a7:6c:66:4a:3e:9d:f4:c2:03:39:a1:61:ca:
2e:33:85:03:78:26:05:8f:12:65:54:ad:ba:ee:64:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F7:44:E7:85:43:DF:C5:C6:8F:B6:4C:32:AD:F1:91:12:7D:D1:53
X509v3 Authority Key Identifier:
keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f4:c6:ad:e5:d4:c6:fc:a5:82:39:44:92:de:9d:4b:36:8a:
2c:92:71:5d:60:bc:cf:7c:be:a9:84:3e:f3:8d:dd:00:50:08:
9c:0b:ff:24:5d:06:d7:7a:75:9e:18:83:d5:6b:07:29:ad:a5:
64:31:39:9c:b0:0e:a6:ba:c7:19:c3:58:29:92:13:06:28:4e:
42:8c:96:52:91:ad:61:72:32:f2:82:e5:b2:b4:5d:9c:21:81:
e7:bf:34:15:a5:24:20:1b:1e:92:40:c9:52:bd:11:b7:1e:ec:
53:b5:33:74:e7:a6:84:2b:86:c1:d4:de:73:dd:1c:ed:93:f4:
3f:ba:c1:14:f3:68:db:e1:f2:a5:d3:eb:8d:56:b2:36:1b:04:
98:cd:1e:b3:b0:72:3c:e6:59:56:97:15:1a:af:9a:b6:89:82:
c9:cb:93:3d:90:2d:69:20:7a:93:33:f2:6f:6d:11:02:b2:22:
a4:2e:09:5d:fa:23:4a:e9:fd:fb:4c:2b:b6:e3:30:96:0b:10:
80:e1:a7:5e:7d:fd:f5:cc:ae:f2:85:28:3b:8f:a3:d1:88:b8:
a6:dd:5b:25:b6:d0:1b:7f:8d:03:bb:cf:41:0c:9f:7e:c7:fe:
31:f7:a5:0a:a1:94:4d:b7:ea:46:8c:fa:6a:0e:5c:32:8f:38:
9f:6e:13:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:22:17 2025 by rpki-client