Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
File: r3NBCHBalXluhXcSXdMAx1Hf2ag.mft (raw, json)
Hash identifier: wfIG3JdBHR20KByjuxf9KEkBGn2o/J0RbSjWTdQm4FM=
Subject key identifier: 02:CF:49:DF:1E:3A:E8:56:37:09:C8:C8:58:D8:F0:5A:70:18:9F:C6
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 0194BD4E7CEEF2BA8E4CF379048D252EC3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
Manifest number: 111A
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: 5sSVXjXvJmErWd1wKwIQK6a_mpc.roa (hash: Gd8tIJeuQDrvoiYueaVU9NtycnUD3d9hfBsHWs7XkBs=)
2: 9CxZ9k_t9hMo55L6uAnbiDEpetU.roa (hash: tBRk1oTOlBeUNCjuxG7yQre7lmz4lVGM1tEKGpkI/Jw=)
3: AAe3vljOuGvSTlsJqoO9Wu7Oq1w.roa (hash: IQO0MooKWp9Cz+PJ2FkCg771QrVH8K5fHfuexh0B0Rk=)
4: JblHAdnkz7IDRO8QmH2JMOjzkyQ.roa (hash: cGLKYT8Hxzs+cEgf3xDHHQtQS0b8iQ7h7LNM/8+n3pU=)
5: YdvdhoRpy_JXRjRWmkCEQY06GUI.roa (hash: TbsRq0lwWgkwqZTblVQ4eG6aMqkkSiOMP5tHnWR2zXI=)
6: ZFFTSBF1NQ53TJQyiivhv4BruEg.roa (hash: esbw11uLHSDej7o2u5hst3yF9WrjTIkF3AwgO1jVCEY=)
7: cAvPgJnDexIKpiHvGayqSS9-kC8.roa (hash: 4W7cnhuEBxCD2cWqtC/raaWqxEh9cF8vkDRXNWnz3ZE=)
8: r3NBCHBalXluhXcSXdMAx1Hf2ag.crl (hash: pwtgcELx01ayBccauRMBfaVYFV8zoCJpjxrey098xyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7c:ee:f2:ba:8e:4c:f3:79:04:8d:25:2e:c3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=02cf49df1e3ae8563709c8c858d8f05a70189fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:21:70:f9:65:46:7f:ce:5d:5a:2e:0e:aa:c5:
8c:5b:2d:a2:f5:f4:11:16:e6:d8:92:14:b7:1a:c8:
0c:5c:f3:f8:1b:61:44:90:ca:10:cf:52:18:9a:df:
b0:11:f3:9c:f7:77:12:05:42:a4:1a:9b:d0:92:4e:
52:2e:b3:c3:fe:11:29:67:c3:05:d7:4a:a0:b0:94:
5e:9f:63:b6:f9:d8:e4:4f:c5:57:86:57:ca:20:b5:
a0:72:c9:87:5d:86:3d:07:f9:67:21:2a:f8:06:0e:
c6:c2:54:aa:fe:62:98:99:f0:1d:ef:ce:f1:34:2f:
b2:d5:37:91:cf:73:68:44:b6:57:56:f0:d6:40:5b:
81:bb:73:66:f8:6e:bc:11:a7:b5:0d:c9:22:0a:ba:
45:1b:b3:56:25:79:91:84:ae:fe:35:d6:b2:6b:40:
31:0c:0a:d2:74:cf:71:85:64:ba:bb:0d:52:7f:3c:
a5:13:fa:48:27:20:7b:06:b3:7f:88:06:84:b8:4c:
cc:86:bd:90:c3:ee:2e:c3:49:91:5c:34:05:b5:e3:
c3:c6:ca:56:e4:64:23:07:34:c7:55:09:4d:b4:18:
05:d2:19:82:e9:16:01:de:79:f2:96:b7:dd:49:a5:
5c:93:a4:0d:82:d9:09:59:bd:73:9a:52:fc:94:79:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CF:49:DF:1E:3A:E8:56:37:09:C8:C8:58:D8:F0:5A:70:18:9F:C6
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ad:e7:76:f2:e0:86:74:c8:0c:bd:ec:a7:7e:4e:b1:3f:82:
3a:a3:3c:be:4b:5e:3e:d5:d7:05:eb:59:19:e0:2b:54:e2:86:
75:f5:e4:32:91:22:06:4c:f4:b6:e9:6d:fa:3c:55:3d:0f:04:
4d:e2:34:e4:56:38:ef:77:24:d3:8c:c2:b4:51:07:2c:6f:e3:
34:4c:f0:ec:08:bc:e9:1d:5e:e3:ce:23:e5:7a:82:4a:5e:4a:
f2:85:c3:ae:64:a4:bd:fd:b5:a9:79:95:86:d6:e5:2a:00:5f:
18:39:ed:84:32:e9:71:72:51:9c:23:85:57:a3:db:66:fe:e7:
4f:20:b8:f7:79:6e:13:61:ed:23:7c:09:2a:08:aa:a4:73:80:
3f:2c:c8:09:19:7b:e5:91:bd:5f:e1:38:0a:33:e8:12:63:62:
c9:34:0c:42:cc:ec:bf:92:5a:6c:0b:dc:f2:a7:6c:79:00:cc:
f6:58:c1:9c:07:b6:bc:5e:c3:26:42:97:15:f4:ed:0b:5c:70:
fd:14:08:a6:4f:5d:9c:c6:1c:7d:57:35:37:cf:3b:2f:50:7b:
7a:98:b9:d8:ac:6f:84:e7:5a:b7:3f:44:ea:8e:b9:29:30:e2:
2b:a2:e8:77:a8:3a:5c:d9:7c:2a:e3:6d:d6:c2:53:54:8f:cb:
72:a7:88:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:16 2025 by rpki-client