Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json)
Hash identifier: F1INDsxJ9hmL5aA98f48cgs5Lr/VOLn67R4Uyj2CGJI=
Subject key identifier: 6A:DB:76:A6:4C:A5:73:A2:57:56:C6:89:1B:61:BE:C2:CB:9F:46:9B
Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2
Certificate serial: 0194BC04F733822D8B3FF95754363FBEAD25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
Manifest number: 0BEF
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: Gw4Weu1O1+KEtdX/WuoT9+ZiY2Z2edm2gdHrapdkiNA=)
2: u5cM_QOizpw-qJJPqONMvmbrpo8.roa (hash: GZfhlRyj3hdFyyCNQhpcV7zv1K17zHPhBmiPFi/AntI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f7:33:82:2d:8b:3f:f9:57:54:36:3f:be:ad:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=6adb76a64ca573a25756c6891b61bec2cb9f469b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:16:13:34:c3:f4:21:7f:49:b1:56:74:66:
e3:c9:26:8d:c4:fd:bc:a0:18:b5:81:b9:bf:c6:41:
2e:0c:86:31:7e:b4:c5:8b:66:1f:1c:0b:78:e7:93:
d0:aa:b2:41:da:f3:59:10:40:8d:3f:b0:ab:8b:54:
60:0d:51:9b:82:43:eb:a5:a3:fe:2c:7b:f6:76:51:
c4:a0:a6:cd:9a:a8:be:7e:fc:ff:b8:54:6d:26:1c:
94:b8:34:73:ad:d1:16:69:02:82:6f:59:a5:3a:b0:
08:2e:e2:e0:c3:99:33:48:8e:7b:8a:70:d7:4d:bf:
95:85:f4:bb:cb:39:9f:d8:0b:ab:fb:fc:0c:f7:32:
47:1b:39:24:70:92:56:8e:da:64:ae:7a:e4:c7:b9:
5f:61:6d:33:9a:6e:b9:83:69:e0:8f:de:65:49:ef:
f3:c3:98:d6:41:1c:1c:bb:d9:41:65:96:cd:14:c7:
c7:40:2f:15:8b:16:bb:4d:70:bc:64:81:2c:4d:69:
16:bf:f9:56:8c:c0:eb:10:22:6e:89:17:e3:f2:19:
24:d2:53:d6:72:a4:11:e7:94:2c:d8:5f:3e:0d:5f:
c3:78:21:47:72:07:f0:4e:b7:75:0b:2d:d3:a0:64:
a0:46:5b:1c:e7:8c:fd:84:df:17:8c:21:d4:43:1e:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DB:76:A6:4C:A5:73:A2:57:56:C6:89:1B:61:BE:C2:CB:9F:46:9B
X509v3 Authority Key Identifier:
keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:dd:23:b5:ea:15:11:f1:b4:19:f0:b2:c8:fa:81:c8:9c:6a:
34:fe:59:0a:7a:94:64:29:b7:c8:ca:f0:2f:98:e5:fe:11:30:
86:c8:d5:bc:c0:3c:02:3d:16:fd:64:68:e6:1f:ce:98:3c:bc:
87:0b:5a:f9:5e:98:84:0a:bb:11:80:3b:df:ec:89:11:89:1e:
2f:37:2c:29:0b:41:23:40:43:f5:bb:5e:7c:cf:4f:e6:5c:ac:
e0:a6:0f:4b:97:c1:74:76:51:fc:43:2c:cb:05:e0:cd:c6:be:
1f:35:80:48:d6:88:c7:60:08:2d:86:92:e4:e0:06:10:9d:44:
09:28:18:d3:3e:51:e7:97:41:35:f6:35:bd:bb:5e:15:19:06:
40:65:3b:b5:0d:c9:1e:8c:88:5c:97:ed:af:7d:9f:4c:20:c7:
0f:6a:7e:7b:36:c9:be:43:56:02:81:77:c1:20:64:4d:2c:95:
66:a7:ac:bc:dc:f5:08:d8:09:a3:c5:0d:e6:d2:d6:f0:02:4c:
84:75:9a:ab:71:bb:72:c8:ae:9e:78:3b:91:0a:02:e5:d4:fd:
32:56:33:4c:11:e9:2d:a0:3b:1c:c7:cc:88:9c:a1:5b:0a:2f:
eb:f8:a4:35:a7:06:e1:52:81:fd:e9:f7:ca:dd:0e:18:9c:83:
11:eb:ae:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:54:59 2025 by rpki-client