Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: 37s3FqTHNZRs4xYX/9Wf+zCO8YfUI7E6fFjfllMnznw=
Subject key identifier: 6B:9F:D1:75:92:DD:2C:7E:AC:DF:43:6E:AA:1F:8E:2E:46:50:62:C6
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 0194BBCED5BD01EEEFDA33AC74DC6C89F0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 0DA9
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: U87y99J1siFcY1ZoT18_zMMUqw8.roa (hash: WlkxlG9RIuCR4qy7OuSRfiHWs7ZtaSsDc6kVoZ9JKfA=)
2: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: bBPMRERHqdPslr8Wxw3Fr6N1PwcsVu5RLW2bHcoUgKs=)
3: t16Nt49ySAy36uwAiD0PGu1Vpfg.roa (hash: ad44+rctUZO6EQ8Ns0r6TEi9u2Ekz8ljDyuPV/oNu1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d5:bd:01:ee:ef:da:33:ac:74:dc:6c:89:f0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=6b9fd17592dd2c7eacdf436eaa1f8e2e465062c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:49:69:28:d3:df:4c:f2:c5:db:60:81:0c:
d3:82:c8:4e:df:c6:7a:ca:b2:3e:87:8a:35:bd:c1:
aa:a9:84:4e:fa:8b:e1:17:34:bd:61:a8:8f:6b:a6:
d4:ee:c6:bb:ae:7d:c2:b3:c4:b9:aa:f6:83:b6:ee:
20:fc:09:b2:c5:c9:8e:97:aa:42:06:59:f1:e2:63:
1e:01:15:e7:1f:fd:c3:4f:9f:a1:f2:b6:89:23:9a:
97:94:ab:5b:67:30:36:87:70:3c:77:3a:e1:b9:a1:
b8:b5:b8:ba:03:16:ac:87:73:8d:91:62:71:78:ab:
37:07:cb:ba:4e:41:9d:d6:07:0c:73:f3:0f:ff:db:
d5:b8:52:7a:d1:2a:55:9f:68:17:a6:52:30:d8:65:
c0:41:1c:5a:8f:20:fb:ae:04:1a:58:ae:b3:e7:89:
a6:e4:4d:4e:f6:99:29:dd:ea:7d:ba:d2:99:bd:d2:
fa:82:c8:be:19:e5:ef:b2:f6:02:c8:2e:1a:73:25:
80:e6:72:ff:38:35:89:74:fb:22:0c:c0:3b:df:41:
bf:8c:fb:d8:2c:d2:78:41:cb:27:bb:00:a7:96:89:
1f:08:6d:e4:b5:8c:3c:69:3b:5a:ee:9c:a2:7d:7d:
8f:80:39:8c:25:23:c5:ff:12:92:8f:93:fb:9f:25:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9F:D1:75:92:DD:2C:7E:AC:DF:43:6E:AA:1F:8E:2E:46:50:62:C6
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ed:a1:6d:84:c9:bb:22:83:91:ce:9b:54:9e:67:c4:7c:77:
3e:82:b3:78:0e:67:4e:f5:fa:2e:e5:45:98:f0:31:39:67:84:
d8:4f:02:75:fb:a6:56:c1:14:3f:6f:d3:62:ce:e4:c9:86:3e:
f0:10:8f:f0:c1:96:0e:ba:ab:07:b2:25:68:cf:c7:7b:01:c3:
6d:a7:0d:07:25:0a:d6:ef:76:e7:e7:89:0a:16:4d:1f:0b:86:
fc:ed:c9:ea:09:30:92:dc:b3:d6:50:bf:e7:5b:1e:0e:dd:e8:
a0:96:c3:1f:4a:22:4d:6e:3f:f4:64:ca:8d:f7:c2:9c:6b:c4:
24:52:f4:19:08:b5:b9:a2:bc:df:11:6a:4b:5a:ab:7d:ff:07:
70:8c:c3:0c:b8:86:9a:c3:83:29:1c:42:eb:bb:f7:b0:6f:a4:
40:86:dc:62:14:72:5c:0a:63:05:80:f3:6a:2d:6c:c5:7d:0f:
3c:7f:a8:29:75:49:eb:a3:5a:4f:1d:1b:47:ae:e5:87:d9:6b:
8c:04:f1:89:5d:67:1d:e9:1e:51:96:72:41:c9:2d:c2:9b:6d:
a4:d2:c8:5b:90:63:e3:8d:84:4c:c4:09:df:e0:e0:94:ba:d8:
5f:4d:55:61:a4:3b:f0:61:98:b6:e0:0e:a8:91:5c:e1:4d:d5:
8d:bd:94:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:12 2025 by rpki-client