Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: 1STAZ8LW69L5l0kDTvMhWeN2bfiqwZJLzYGLA2vOuuA=
Subject key identifier: 78:42:CB:49:37:6B:A1:B8:A3:E7:70:57:7A:50:F6:27:72:B3:02:DB
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 0194BD8535DAF354123C06BCEBA4D20B4806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 0DE5
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa (hash: /xE4OxOvjCCoCUdeNOdzw/FvM+bpWmIZ3XvVFCX7TVc=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: rLKDbaBpWDJDLxgLcBDsAvHT+Hpdq7zjjTjDetMHN9o=)
3: qi04sQ8qQVwMXdQXve2GNvg8f-0.roa (hash: fLJ+x7i0b6ZT7hHF332I64JRm3fDb0LUQmOcJ/RhLx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:35:da:f3:54:12:3c:06:bc:eb:a4:d2:0b:48:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=7842cb49376ba1b8a3e770577a50f62772b302db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:08:ff:2c:3b:c6:9c:5d:27:aa:20:1a:87:
25:7d:79:8c:bf:95:f1:43:87:41:91:88:d9:7e:26:
c1:ca:d3:d5:e9:04:5f:a5:39:16:6f:ab:df:15:cd:
66:cc:57:0d:da:24:f2:d2:71:f2:c9:fe:51:2a:68:
c8:3f:ef:ba:14:95:e4:c5:6e:b1:5d:b4:c0:0c:77:
3b:7e:25:19:81:b1:d9:32:a9:d9:a5:e5:a9:95:0b:
75:0f:28:fb:c7:88:06:bd:d2:0d:d8:88:4b:e2:2a:
d2:d9:e6:c5:df:5d:ac:c5:db:27:33:e2:e6:1f:8f:
26:ac:4d:fe:50:37:5f:93:a7:51:7f:53:91:61:67:
70:6e:fe:76:3d:4f:29:78:2c:e7:5b:b1:09:10:41:
a7:a4:07:65:bb:8d:c2:90:67:42:0e:1c:47:bf:64:
3c:b5:80:6c:70:49:8a:e0:21:b7:7f:48:b9:c0:bb:
42:b1:4a:00:90:5e:27:93:d8:af:21:2e:92:a6:11:
b9:f1:c4:44:f4:d5:ca:3c:c6:f2:24:7e:ee:c5:a2:
a8:cf:8b:98:04:a5:ea:b3:e0:01:f6:b5:a0:7e:24:
57:ab:76:12:e2:55:91:fd:6b:8c:b4:73:1e:1f:27:
7b:d7:be:3a:c3:25:e1:b6:cb:f2:f7:4a:fb:49:7a:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:42:CB:49:37:6B:A1:B8:A3:E7:70:57:7A:50:F6:27:72:B3:02:DB
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:6d:7e:24:cc:84:52:93:3c:7b:54:42:cf:e8:80:58:d8:7c:
8d:3c:05:aa:60:d0:b2:bb:8e:2b:cc:37:02:aa:9e:06:fc:db:
71:c9:bd:f3:46:61:2d:7a:a3:82:ef:d4:5f:4c:28:03:f6:c8:
31:b3:f4:9c:5d:12:70:e3:e0:39:08:b2:36:97:8d:17:1a:1b:
9e:43:26:f5:a0:4b:97:0a:27:3d:a7:cb:4b:d2:6c:25:84:cb:
e7:8d:f9:4b:c6:a9:64:6b:e6:4b:93:26:a0:66:c3:2c:0e:3f:
1a:e0:2f:b9:47:1a:01:a6:c6:9c:56:e9:79:6d:3a:51:ac:18:
df:c4:e8:20:3d:42:66:68:82:a4:a9:d6:d8:47:ef:04:5a:31:
9e:5c:0e:70:46:c7:ef:30:52:1e:e6:be:a4:f4:9b:22:d6:78:
74:6a:c6:e1:83:58:7e:56:76:90:5d:7a:ba:57:c0:dd:1b:d8:
24:4b:80:45:3b:45:5b:0e:7f:ec:38:2a:f6:e5:fc:55:86:f5:
56:51:1c:1b:f0:96:83:6c:15:3e:00:9c:e7:0e:f5:79:87:1b:
cc:d5:e1:50:a4:7b:89:ed:cd:b4:d7:bd:b3:6d:b9:10:0e:9b:
c8:c7:69:04:76:85:9d:90:9e:63:9b:7e:60:90:c7:2b:53:47:
4d:e5:78:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:46 2025 by rpki-client