Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: 1t5JwmoH/s9rreZC0j7iOGo3xoUl9eiSWSNru9wzMek=
Subject key identifier: E1:9B:D1:6E:8A:D6:2B:BD:75:3F:87:58:4F:B9:F5:2A:00:3B:CF:E0
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 0194BBCE7ACFA0BB4F95CC6AC1AD2D05B801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: 139lyeNlCTZU0BOy4AWB3XIegPQ.roa (hash: VzrpaxikQ2FR1JamVqwQwq75MdkFdQ6cyhvfG8bUdXQ=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: k1yFOzFWpaXCWP4c3JC0bYUnxUJN5Kh4tx2Uypev/xU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7a:cf:a0:bb:4f:95:cc:6a:c1:ad:2d:05:b8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=e19bd16e8ad62bbd753f87584fb9f52a003bcfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:44:96:71:7a:c4:1a:c2:45:35:90:b6:2b:3d:
e3:d4:29:9b:9b:6d:c0:7b:5a:a8:b0:ac:cd:63:ff:
19:fb:fe:ca:8a:21:eb:8c:25:b1:ca:84:c0:08:ca:
e2:76:8c:5a:c3:6f:6f:52:26:fa:a8:14:cd:4c:e5:
21:2f:ff:12:42:b7:ef:25:02:98:29:b2:62:a1:6d:
b1:70:95:cd:49:71:53:53:5f:04:de:de:00:e7:a3:
e8:8b:67:a8:07:24:07:26:6e:d0:47:51:8f:0e:8d:
8e:65:17:11:b0:a2:a1:7a:07:e7:f6:19:10:73:34:
40:6d:2b:68:38:93:cf:4e:48:25:18:c1:51:49:d8:
9a:6f:07:ef:b3:cc:3a:df:34:64:da:d7:25:13:d6:
ec:5b:f8:68:36:44:a5:e2:da:cf:a3:6b:e6:0c:7d:
e7:8b:79:d6:79:1d:14:a4:03:52:8d:44:a9:3f:c5:
50:65:49:b8:88:ea:ec:d2:0d:d1:ac:ac:33:64:c0:
23:74:75:7e:3d:c1:07:c0:40:b3:6f:fe:4b:40:74:
06:bf:99:ee:81:d4:d2:db:30:40:45:7e:4a:56:95:
36:fc:13:d7:9f:53:0f:08:0b:f5:3a:da:2e:a1:35:
11:6a:bc:29:ac:bc:4d:26:7d:cb:0e:80:84:0c:09:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9B:D1:6E:8A:D6:2B:BD:75:3F:87:58:4F:B9:F5:2A:00:3B:CF:E0
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:25:bd:78:31:43:39:7d:e5:cf:8f:26:6c:53:f0:90:34:da:
11:8d:17:5b:e8:6c:67:00:10:9c:78:ac:b1:e5:f9:a8:56:ad:
b8:31:3b:70:03:85:ad:ce:70:ca:5e:c2:7f:4b:24:e7:3c:2e:
9b:d3:16:dc:70:3b:b9:ec:a8:6c:80:9d:39:98:a9:57:a0:a9:
c6:02:24:3c:87:bd:6b:a5:d4:56:50:b1:71:f3:26:0f:3e:0e:
e2:e7:5f:28:e9:d8:42:43:ac:2c:df:2c:e0:33:cd:5f:ed:bf:
8f:91:20:96:1f:7d:1e:21:8f:db:d8:a1:19:17:e7:b0:68:bf:
3c:cf:81:30:07:b2:82:d1:74:7c:00:fe:00:4e:8d:d3:29:d3:
ac:40:1a:fb:1e:64:34:19:2d:fd:bd:1c:fd:fa:57:76:6b:85:
62:27:9d:e6:97:ce:ab:e3:61:e9:8d:0c:11:3a:52:2f:20:3e:
89:68:f8:29:a0:86:77:70:d8:dc:1e:d5:47:30:7f:4f:dd:8b:
a6:02:9f:cd:0a:8a:15:19:19:13:84:c8:1a:81:49:9e:b1:46:
1b:2b:37:69:86:02:6d:63:c5:9d:26:d6:13:77:9e:e2:0b:17:
2c:d8:71:1c:e1:74:f2:48:03:fc:61:a1:80:57:63:36:2d:3d:
7c:b1:14:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:29 2025 by rpki-client