Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json)
Hash identifier: XD8ZgjIgk2ednNpeWMjmIo2ZZgR2fRG9PxnPUYBTX+w=
Subject key identifier: 20:E9:4F:3C:4F:20:15:AC:E4:79:8D:D4:1A:B9:CB:43:04:4D:20:E4
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 0194BCA9C2A54C53BBA38DFFF2377E2DB537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
Manifest number: 0B2C
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: Iwa2WjVDIZS6E4vl286hIpDRTL8.roa (hash: Ml9mAf4D4cdmyuWDVRKJcbVlY2mEksJYokJMfWOm/SM=)
2: cRrQhRl21akyISJAcESzBw3cqNc.roa (hash: ZVnhoZeTO3PrLcaDJF9qovHR+RzyE1BQFr1o16SkPy8=)
3: kxpX1lCQQ8yOBbstUeCdv_zpUVM.roa (hash: oJhD38+sw8OGBYsN0ao2Z9Co7xQKNJ8DNYl0qpddiRA=)
4: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: Z796IUsIUCsXbJ7ks5k3uY88dpuUXFOHhUkXsL+FB0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c2:a5:4c:53:bb:a3:8d:ff:f2:37:7e:2d:b5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=20e94f3c4f2015ace4798dd41ab9cb43044d20e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d3:6f:95:09:66:17:23:7a:db:1a:1a:ca:12:
32:42:a1:ce:81:25:e9:9b:b9:af:34:6e:a6:77:34:
88:09:bd:de:31:cd:c4:b7:a9:2c:e7:b4:c0:13:55:
a1:87:3b:6e:41:ad:7c:51:88:3f:04:c3:bf:43:00:
b4:ed:31:ba:58:cc:2f:68:75:14:06:d6:1d:16:0a:
12:76:84:8b:62:c2:32:fa:67:fe:ef:b4:03:80:be:
e3:27:70:e6:97:00:68:27:25:fd:ab:b7:72:2c:f1:
b8:54:cd:1d:5a:0e:ae:a8:31:e8:c0:fe:f3:af:35:
4c:35:57:e7:3b:dd:8a:68:d1:93:ab:04:88:cf:4e:
a5:78:7c:84:78:1b:eb:61:4e:20:6f:c8:03:b4:99:
f0:d4:26:9c:56:a4:62:0a:79:2c:a5:3b:0a:6f:22:
81:89:d8:f8:e9:a0:d5:c3:03:48:ce:59:c9:9c:95:
2e:87:39:d3:ef:ab:ed:15:83:0b:e3:23:8b:52:6a:
38:91:62:6c:be:b7:67:c6:3d:14:60:e1:3e:ce:82:
ca:8f:16:cb:7f:35:82:89:94:8b:0e:32:cc:36:c8:
fd:e0:b4:22:a5:ee:ad:1f:7a:99:fc:eb:e7:8c:85:
3f:f7:0a:a9:44:e8:ed:d2:dd:d0:29:97:75:28:04:
37:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E9:4F:3C:4F:20:15:AC:E4:79:8D:D4:1A:B9:CB:43:04:4D:20:E4
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0c:16:d5:01:f0:68:14:f7:21:ac:9c:c1:d4:2e:0e:30:63:
96:39:6f:d2:00:15:0e:2e:ab:3e:46:97:7e:7f:c5:28:4e:fd:
ea:e0:56:43:4f:27:43:24:4a:30:4d:ad:17:8f:22:e6:52:eb:
ea:3c:04:fb:73:27:d6:88:d9:73:44:71:07:25:81:2a:fd:ef:
79:f7:1c:bd:ea:dd:a2:55:c0:63:18:55:98:cd:98:21:4b:9f:
38:ca:c7:0c:e5:9b:23:dc:92:02:e2:ad:74:d5:d9:2f:43:a9:
e2:6b:a4:ef:f9:79:b5:0b:7d:d3:05:55:01:d6:79:ea:9a:da:
c4:ca:ba:db:91:4b:af:00:6c:e7:3c:ef:52:8b:81:65:9a:6d:
55:6b:ec:e0:83:5d:67:9a:07:73:7a:92:d0:49:87:72:60:0d:
4d:54:45:4c:a5:b5:fd:a1:c1:29:6b:c8:13:79:aa:01:04:11:
a7:4b:2a:36:1d:b9:62:4c:b5:53:6a:ce:11:9a:fc:94:02:5c:
65:f5:86:ea:92:8b:e6:36:f3:a9:ff:58:1a:fc:93:2d:1d:35:
8a:33:49:a7:0b:03:a9:2a:5a:7a:77:2e:78:13:2c:13:df:5b:
e5:d3:65:82:21:e5:1b:79:bc:70:1d:a8:19:04:8f:4e:bb:9a:
73:5e:29:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:05:25 2025 by rpki-client