Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier: qyeNtIxMgWQS1B7nqSqIyrbZKbghNPEVknUJIfj6MWE=
Subject key identifier: 86:36:0E:CC:4B:10:3C:61:09:FC:27:3C:79:AC:C5:1F:13:03:D8:32
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 0194BC3C1287B63E400F7813D3C83055BF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number: 0444
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: Ceq8ni5DLt6rfS2QOewOZADzIpY.roa (hash: sy82azLmDtvWPz93HHlbs3C4D4UnntFGcj5egr3ZE8c=)
2: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: SQfGMnTB4rjNtW8zhn7Ay6DCJBKiyvx6CUOo9Qd0M4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:12:87:b6:3e:40:0f:78:13:d3:c8:30:55:bf:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=86360ecc4b103c6109fc273c79acc51f1303d832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:81:70:89:db:c9:8f:1b:b8:89:c7:9b:6b:01:
e8:03:3c:ab:94:71:bb:dd:1b:9e:e2:33:c0:94:f4:
dd:1a:02:c4:da:96:5d:f1:ed:01:a2:75:d3:88:f6:
59:41:1a:1c:e1:b1:5e:0b:ac:ed:78:71:41:8f:3d:
77:c8:77:d7:15:4d:08:d2:f3:a7:41:e4:db:89:0b:
f2:62:6f:72:40:20:cf:52:ee:fb:48:59:39:ae:56:
3b:0e:a4:2f:d6:27:50:32:1f:d9:36:65:63:67:52:
19:df:f0:17:9b:fa:5c:cd:49:f7:1e:7f:bd:f3:14:
10:c2:40:20:08:66:37:fc:82:43:99:c1:1b:d2:81:
ad:eb:67:55:0b:e8:db:e6:07:7c:90:d2:ee:d4:20:
c6:c8:92:9c:1b:12:a8:a8:0b:26:9c:87:64:60:08:
06:e1:a8:e0:0d:6a:41:e6:e8:82:53:8e:d4:33:68:
bc:4f:e5:f5:63:57:5e:7a:df:f5:3e:44:1b:a7:8c:
a3:ff:ba:cb:d7:48:a8:d2:92:b1:ba:30:ec:2a:6f:
7d:c9:cb:b5:ab:4e:d5:4c:5d:fb:b7:f8:76:4c:77:
67:f1:ee:06:14:29:05:66:41:2c:f7:f3:a9:4b:59:
8d:a1:ed:5c:c4:89:84:39:09:e4:35:2f:7c:1e:71:
3e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:36:0E:CC:4B:10:3C:61:09:FC:27:3C:79:AC:C5:1F:13:03:D8:32
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0f:b7:cc:8e:1f:45:d9:c0:2c:00:94:87:df:e3:ac:ea:c7:
10:9f:b2:10:92:18:f7:72:34:83:7a:f1:82:76:f3:c5:f2:37:
aa:5b:ea:20:7a:ae:9e:da:19:47:df:4f:a4:99:26:a5:a7:39:
76:12:e0:e8:d8:c9:c2:63:cf:01:73:b0:03:d4:d0:1f:79:0a:
88:eb:ce:05:58:00:6d:22:34:55:0e:09:4f:1e:dd:fc:79:ae:
4b:26:e2:d6:4f:1c:89:01:2a:24:df:ee:b9:bb:6b:ec:a4:b4:
d5:bf:3f:87:47:6f:47:45:d5:48:98:ac:e8:d3:55:3f:1d:ee:
3a:04:f7:ef:3c:ce:90:ae:ce:b9:64:43:bc:00:49:f6:be:a6:
bc:9e:df:59:33:8f:61:72:38:70:fe:e7:b8:98:86:f6:bc:d5:
50:f4:38:82:50:55:3a:59:a7:73:e4:1e:53:73:96:5f:76:8a:
46:4a:a0:56:2e:c5:e2:ee:57:48:08:04:44:80:a6:91:33:76:
6b:28:c2:04:64:7c:0f:8e:b9:21:37:4d:4b:3c:cb:b1:54:4f:
41:1e:be:d5:2d:1d:cd:42:57:19:1f:be:25:d6:cd:6f:fe:40:
88:50:80:f1:b4:3e:11:87:04:97:75:b2:05:df:0b:fc:ba:cf:
01:be:46:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:12 2025 by rpki-client