Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json)
Hash identifier: O1EZx2pgCa9KhWzdWvV4hKEMmEllT1g1DGK/7bGeOSA=
Subject key identifier: E0:C9:7E:2A:9F:7F:67:34:F1:C2:33:BF:71:BA:AA:6D:BE:ED:B1:BE
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 0194BD854626B102B3DC184F74B14646F866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
Manifest number: 0A5A
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: 5rhrt2Pbzdo3SB0HVaTD62_t4Tg.roa (hash: y0iyxyMR7FjHlxAFSdTCsP19Zpu9WbwfJlDLERXkCss=)
2: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: hWzEHr9vAWz0YN1R21XGCPo8S64nVHiAiT/yrpKtvOo=)
3: FXe_JPwCxokWG0F8sL8Vx_t96gE.roa (hash: 9THWoynL84G88vnVxVYdONxnlu6uMlCDE+r39l01xOU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:46:26:b1:02:b3:dc:18:4f:74:b1:46:46:f8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=e0c97e2a9f7f6734f1c233bf71baaa6dbeedb1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cb:c5:59:dd:c6:d7:7b:c7:a0:1a:a6:b9:f8:
34:70:4c:5e:0e:10:18:ee:80:b7:99:e9:59:46:68:
02:4a:98:4f:bf:ad:92:ce:1f:96:6f:09:c4:76:de:
9a:7b:df:3f:90:07:ef:c7:47:cc:fd:6a:c2:72:2f:
df:76:2e:76:66:0e:76:11:7d:e4:68:d9:b2:d2:a3:
c8:f5:cc:c9:68:bb:95:b1:44:a3:09:13:d4:41:17:
b9:d5:f0:fc:7a:6b:a5:7b:ef:ba:b9:38:ea:c0:45:
1c:03:c6:ec:44:cd:ec:2a:ca:db:b4:ab:21:7c:11:
a7:bf:b5:d6:fc:5c:7a:58:95:12:6a:ca:bc:d6:1d:
10:b7:6e:6e:d4:76:20:29:5f:6f:5d:a9:f0:56:3c:
5f:2b:bf:cb:19:5d:19:ec:34:82:04:ab:57:d4:67:
57:01:a9:79:65:17:89:f2:72:ee:33:c1:23:5b:ad:
09:ec:02:95:68:e3:09:11:96:54:e3:74:6d:53:3d:
35:ec:04:f5:e0:81:84:8b:eb:fb:d7:35:dc:69:0d:
2a:e9:f9:ed:59:33:ee:ed:b8:e7:1a:d0:0c:ce:30:
69:c1:dc:d9:92:b9:75:bd:88:93:d4:10:eb:9c:0a:
66:85:4c:98:9b:2a:5b:9d:1c:82:2e:47:c0:18:95:
40:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C9:7E:2A:9F:7F:67:34:F1:C2:33:BF:71:BA:AA:6D:BE:ED:B1:BE
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:93:05:ea:a1:27:16:0e:1f:c6:23:fe:cf:ae:85:cf:df:0a:
09:15:8d:31:26:d4:20:f7:7c:dc:33:94:2e:9f:1c:35:1c:c1:
db:71:91:b6:e6:86:b4:fb:c8:01:b3:37:1c:3f:06:f0:91:51:
a8:08:30:f9:ef:3b:5a:b8:51:d0:e2:ca:1c:62:fe:96:81:f4:
61:14:6b:8c:a4:29:87:f0:5a:59:86:2a:06:4d:1a:90:2d:07:
cd:16:c8:75:a1:2e:7a:15:8d:36:e8:6d:04:d8:39:64:1a:24:
61:1f:66:29:62:2c:fb:ce:2d:fa:33:d3:a2:9f:58:44:8f:57:
b2:f7:8b:cf:1c:0b:31:49:1a:23:25:3d:b4:91:90:bb:f4:35:
aa:32:bd:61:21:c0:4a:3c:14:41:26:1a:b8:ae:a8:0f:01:45:
55:92:aa:3b:45:3d:12:36:bc:1a:eb:6d:37:fb:e1:ba:fc:a3:
6f:f9:79:a7:a3:fb:c9:da:19:11:22:82:6c:f9:15:c7:e0:05:
1f:61:2d:df:d0:a5:d7:bf:8b:60:75:2a:c1:be:b0:96:6c:40:
17:cc:d9:05:e0:05:fe:49:f5:7d:9a:f2:97:62:0b:13:f2:15:
e0:af:65:65:10:f3:c7:58:32:ef:fa:79:d3:40:56:ec:71:ec:
36:5b:91:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:13 2025 by rpki-client