Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json)
Hash identifier: vVZtt/rSrp/i9ZbBg3gr6oxxxfihwYSVtMMwqbZ1PIc=
Subject key identifier: DB:52:C3:EF:56:B8:5B:96:D4:E6:5E:FE:97:B4:90:96:B4:81:F4:04
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 0194BC3C55155B39F69AFFB05F939E098C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
Manifest number: 12F9
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: BZzPZeF6nVBFp0ePkibSpSImMO4.roa (hash: CC6O/xKtKrtHkfClJGWdlIogukbhcIa4MJLuoLVEnNw=)
2: DUIJZvRDQ202HKrZ6QZsgh8Lpxg.roa (hash: WYZK5bFTDM+c1kX5q/i2Za+Wt5aspj2Z2UKRWytwMBA=)
3: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: YTkOQWtYMAbcan9i7E4jFLLshIOj/Zulm8+0ZlzUBhc=)
4: qRD7ujzJORaie3rLE2YnokYZ17U.roa (hash: S1UJWxv+rwUU/ObCl8nZivjHpfQGYiacpAIE0ZGhjrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:55:15:5b:39:f6:9a:ff:b0:5f:93:9e:09:8c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=db52c3ef56b85b96d4e65efe97b49096b481f404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:52:79:c2:56:0a:dd:47:a7:e4:bd:73:1e:
01:f6:4c:85:0e:77:61:b4:4e:df:68:7e:d4:11:f5:
e6:18:87:84:6d:d3:e9:79:84:f9:62:22:54:dc:1a:
70:59:aa:58:71:84:77:d9:e5:69:0a:5b:bb:85:8b:
31:9c:9b:d5:45:08:e8:dc:b2:83:27:93:6a:13:e9:
82:19:e0:d2:bd:90:53:6f:2c:86:c5:46:bd:48:99:
ed:d0:54:e3:c8:f3:c2:82:bc:ae:f5:ea:89:fb:f7:
f4:1d:ab:5b:e9:42:6d:1b:a9:08:43:85:24:da:6e:
cb:20:a9:73:4a:43:f4:86:6b:f1:2d:79:50:ba:70:
14:33:66:aa:c4:67:4c:99:c9:54:32:6c:1e:14:a8:
fd:07:36:97:87:40:ad:45:95:8f:76:e0:fd:7e:ed:
7e:d0:d1:74:10:af:28:e3:19:93:45:80:c6:c0:65:
e9:8d:ca:6f:e0:52:c4:a8:38:4b:11:61:9b:bf:fe:
d9:59:84:a0:85:19:2b:44:14:19:b1:84:53:ff:50:
62:e0:b6:fd:a4:a1:cf:f3:e2:c6:4e:b9:d1:14:81:
f2:33:27:23:99:63:5b:63:49:d8:b7:75:98:f9:f2:
cd:13:71:ad:e7:a8:e5:17:98:1c:41:4f:76:0b:f4:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:52:C3:EF:56:B8:5B:96:D4:E6:5E:FE:97:B4:90:96:B4:81:F4:04
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a4:d1:e4:07:ff:ba:a1:c9:5c:f4:4e:f7:cb:b4:d4:95:e7:
5d:f5:9f:cb:2c:bf:02:84:0f:86:68:10:42:9c:4b:57:04:19:
3f:06:43:74:a2:11:3f:51:9e:f8:ce:d0:f7:23:f8:4a:b1:2e:
bb:d9:e7:c8:10:43:c7:4a:21:30:72:ac:a2:18:29:c3:1b:44:
27:fc:0a:e7:9d:b8:e0:b1:4b:15:5c:79:6e:d9:0d:af:33:7d:
d2:1c:14:4e:c7:a2:6f:32:4a:21:16:33:23:63:67:65:6a:37:
43:d4:9e:bc:18:c9:13:4e:22:ac:8a:32:ff:3c:79:c7:3a:24:
75:ab:93:63:12:f3:f4:e0:34:25:70:8a:c4:79:64:d6:2d:99:
76:12:2a:9d:fb:f7:c6:7d:49:bd:9f:e1:f1:b6:fb:87:6c:36:
21:34:3d:63:98:e9:bd:fe:a1:44:68:ba:bc:d9:b2:a8:57:1d:
4c:d1:8e:fe:93:4f:66:88:29:92:24:4b:24:ea:0c:e3:cf:58:
7b:56:b7:f9:73:3d:0e:b2:55:4d:6a:00:7c:d0:4a:7e:3b:b3:
2b:4d:35:2a:1a:f3:05:1c:88:ee:8d:54:25:9b:0e:f5:f3:46:
9e:23:89:9a:ff:78:0f:e9:a3:e2:8b:76:ab:5c:13:2d:0c:c6:
e9:16:30:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:51:52 2025 by rpki-client