Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
File: aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json)
Hash identifier: 6DLxRUrSKbdS1L6uf7BvnTfZq207xU13MMsXgKX1pKQ=
Subject key identifier: 12:3F:9E:B2:64:00:86:DC:C3:E6:FF:AA:F3:14:56:D9:D4:B5:A3:55
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 0194BCE091AB6AA1AB5E8448E14202D8FBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
Manifest number: 0BD2
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: 2G8qCYpoVtySgAcA2OeugnFiYio.roa (hash: 4y9U4HthBDvGesI1zzlV+POhFy0POzpyZENkuQTD5Jg=)
2: AdYUGZij8DmxO3Ha06S--PKOAmc.roa (hash: VsJTbLEE5i06CunQsxcyU7AB2xtGSY0X2LHBs6SuerI=)
3: YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa (hash: 8I0SGpAqHedSzWDkPjUCH1zMcRg8of85FMjYoHGNCe0=)
4: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: osUCNXexpAqXB23JvUR6QHHSnPq5to8GSbL+TotuEI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:91:ab:6a:a1:ab:5e:84:48:e1:42:02:d8:fb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=123f9eb2640086dcc3e6ffaaf31456d9d4b5a355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:49:49:95:21:08:83:3e:bb:68:32:00:51:
3b:ed:1b:23:22:95:35:80:7d:3f:7d:bb:92:b9:10:
48:0e:a0:ff:3c:19:fb:42:34:22:80:9f:b7:99:cc:
12:02:a8:8c:64:6a:76:11:58:9e:64:5d:eb:f0:25:
10:66:a3:8e:2c:03:bb:0d:7e:2d:58:db:15:66:9a:
4c:65:5f:ab:2e:71:18:ab:38:6f:ce:dc:43:e7:78:
33:35:c4:c6:0d:ac:e4:89:0f:9c:15:2a:4b:f5:5d:
4a:d5:e6:37:c1:d4:af:cb:09:65:bc:de:27:70:38:
0d:4d:6b:c9:6c:b6:aa:4c:ed:3f:e1:67:b1:59:2e:
ec:aa:99:50:cc:9a:0a:d3:5c:ff:ed:f6:68:c0:bb:
c5:58:23:78:11:b9:45:7b:c1:77:14:db:08:82:4a:
25:c3:7e:9b:24:8e:37:dc:27:83:0f:9a:f1:e6:ae:
63:da:0f:4a:26:01:85:82:9c:b1:7f:ce:8d:90:8e:
05:de:cc:5f:f2:9f:c7:67:43:a3:a5:85:06:1e:2e:
d0:02:66:3d:5b:24:41:2c:3f:e2:e9:31:1a:41:c5:
ba:fb:c5:97:00:9c:cb:22:4f:2a:ec:db:a1:a0:6e:
4f:56:98:48:0a:2a:2e:8e:0f:94:a0:cf:08:ab:ae:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3F:9E:B2:64:00:86:DC:C3:E6:FF:AA:F3:14:56:D9:D4:B5:A3:55
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:08:5a:86:22:c5:d8:e5:f0:82:3d:6b:fe:f7:4f:c3:1e:f9:
22:72:18:3c:ac:01:66:f4:f6:65:6c:2e:d2:88:d2:34:93:c6:
b6:3c:8b:4e:42:73:c0:09:89:d1:d3:18:d5:e4:f6:5a:b3:24:
ea:7d:de:4e:b6:40:ca:e6:25:24:ab:d6:8c:9c:35:66:cc:c8:
04:a8:6c:2a:1e:19:20:36:9f:b5:32:63:68:ad:ed:6c:f7:16:
51:31:58:60:01:9b:46:fb:8b:97:b5:25:5b:af:f4:f8:0e:d0:
a2:7a:55:d2:db:3e:92:07:ea:fc:4d:21:f1:dd:e4:96:bd:69:
42:de:a6:aa:b9:1f:e1:af:81:c7:dc:7e:ff:f3:dc:51:1e:a7:
b5:b2:c2:c0:83:c6:05:8f:18:0c:e0:9d:ed:fa:09:31:bc:e1:
ec:c3:58:2a:1b:6d:b8:90:fd:79:f3:82:7d:59:eb:97:ff:7c:
11:9d:f1:5b:e0:eb:af:88:9c:46:15:7f:7f:6e:e6:80:d1:e8:
c8:7e:10:5b:ca:23:a2:8c:f5:bc:9f:ab:c7:25:24:3f:1f:48:
ae:5b:ff:8b:5c:59:c2:ce:65:a0:07:ee:f2:04:b5:c0:94:b4:
1b:e5:1a:f8:b9:28:19:05:c3:4f:5b:9c:12:24:03:08:c8:d8:
8f:d9:00:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:40 2025 by rpki-client