Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier: 4uIAxNj31w2P2vALuWbKSIlt9w8Spe358PUOeg2PlAA=
Subject key identifier: 64:38:6B:82:BD:FC:A4:0E:46:BF:56:7C:EF:4A:00:4B:27:B3:D3:90
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 0194BC72E3135C334440CF787917E7880BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number: 0AFF
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: 7DHM-u52N75bFYrtw18sF4LXExk.roa (hash: rWXJbmjZQWGnyQMWmqkNqhcOEzt3s2G/b6earZ1IghM=)
2: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: LDQttH4g23TESNUiSxeGZuto9kgRBm8Cn5bha4mbbq8=)
3: sUe_rHi8ZiqdeRsLQ8GKeM23hvk.roa (hash: CHsyF/lbu540pUgLNegSNWtBQrKxYJGXewEQkJ4NBLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e3:13:5c:33:44:40:cf:78:79:17:e7:88:0b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=64386b82bdfca40e46bf567cef4a004b27b3d390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:71:25:33:99:08:e3:7b:b9:3b:c4:ff:64:
e7:23:ed:eb:88:ed:dc:3c:5a:65:ff:ed:10:dd:68:
14:dc:3c:a7:a8:3d:a8:86:0c:7e:fa:41:5a:06:62:
97:f8:44:9b:99:d4:01:0e:c1:e9:7f:82:0e:26:f2:
f0:45:17:07:9a:27:2e:80:0a:f8:97:e3:93:b3:5f:
ef:5a:24:c0:64:24:bf:30:dd:ee:b5:e8:5b:da:b9:
c9:7e:b4:8a:bb:b5:86:fc:82:01:1d:09:21:b9:da:
fe:84:f6:bb:3b:1a:58:81:fa:79:1a:6f:55:89:91:
80:84:68:03:fe:df:20:98:ff:4f:9f:6e:f5:95:30:
75:f7:85:3f:65:2e:09:e0:90:34:b4:11:1a:9e:ee:
4a:88:cd:cd:2c:51:1f:db:09:a7:1f:fb:aa:d1:29:
3a:3f:00:70:07:63:be:e7:c7:0a:55:ce:98:ce:14:
4b:50:81:6b:56:c5:60:29:0b:2a:c5:1a:af:36:2f:
b3:54:6f:cd:7d:07:51:62:55:34:fc:29:5d:7e:9d:
70:5c:e3:10:4c:8c:45:a1:93:c9:9f:db:7c:79:b8:
eb:75:f4:81:d0:14:70:bd:a0:e8:22:2d:4b:d0:50:
7e:dd:d4:db:e7:3c:80:6b:36:e3:cf:0c:29:7f:b6:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:38:6B:82:BD:FC:A4:0E:46:BF:56:7C:EF:4A:00:4B:27:B3:D3:90
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:52:99:c3:02:68:75:cf:6d:85:1b:cf:fb:71:dd:54:52:16:
96:83:b5:0f:69:0a:7a:5f:7a:bd:4a:2f:f6:59:76:83:7b:12:
93:75:f6:e0:3f:05:f5:37:52:06:cf:33:a0:7d:00:34:40:5e:
cc:cd:ed:af:b3:ca:18:70:89:88:43:79:ce:4b:ab:e5:77:33:
3b:62:fe:34:bd:92:c3:02:05:56:19:00:dc:a7:79:1a:fb:a8:
5a:82:08:29:af:22:38:73:b6:f9:9c:0a:ba:5b:12:82:02:13:
0a:44:cc:3c:6a:b5:ac:57:3a:f9:0e:77:8f:27:7a:a1:db:80:
50:34:55:d9:c8:18:94:69:eb:f5:c2:19:4f:c7:cc:1a:71:4a:
2a:3b:b5:67:e0:3a:5d:29:49:0c:69:c6:ae:50:39:c6:50:47:
c8:bb:bc:65:42:d5:7b:be:1b:8f:06:27:b1:38:c6:8b:bc:e9:
01:22:2f:57:c1:f9:9d:a7:81:30:f4:96:45:d4:90:f3:d9:fb:
6a:04:1b:d1:58:1f:75:69:0f:1c:7e:f1:8f:e6:17:0d:55:35:
4f:fa:a8:70:b7:b2:e8:52:3d:34:f2:9d:9b:9b:9f:9a:56:b8:
00:cd:98:63:5f:22:6e:40:5c:40:f2:4d:9c:59:57:0c:6f:fa:
ea:21:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:40:36 2025 by rpki-client