Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: qvSRvdSgs8EMmB/bnqc3Xso122GCjiSm+AQk8bryxq8=
Subject key identifier: B1:E0:55:CC:A9:00:06:44:7F:1B:03:C5:AA:10:09:76:AC:95:29:E5
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 0194BCE0DDED396A65CF5C0BC0C7D457B954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: 5dz9Tw4bpiGr43q4HQtTf_7BsP0.roa (hash: 0VcdjRI2LyeRRm3QIQdFN5UYWsj35tdfOvua8dhZWaw=)
2: C-j834veFsj1jsTX7J6_TWAlAyM.roa (hash: 1/vufO4pJcMpVCQ6/N50OfHCZoID4FXv7ykneVDspNU=)
3: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: 5HhKQOQoX+2qBcMaqYj4WtBMZTT8a5x2xjJh9Tfw1b4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:dd:ed:39:6a:65:cf:5c:0b:c0:c7:d4:57:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=b1e055cca90006447f1b03c5aa100976ac9529e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:7d:10:d5:5b:df:31:5b:9b:96:05:bc:83:
22:41:de:75:92:0e:c6:0d:10:56:d3:73:ca:f5:29:
0b:ea:40:e8:1d:54:3a:2b:b5:5f:aa:d9:31:23:ac:
28:b2:40:16:3f:98:88:69:78:b2:87:dc:d5:9d:8a:
eb:f2:85:6c:04:70:43:26:87:82:a0:52:b9:89:38:
e0:a0:ae:e4:7b:ec:ce:1c:5c:0c:0d:b0:b3:99:39:
9d:43:1a:0c:f5:28:85:cd:7e:b9:3e:66:84:9a:d9:
a4:e4:7b:46:a4:48:67:28:f8:bf:47:0e:6b:e8:22:
b2:25:cf:9d:fd:37:f8:eb:75:f7:10:ae:ae:6a:25:
c2:b3:a6:1b:22:2b:da:7f:2f:8c:a7:6a:e4:c0:b6:
8c:b8:a9:20:0f:fd:fc:4c:98:3a:83:5e:00:d3:e8:
dc:c6:4a:9f:00:7d:39:65:ce:bd:77:fd:96:8f:81:
27:d6:4a:df:e3:c6:55:7c:37:11:b4:e8:ef:b2:6a:
81:89:72:c2:60:29:47:7d:89:6c:c0:51:56:29:e1:
1b:8c:76:6d:e0:07:46:3d:ed:7a:b9:04:31:f1:7d:
7a:03:e4:d9:60:86:87:76:48:e6:f4:db:cb:8c:78:
f5:dd:17:2a:cd:50:38:bd:2d:11:d5:28:16:89:73:
b1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E0:55:CC:A9:00:06:44:7F:1B:03:C5:AA:10:09:76:AC:95:29:E5
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b8:ee:ab:55:d6:fd:cb:9f:4c:1d:84:6c:13:2d:a6:52:c5:
19:35:9d:f8:b4:30:ea:8e:f0:49:c0:b9:26:22:aa:e3:8a:c0:
19:b8:53:01:f0:f5:d5:c7:43:a2:f6:2e:fd:7e:f5:37:b4:36:
97:86:07:13:7c:0f:9c:62:af:ff:f3:c1:26:95:eb:ee:b7:78:
ab:46:a8:7b:62:71:22:ec:45:fe:ba:c9:f6:03:17:76:e1:55:
06:fc:df:7f:35:ee:29:62:25:72:17:6d:75:a5:4e:a3:32:fb:
7c:c6:5f:a4:bb:0a:22:4f:97:57:94:d2:f6:b1:ad:a1:61:f3:
e4:a8:fb:d6:f1:9a:43:b0:97:b7:4c:dd:98:99:8c:6f:d3:82:
69:00:ca:4d:95:d2:71:fc:b8:5b:3d:be:ec:80:bf:f3:4a:1b:
26:52:98:e5:a0:e0:7f:12:5b:08:e6:8b:d6:b5:6b:bf:b8:71:
3d:25:97:d0:df:99:96:9a:a5:8c:3d:06:78:3c:28:48:91:e0:
5e:a9:55:55:5f:99:c0:2c:4b:ac:ec:bd:a8:bb:80:ff:7f:3e:
a7:8e:77:b3:62:63:fd:12:95:c4:73:65:e8:94:40:80:bd:e9:
0c:f4:ce:f3:ef:54:ed:e3:ad:bd:a4:87:82:45:76:70:57:98:
ad:38:37:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:08 2025 by rpki-client