Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier: biIksU/cepUHw0/4dKS6tP7+1yUHX3haocQIFsq5mLM=
Subject key identifier: D5:C9:45:0C:B9:F1:69:EE:44:63:84:5E:EF:B8:7D:5E:BE:BE:ED:AD
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 0194BBCEF8059D3FF12BC3DC28E7B2B46316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number: 065E
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: 5m0E4hrlymj_oPq4RutDZTBvpFc.roa (hash: D3u2GpmWvvHTn4HOSLwFPi92ntWCyeD4rYP1qp5He0g=)
2: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: QXnFVagYh3y2FwpyJVH6Qk+vYjF/HnKsE95k/QxRy+k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f8:05:9d:3f:f1:2b:c3:dc:28:e7:b2:b4:63:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=d5c9450cb9f169ee4463845eefb87d5ebebeedad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:d1:77:89:75:c8:75:70:8b:cd:7e:94:86:
f7:84:04:be:8d:28:7d:4f:d8:af:22:99:d2:03:87:
d2:fe:65:a7:52:b7:32:11:91:10:4e:16:59:f3:ec:
77:44:8f:12:db:9d:7d:e0:2e:4d:92:b5:cd:dc:e1:
a7:df:46:56:5e:d1:ce:8a:c4:84:36:d9:c5:6f:a4:
6f:61:ed:da:b5:cc:08:30:f0:fc:29:f9:7e:c3:91:
78:77:21:d6:d9:54:fc:89:a7:7f:a0:e5:86:2a:96:
84:14:25:03:28:03:31:f1:b8:06:0d:f1:35:94:0a:
e8:fa:f8:32:d6:ee:b3:ef:c1:f6:32:01:c6:a1:03:
95:a4:6c:e4:3e:d7:bb:15:27:d5:db:02:6a:56:e4:
45:66:fc:64:6d:e6:e6:c3:90:80:b1:6c:71:fc:6b:
23:78:c5:ce:be:fb:fd:f6:70:99:7a:7d:df:1e:3f:
27:ca:14:f8:43:49:f0:bb:3f:49:05:c8:02:44:c1:
51:ee:24:4d:56:10:e9:5a:93:89:9a:07:1b:bf:17:
9a:c2:f3:f8:7d:43:96:b9:fb:4a:cb:62:3b:a1:4a:
ec:c1:00:52:6c:7d:96:d6:ca:4f:38:01:1a:13:60:
15:cf:f0:3c:6e:21:32:ca:67:88:89:c8:eb:95:8d:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C9:45:0C:B9:F1:69:EE:44:63:84:5E:EF:B8:7D:5E:BE:BE:ED:AD
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:89:d1:31:be:20:0c:d0:9c:5d:32:cd:58:e1:5c:57:70:ae:
e9:df:e4:05:b1:fe:08:77:db:e3:aa:c4:5d:df:d4:ca:e2:ba:
d1:4c:de:bb:81:38:dc:01:c7:bc:b1:90:34:16:3f:40:1e:3a:
f0:7b:69:d2:89:96:33:af:f2:62:2f:fb:dd:46:8b:9c:2c:85:
93:35:dd:1f:db:6a:93:01:c9:72:f9:53:e5:26:72:08:4d:00:
54:15:77:af:2e:bb:ef:c0:37:5f:b7:7a:b2:60:f1:21:fc:91:
48:27:95:87:ee:b4:9e:c6:8b:82:31:e4:d8:6a:72:4a:f9:02:
56:46:c9:5f:fc:92:5b:52:07:20:74:21:97:c6:5b:77:b9:93:
db:38:6a:9a:e1:38:6e:62:41:57:c1:a4:a8:8d:5c:fd:52:1f:
75:41:13:04:c7:d0:61:ed:5d:b7:20:87:c8:46:58:ea:53:23:
17:1f:1a:63:05:af:f2:63:6f:ce:aa:9b:90:d1:b8:f0:45:6c:
66:3f:e7:59:da:4f:98:e6:da:fe:aa:a2:f4:19:17:aa:d9:74:
67:dc:c5:42:bc:4a:62:fa:0b:76:ee:c5:24:77:f0:a0:a2:83:
48:b9:8e:4a:2c:df:70:ef:4d:c6:4a:92:fa:cc:ba:d5:77:2e:
6b:03:68:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:20 2025 by rpki-client