Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File: aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier: brtUJXTcec+k2NM7I/YVRnRKFLigOGjQdje6GKJQkVI=
Subject key identifier: 85:0A:6F:BC:47:46:2F:A4:2F:48:CA:AE:97:12:26:1B:FA:4C:6C:B5
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial: 0194BC04D3AD12A267408FA609A57FDBCAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number: 09C8
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa (hash: ncbwn+oJ9xxudk0G2RRlfn6p7YnDM2Topv72cCblM78=)
2: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: WtKlnvfFU9W/ePytBOg5B6b8+VSvaKnMGiC2ucvdN8w=)
3: cEY4_oxa006P5RDwnA1ZzqFve_U.roa (hash: aljeYfMZh5A8r1hZ1ho6VGSZLpMMc/WsIq8gaCshO9A=)
4: nTupOLnysHIU3jc5GcaguEHrGzQ.roa (hash: 7rA+K1p/TVuAVfQm4S6Vm6UJX0egR9dZCIKwnWvWs6k=)
5: nnxeUU87S1Fex4eT1VyslsBsqEs.roa (hash: reRLOJZlJItgnmYvk5ziSo/wJ6dbsJIWZ7vz95Z6+9Q=)
6: xtIJ9CSowwXn8DwE9pPmeClg6ms.roa (hash: 31wz/SD10DVN8Iw7UtHrcLnrWKuEhsF6+2Xv8D4eSwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d3:ad:12:a2:67:40:8f:a6:09:a5:7f:db:ca:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=850a6fbc47462fa42f48caae9712261bfa4c6cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:89:19:1f:d1:34:4b:4a:d8:13:52:a1:ee:71:
87:09:68:be:b6:18:74:8f:e3:c0:91:d8:30:52:c5:
aa:6d:55:44:27:49:2d:02:54:19:f5:e2:33:02:52:
2c:4c:06:c8:d4:12:9b:3c:f1:aa:45:c3:cd:cc:3b:
35:08:0f:df:42:2e:7e:90:98:d1:be:5f:b0:a5:ff:
ac:a4:0b:58:25:da:9c:2a:b9:a0:a8:77:f9:0f:41:
42:81:8f:c7:67:da:7b:cf:ea:54:c3:c4:d9:ff:6c:
e9:37:81:46:23:e7:38:e5:0f:36:a7:f9:13:fc:3d:
f8:68:e9:f8:23:3f:f1:57:f1:d4:ec:e8:27:2a:00:
02:8a:01:21:a1:6f:c1:80:f2:fd:96:c3:8d:79:6a:
eb:6b:36:85:75:c2:e3:69:57:a9:f9:47:cc:3d:31:
80:2e:7e:47:3d:bf:ef:33:3d:3f:1c:06:f7:85:3f:
25:5d:29:dd:37:88:bb:e8:aa:86:82:4a:e7:a1:09:
e2:29:94:8c:d3:b1:2a:a1:12:7e:0b:07:31:76:67:
f7:12:f7:9a:18:5d:1d:5b:31:39:86:5d:8b:4a:0a:
4a:55:08:fe:8c:9c:54:4c:cc:e0:ce:c0:f6:43:5a:
a7:b8:93:07:db:d9:13:7e:c6:0e:0c:0e:b4:30:a8:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:6F:BC:47:46:2F:A4:2F:48:CA:AE:97:12:26:1B:FA:4C:6C:B5
X509v3 Authority Key Identifier:
keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7f:92:e0:ae:bc:4d:e3:ac:df:aa:a2:d8:e7:cf:e2:72:1d:
43:27:51:9b:0d:cf:c0:6a:1e:8f:ce:82:40:8d:1c:df:9b:14:
cc:4e:21:54:5b:a5:f9:53:9d:b4:89:90:25:d7:bd:ed:90:29:
e9:98:a4:c5:f9:e9:e6:41:1f:82:0a:0b:07:35:9f:44:f9:f6:
38:4e:86:4a:69:4d:98:35:4c:d7:55:21:cd:f9:51:80:b9:9a:
9e:17:ea:bd:95:55:ea:4a:8e:ce:85:de:83:d5:c7:9f:a1:ca:
46:05:a1:4d:a2:0c:28:e7:b9:f7:8c:97:80:07:46:de:b6:14:
03:e2:14:48:00:3a:b3:2a:0f:1d:a4:c7:13:0d:96:92:39:af:
c3:80:e1:80:97:6f:b3:60:cc:8a:d9:9f:90:e9:4c:c7:29:08:
7f:7e:a0:f0:0a:e6:ec:93:c5:40:22:6f:ca:dc:92:d9:9e:81:
cc:95:c4:2c:58:64:29:8e:eb:8a:cc:1b:34:bf:a6:07:96:c7:
7e:63:fa:ef:fe:90:2c:0b:3f:da:31:4b:24:fe:f7:48:f5:ed:
39:8a:c2:f2:57:fd:6f:70:ee:a3:06:e0:4f:50:14:4f:8a:74:
37:77:ca:0e:37:e5:a8:4a:08:73:a5:94:6c:f2:be:90:71:95:
3e:80:c7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:52:20 2025 by rpki-client