Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File: aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier: JSIoyBlh88InCnT+7q/IMFblri/PIvOb1e+V4Pwgl5w=
Subject key identifier: F8:8B:9B:64:14:DD:16:F2:AA:C7:DE:24:E1:C0:01:C0:AC:3F:4F:C0
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer: /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial: 0194BC04B59786B09DD943CC424DBE2EC470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number: 77
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: 4GntMpFkYJ6gM/bPauvCvQSVoYSTYSNb02x8UruT6L4=)
2: y10oIqjJgmTrhS3d4jWEbD3NuNM.roa (hash: lxOwUsDiGk1cWbs/4Y7xNG8Hu/IcvhdyPVcy4ppxX4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b5:97:86:b0:9d:d9:43:cc:42:4d:be:2e:c4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=f88b9b6414dd16f2aac7de24e1c001c0ac3f4fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:6c:ab:fe:34:01:a5:37:3f:10:ac:ea:14:
e9:f3:7a:7e:67:c3:98:1e:80:da:b2:31:84:db:ad:
5c:07:7b:6b:6d:0b:5d:86:aa:e0:ea:fa:75:b0:b5:
b2:ee:9b:f5:11:23:c8:1e:ad:82:b5:f5:29:15:aa:
c4:cc:4a:d0:95:92:38:3d:8b:90:7b:8e:fa:4b:de:
de:72:d8:45:4a:53:c4:d7:15:75:0b:8b:f9:50:53:
4a:c9:49:27:dd:4b:fb:7d:09:22:48:70:13:70:ae:
e4:53:f0:de:8a:d2:b5:5b:df:e6:b1:f1:2d:2f:50:
ba:08:a7:9d:9c:89:32:2f:f5:8a:00:bf:b1:50:3e:
70:a4:83:ff:9a:61:61:f8:d7:da:b4:20:a3:71:26:
e9:cd:91:e9:e0:b9:f8:54:67:9c:2b:cb:ba:2b:e4:
22:5d:2f:fb:6a:b1:30:d9:48:0b:93:33:fb:83:f9:
6b:bd:71:b8:bd:15:97:c6:dc:52:7e:dc:31:dd:fd:
07:08:17:8c:81:78:8c:ee:94:ca:ce:e2:0f:03:62:
99:04:45:ef:23:56:11:c5:1d:d6:0a:70:db:3b:ae:
4c:f4:fa:c8:93:a6:f6:06:5f:3a:11:38:1c:bc:c0:
11:f1:f7:c4:50:30:43:bd:9d:e5:42:83:57:75:dc:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8B:9B:64:14:DD:16:F2:AA:C7:DE:24:E1:C0:01:C0:AC:3F:4F:C0
X509v3 Authority Key Identifier:
keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3e:cf:7c:e4:35:6b:7d:00:66:6f:63:72:82:32:e8:e9:24:
63:88:45:d0:24:19:bf:04:e3:13:8d:8f:a5:1c:96:7e:a8:83:
cf:06:99:2a:25:49:c4:1c:da:2c:2f:64:56:fa:92:7e:d9:ae:
6b:34:fe:9c:a7:b5:83:a4:55:95:88:83:f5:b4:e8:f7:c3:25:
a1:f0:4b:00:dd:5a:b8:1d:84:d0:ed:00:b0:6e:80:77:b0:9c:
88:93:ec:81:9d:32:3b:08:0d:da:0f:d9:a0:45:50:23:37:49:
93:ec:a3:e1:00:c3:75:d6:87:9a:7c:d7:8f:06:32:b4:81:64:
ce:c1:78:41:20:4b:52:36:0a:c4:0e:38:66:78:6f:8f:56:e7:
cb:cc:ae:24:00:0e:6d:aa:1c:68:95:92:9b:5d:35:41:74:14:
68:e9:9b:75:b0:45:f9:c7:bb:a7:38:40:eb:9c:e3:7b:f1:d7:
e9:ec:d2:18:bf:9a:f0:cf:c4:9b:e4:14:4c:5b:05:8d:de:0c:
48:cf:f2:bc:96:9c:04:d2:c9:fc:3f:cb:62:5d:68:85:6d:cc:
ef:47:e4:37:cc:d1:3e:ef:72:88:3b:cb:82:cb:2f:72:e3:b7:
82:87:ef:6b:b0:72:06:35:1a:54:a1:db:5e:e5:1f:6c:c3:d6:
e3:49:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:02 2025 by rpki-client