Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
File: aKfCyE_6STTPD3PvGhoaM3hzGCY.mft (raw, json)
Hash identifier: JSwLqs9nBWE+zZ5IK9qllJa7ES2XoAL2tUZRF+vCH5k=
Subject key identifier: 78:52:4A:A8:43:9F:44:CC:24:5A:9F:35:68:7A:D6:25:39:74:17:CC
Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Certificate issuer: /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Certificate serial: 0194BCE0E9E359F80A427E4B8FDC6AC141FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
Manifest number: 0B10
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: KnUOYk5bdwDOyPRpWUFQ6FTo7gs.roa (hash: oV64n7K/Nu3TxpzkL+waUqCMMUTsVFeqTi3s1yY0Zn0=)
2: aKfCyE_6STTPD3PvGhoaM3hzGCY.crl (hash: mEs3cd9MpHm6FykMY5SmpOEcOe3quXsSIqEFINmCTUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e9:e3:59:f8:0a:42:7e:4b:8f:dc:6a:c1:41:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=78524aa8439f44cc245a9f35687ad625397417cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:69:69:e2:6f:6d:21:13:b7:f5:2b:2a:3c:10:
83:f2:85:1c:ff:17:b0:c4:3b:f8:be:62:9f:6c:b6:
7d:0e:6b:6f:4b:2d:f9:76:a1:e1:ab:00:e6:bc:d7:
b0:6c:a9:fd:5a:ab:99:a8:53:df:78:98:5e:de:30:
48:4a:43:a5:e2:4f:25:42:dd:42:75:4e:45:0b:77:
5b:4b:95:d9:34:c0:1c:40:1e:34:43:da:bb:03:e5:
b8:9d:53:bb:b4:69:52:a4:9b:b8:73:a7:40:0e:3b:
ad:95:cc:f3:c7:00:05:2c:d5:9b:4e:be:dd:03:e3:
5f:68:29:73:b6:79:c0:9b:69:3b:d6:1f:f6:57:6e:
6f:c1:f4:47:34:11:72:67:81:84:53:fd:81:a5:a2:
26:75:e5:41:86:f7:24:30:31:23:a3:dc:77:b0:e2:
d8:f0:51:47:32:6d:7a:e7:82:52:07:db:26:98:43:
1c:94:57:11:bb:de:b4:99:59:84:33:11:6f:c5:8b:
c3:97:7a:3d:05:28:4a:67:73:0b:b2:bf:e3:23:59:
c8:c6:9f:53:51:94:9c:92:de:40:e8:3d:09:10:56:
ee:f9:1d:fe:0e:27:04:79:57:56:f2:a6:64:46:5a:
52:aa:e9:1b:c3:ff:e4:38:84:57:43:fb:6d:cf:40:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:52:4A:A8:43:9F:44:CC:24:5A:9F:35:68:7A:D6:25:39:74:17:CC
X509v3 Authority Key Identifier:
keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cb:e1:f0:0a:b9:7b:5a:8d:c5:23:9d:ff:0a:49:e1:66:28:
92:ec:e6:5d:72:5d:8a:f4:d1:a4:a4:60:2c:d0:bf:74:3c:d1:
a5:11:ab:7b:d2:40:50:a1:56:43:81:92:18:62:44:b4:33:af:
7f:d7:c3:83:66:6c:72:a2:55:54:d8:43:95:04:e3:77:26:a9:
f4:0c:89:9d:25:b0:b1:8b:ee:51:5b:ab:09:d2:4b:dc:a4:d8:
68:5c:a3:66:6d:4d:70:0f:9d:28:fa:b5:e4:54:4e:8b:65:b4:
9c:14:51:7d:7a:b3:32:ec:bb:0e:79:e6:b9:63:36:87:30:5b:
7c:df:6c:59:4d:0e:b1:43:e7:02:72:ac:64:24:c5:ed:d8:ea:
c6:a1:aa:35:c7:36:94:74:dd:43:1b:92:6f:e5:c4:c5:c5:62:
d4:d1:df:76:64:73:50:23:64:2c:33:6a:37:b4:91:90:47:d6:
38:dc:b2:dd:6e:eb:c8:0a:7e:43:5c:37:a0:df:da:84:bf:1b:
7c:5a:2c:fb:cc:23:a7:d0:b2:d0:ca:a7:01:6a:a2:66:ee:36:
d3:10:73:e3:6f:6b:9a:e6:d6:46:b7:20:7f:89:fb:01:ba:01:
b9:2f:3f:8d:78:11:88:f6:95:58:5f:5b:63:17:ed:2a:7d:fc:
83:62:61:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:18 2025 by rpki-client