Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File: akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier: xX1NBUWHZTanG2U1Es60u2PjEy3OSnSxZFom3/IOffM=
Subject key identifier: 52:30:CA:7F:0D:36:6D:95:FC:CD:B2:4E:D1:07:C9:24:FC:A5:6B:4E
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 0194BCA9C90E3F39AA1B9CC149BF66D472BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: 0n3iQYpF6Ls3-dvq0yk-f6w2ktE.roa (hash: 92er4aRrLmBNUO87OrAGD3iytTTvnMtEKh+SACuDLjI=)
2: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: yckhOC1IesN1UnwxtptcMCBLez9K2/d4N6PwY60K6DU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c9:0e:3f:39:aa:1b:9c:c1:49:bf:66:d4:72:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=5230ca7f0d366d95fccdb24ed107c924fca56b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:8a:23:f7:60:11:a5:05:2a:4e:8e:43:64:
7f:df:ad:38:55:bb:e1:56:85:52:15:3f:f5:d7:e7:
61:4e:b9:71:50:06:5c:82:c2:d0:7c:80:e6:be:0f:
88:f3:eb:56:97:d8:36:f5:d0:13:d6:91:5c:61:5e:
5b:24:f1:86:5d:d3:6f:73:73:51:5f:8e:d7:44:be:
5a:d3:d6:3c:15:46:26:a2:a5:59:f4:ac:a1:ef:6b:
5d:b3:8e:77:a1:81:2f:20:b9:9b:4e:71:e2:65:4e:
de:b1:0c:c4:a2:35:8e:3c:45:92:38:b5:ca:bf:9a:
7c:b7:ae:e9:e6:09:63:8e:f4:47:83:5f:99:97:ec:
a0:1c:e4:48:8c:2d:ad:69:e7:4c:ad:bc:b1:b5:6a:
15:5d:7f:0a:d6:0b:ec:67:9f:1e:5d:7f:9c:31:a2:
37:f0:a6:23:45:7e:63:48:1a:0a:f2:2a:b3:fc:d2:
31:df:50:70:e6:86:b5:69:c6:10:b0:30:bf:5d:d6:
66:f9:aa:5e:56:e0:cd:68:79:93:7b:d1:bb:2c:35:
75:e3:9a:26:7e:07:d5:7c:4d:27:20:24:c6:81:ac:
60:18:d9:9d:dd:fc:57:52:48:06:5f:d8:2a:cd:25:
c6:1a:26:f5:ba:5c:b3:20:0f:b8:9a:a6:30:12:4b:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:30:CA:7F:0D:36:6D:95:FC:CD:B2:4E:D1:07:C9:24:FC:A5:6B:4E
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:94:36:76:a6:1e:e4:ea:3b:d2:bd:99:84:66:c7:52:53:8d:
6c:79:62:75:2a:de:3d:89:fe:43:77:3e:68:72:00:04:9f:a0:
79:64:c0:36:2a:1b:6f:39:20:64:75:89:39:3d:19:47:a7:30:
22:44:11:d6:cb:16:eb:5b:a2:05:79:ab:c7:3a:d5:58:d8:85:
d8:87:71:ba:c9:a7:8b:11:fd:43:6c:e7:09:70:72:2b:b5:5e:
5a:9a:72:da:83:7e:36:d7:32:ff:87:a3:3b:96:27:ec:b1:6e:
ad:ee:14:cf:c7:fa:49:81:12:c5:5f:a5:3b:17:e6:64:12:a6:
36:e0:34:56:8f:c7:ae:20:aa:4f:93:4d:5b:a1:4a:c7:1d:1f:
c4:de:06:78:34:31:f4:ac:94:48:ee:32:33:79:98:51:25:bb:
41:1b:c8:93:5e:19:d1:35:ce:52:d5:b5:14:8f:8f:c5:30:e0:
82:e3:02:c0:44:33:be:7b:bf:5b:c6:c5:3b:b0:22:53:eb:a9:
0b:43:b1:24:7b:f0:0c:6c:7b:24:05:7e:eb:4d:89:7c:46:49:
9f:32:7d:e8:cb:3f:ad:f0:c3:94:52:0a:10:6d:77:3a:69:fa:
24:97:0e:64:29:31:f8:d1:aa:d7:bf:ee:7c:78:21:bc:97:42:
e8:4e:04:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:09 2025 by rpki-client