Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
File: af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft (raw, json)
Hash identifier: 6qIyClK1pZ54+PKtuxc1UdiDkLl6MGwsiWRFlvN0ThM=
Subject key identifier: 03:A0:6C:09:95:41:97:CF:6C:7E:3A:4A:D6:EF:2B:12:5D:46:D5:C8
Authority key identifier: 69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
Certificate issuer: /CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Certificate serial: 0194BC04A9DAD6C93EAFC6E7711A936D68F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: Ceo-HVPoWV3_2SxJvVUz90MzCXU.roa (hash: hrbJxLsRN5MK/3GlRfITM4zehXoSXHDnVzwmbM92S3A=)
2: af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl (hash: G4bZE+JGpbGTo9AysJ/xI90/bOaRgjqnEN9BQE8bJNw=)
3: u-uD5eJkyZwHdvCGzRD30UcsPdQ.roa (hash: 972IpaBLO7W9fM3TeJorAGTATEI6lVsjC4rz1G6aPgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a9:da:d6:c9:3e:af:c6:e7:71:1a:93:6d:68:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=03a06c09954197cf6c7e3a4ad6ef2b125d46d5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:fe:42:31:47:69:ee:4d:9f:ef:61:3e:70:
13:6c:57:2c:54:34:99:34:c6:54:fe:0d:79:1c:19:
6f:c6:2b:4b:8f:b6:65:28:77:49:b5:89:4d:2c:80:
f3:cc:90:6e:85:de:fa:5b:cb:d4:0a:57:aa:25:8e:
91:97:11:aa:7b:9a:f8:f5:47:86:c0:e0:56:48:86:
90:f4:36:29:c5:a0:70:94:56:3e:fa:a8:4c:cc:ed:
8e:32:a1:a5:38:eb:a5:54:d2:8e:ba:54:ac:e3:12:
5b:40:82:48:a0:ae:12:3d:a7:f7:5c:54:1c:0d:53:
bc:69:2f:6c:31:e9:cb:b7:79:38:e2:37:a8:ee:3a:
26:ba:d8:9f:e1:16:11:5a:cc:56:24:83:56:8e:b5:
20:d5:25:12:ad:ec:e2:15:f4:de:b1:1e:ac:dd:ad:
2a:3f:50:01:e0:0e:b2:21:d9:f4:ca:8d:48:de:f3:
1e:1f:be:f4:52:7b:49:5c:65:47:e0:0c:19:57:aa:
a4:89:e8:72:50:1b:06:2f:cc:3e:c3:6d:5b:87:3b:
1a:49:fa:91:48:32:5d:05:92:13:88:db:bd:99:9c:
a5:66:d2:39:54:86:bd:76:a6:d9:e1:4b:ad:23:d4:
4c:0d:ed:68:4a:4e:aa:22:7e:36:07:c7:77:87:e4:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A0:6C:09:95:41:97:CF:6C:7E:3A:4A:D6:EF:2B:12:5D:46:D5:C8
X509v3 Authority Key Identifier:
keyid:69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bd:25:54:28:d3:bd:23:01:f0:fd:0d:f5:be:75:54:74:55:
db:51:8d:be:b6:8e:bb:da:c3:c1:4c:8b:d9:25:f7:c6:42:0c:
74:23:9d:36:a7:d7:1f:55:25:9e:9a:81:d5:4c:d9:59:0f:e1:
3a:48:86:3e:03:db:8f:82:21:93:84:58:74:90:3a:c7:8d:97:
2a:9c:02:fd:60:b9:81:9f:0f:41:35:c8:ca:2f:57:32:8e:14:
4e:a0:a4:07:22:02:f6:1a:31:5f:f0:f6:77:88:70:86:8a:06:
a3:5b:93:05:30:ef:f3:50:86:fb:98:40:f4:58:da:68:aa:ea:
28:6a:9d:32:9f:1e:d5:67:3c:49:15:52:9e:d9:73:c7:2f:d4:
28:1e:0e:83:59:8e:9c:2e:5b:71:d0:f4:a9:77:30:c6:a3:55:
cc:8e:e0:d5:f6:d3:ba:ec:84:66:a3:c3:13:cc:a7:86:db:2a:
8d:f7:35:44:30:b9:0d:a0:07:46:ce:28:0c:73:7d:79:0e:41:
c7:f6:05:2c:c5:26:49:0a:0b:cb:c6:06:9d:c6:df:ea:5a:aa:
84:94:68:5a:8e:10:07:b8:5e:4d:86:72:e6:44:df:41:a9:64:
60:c6:d0:73:65:e0:83:98:f7:53:13:41:21:a0:55:d7:18:f7:
c0:8c:ff:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:49:45 2025 by rpki-client