Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
File: Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json)
Hash identifier: 4YHdojyxXiw2rBrACANWL9GnEVdC3NGVV1eb8dE5UgY=
Subject key identifier: 9F:20:35:4C:89:23:87:27:84:06:C9:BA:C3:CF:5D:96:91:A4:FF:B6
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 0194BD858F6BC0C53F95C5DED1D87B0B9D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: 6QBVEiLusjnuHnwecVMK9Kg-WII.roa (hash: OapSvDTUmzDRZu9Q3KlIrLgI0CjCfgxrem8xot5UiSo=)
2: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: mIbPPdpuQOhpIW2EvRokQIdhRXSpNbl1VTNxGknMGeg=)
3: JeT3PicL3j6wpeXRT3s8FrJpy3w.roa (hash: tjXOPJYxlFtc8BfVkznJC0Nu37PcV0Dt33rxJApZ9kY=)
4: L5lOWtMXwmLYho3Arxcpd76R5sw.roa (hash: XM0Za1PmkukhwAWipMkx42usukTFibdWlbabSAWWgH4=)
5: Lwic0o2gw3k82wpfSkPa-wUg5Aw.roa (hash: pZ1a8TMxYqDEEa657nYARi2g7u3tXGj01SXvh3eUl1s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8f:6b:c0:c5:3f:95:c5:de:d1:d8:7b:0b:9d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=9f20354c892387278406c9bac3cf5d9691a4ffb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:56:ca:9c:d8:25:f3:92:56:91:50:8a:72:
8c:27:01:10:9f:11:b6:d1:2b:58:d5:e9:8d:0a:b8:
f9:e0:f7:72:cf:03:70:8d:3d:0e:27:0d:0a:8b:60:
c8:43:32:d4:4f:4a:2c:3b:d4:60:e6:1e:d1:8b:7b:
cf:5b:98:e9:a7:9d:6a:18:12:2f:03:cf:98:06:ea:
a9:65:59:d0:ad:f0:51:3e:33:79:88:82:40:da:21:
06:26:a7:7f:ad:25:2e:c5:c4:d0:c6:9e:96:0b:83:
1c:d0:45:b0:86:8f:8b:84:dd:ef:05:c0:ac:76:6d:
cc:6c:4f:b7:60:d4:94:85:f7:6e:31:38:6f:96:e4:
ea:d7:41:ee:88:7e:2d:9a:b0:ef:03:8b:e5:ad:ab:
44:2f:0c:10:48:bf:d1:f4:1b:90:ac:07:e3:6e:a1:
30:9c:64:8a:3e:6e:d5:19:d9:a7:51:ff:a7:54:54:
57:39:e4:6f:ea:87:c5:b0:72:b0:2f:df:ef:58:73:
b8:c2:21:ba:2a:40:08:b6:f3:7d:06:fc:32:61:df:
85:80:a2:d4:40:47:bc:a5:7f:95:a2:9e:31:0b:15:
9a:28:7a:70:30:bd:84:55:c7:09:72:2e:81:2f:0b:
4d:70:de:36:36:cc:73:f1:f5:ac:9b:14:1d:03:93:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:20:35:4C:89:23:87:27:84:06:C9:BA:C3:CF:5D:96:91:A4:FF:B6
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:99:65:6f:78:9c:0d:62:68:39:c6:f6:8f:00:6d:c8:16:1e:
ff:b3:a2:f5:9e:63:b0:84:bc:db:6c:02:ff:05:e4:71:20:8b:
70:67:24:3b:dd:eb:c5:73:e1:c9:fe:76:80:3f:4c:5f:5a:17:
2d:15:7c:c4:43:8b:7f:0e:be:e6:33:6a:df:d0:57:9d:83:26:
ed:64:84:09:b8:b5:dc:95:67:f9:32:a6:56:8d:99:3f:6c:87:
2b:05:d5:d7:d8:36:a5:c4:bf:9e:f4:53:4e:8e:f8:85:b3:45:
29:ab:88:7d:6b:48:b1:6f:35:56:41:07:2f:30:33:5f:f2:37:
20:45:e2:8f:76:8f:76:cb:d9:51:47:48:c9:c3:43:97:f2:09:
f7:f1:f5:12:a5:55:9a:24:6d:52:27:db:38:76:c0:19:49:7d:
07:23:81:5b:d1:82:a6:15:2d:1a:e3:ba:4c:60:aa:43:e8:4c:
7e:56:7d:62:95:13:88:08:f8:27:16:28:0a:69:c0:7b:9a:68:
e5:56:17:90:46:7b:7f:72:1a:21:a1:cd:c3:6c:cc:9a:40:0d:
dc:1c:4f:c3:23:28:3d:10:7e:b4:52:97:fc:76:45:c5:23:a4:
df:d0:7e:10:58:bc:5c:46:af:0a:8e:22:58:bf:ad:5b:31:09:
5e:25:47:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:04 2025 by rpki-client