Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
File: am_dL9Qvq_hycglSRo0pY0xoydw.mft (raw, json)
Hash identifier: 9Nf9KX9WbaDkcPsmxKB6sVmN3DgJjz/4FvbqnJp6Bg8=
Subject key identifier: 7D:4F:3A:91:50:1B:B0:77:B9:1C:01:4D:97:9B:D9:C1:08:04:32:E4
Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
Certificate issuer: /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Certificate serial: 0194BBCE09EF37F26420006CF01FEDEA30B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
Manifest number: 078D
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: QZxCWcbwldfBbje2z7CU-dKZ2OQ.roa (hash: z3N51ZQ5F8Gr4zs53/jXBVGssP0tmVUaOonBzkRtl38=)
2: _od80ObLqomwGF2QQRW4qwheTZ4.roa (hash: CaYsbUoRWbmVInyGmVu/D6GkTzKF8+37wy3InRczmKA=)
3: am_dL9Qvq_hycglSRo0pY0xoydw.crl (hash: zioQ6Ml6w2/6QtEHQO8LscgenR6MutjOUYir4Fjb3p0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:09:ef:37:f2:64:20:00:6c:f0:1f:ed:ea:30:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=7d4f3a91501bb077b91c014d979bd9c1080432e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:19:a9:97:8d:45:14:10:ca:38:6f:a6:9d:
19:27:8f:be:22:97:a6:75:f8:90:61:25:9a:ca:d5:
44:4b:c3:84:0d:80:a4:0d:2e:58:c7:15:98:36:84:
62:17:a4:2b:54:93:f6:43:99:49:ed:13:ff:59:c0:
78:3d:33:d0:89:41:74:f4:ad:69:d3:30:a8:2c:ee:
36:e2:3f:eb:4b:62:f1:43:f9:2e:f4:8b:9d:c3:5c:
cc:69:c4:93:68:c5:0a:8c:85:68:7c:42:58:f4:83:
6d:45:ac:b8:a6:83:99:4d:6a:95:64:3c:62:d8:cf:
d5:01:52:ec:c0:ed:35:12:7d:28:1e:c4:d8:a3:17:
cd:15:9f:9a:41:6c:4c:f9:e4:e5:7e:40:1c:58:2b:
ad:f0:0d:8b:d3:3b:3a:e6:14:85:34:0d:88:68:3a:
97:d1:6d:10:c5:8f:1a:54:4a:7e:c7:51:b3:b8:ec:
09:61:ff:33:f8:a8:ab:a9:a2:db:0c:d6:c9:3a:8a:
94:4d:da:3e:0b:4b:e3:11:15:50:05:62:a9:9d:4a:
e8:3b:eb:ac:70:c5:05:f1:da:a8:a8:cb:48:1d:c7:
eb:30:47:de:52:a3:b1:e4:bc:c2:19:84:82:af:cd:
f4:ba:d4:11:57:0a:cd:8f:82:4d:4b:af:fd:1c:bf:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4F:3A:91:50:1B:B0:77:B9:1C:01:4D:97:9B:D9:C1:08:04:32:E4
X509v3 Authority Key Identifier:
keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2f:44:b6:7f:1b:15:b0:4f:90:da:60:9c:28:2b:da:81:6e:
c1:84:41:88:b7:68:e2:3f:c4:f8:94:6c:59:b0:7a:4a:27:b8:
06:59:7f:43:62:3f:c9:a1:b2:bd:0d:ac:21:00:9d:d6:24:f0:
a5:ac:c7:ee:3d:88:67:19:47:78:37:c6:08:e4:5c:b2:7e:09:
c9:c4:2b:64:6b:49:7b:81:df:94:bc:36:35:66:45:e0:7e:42:
d0:57:ce:6a:a2:86:9d:6a:6b:66:13:c9:7e:be:1d:b0:f4:5a:
53:6e:6a:33:22:ec:c9:03:84:6f:8a:20:ca:af:83:f6:a1:a2:
c2:ec:92:94:e7:4a:14:6c:28:11:a1:49:6a:06:34:4b:65:a9:
22:fb:87:df:a5:12:db:cb:f5:a8:20:c9:52:3a:e1:11:f2:0b:
13:c5:27:26:27:e9:02:18:a7:9f:06:2c:7c:4c:18:3f:94:bd:
b5:3b:cd:68:af:d2:a4:a7:69:de:4a:8d:96:61:ca:62:6d:d7:
f2:15:8f:cf:66:25:9b:6e:56:7c:9e:36:85:4a:b2:85:5c:18:
ce:44:da:a5:e1:0b:a1:67:26:d1:1f:1f:6f:d5:ac:f9:58:32:
0b:bd:3b:44:75:d1:1c:97:6a:ec:c3:df:4d:96:7f:c6:a7:54:
ec:f0:00:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:04 2025 by rpki-client