Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
File: aZHFbxGnFxxhUyOXafVXvroQGC0.mft (raw, json)
Hash identifier: 1mQliClOGgAIEYtmf8jfPn6m72mjiLQwxwbiuWcKT8w=
Subject key identifier: D7:20:F3:67:76:37:3A:24:10:42:2E:91:F9:F4:94:1C:94:8A:C6:EF
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0194BCE070E6408FB5E5CF58E6C38C05F1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
Manifest number: 0783
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: aZHFbxGnFxxhUyOXafVXvroQGC0.crl (hash: snOhjeEeZtvZJDGltIeNSJk/9PZIk7/gOLBfLsuhPdM=)
2: wrlKlFWHglTVlLr-r73ejBJzPjU.roa (hash: ELNZJecjiFm0u1luQWOMKm4VphJFw7QYjYbDJj+bzxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:70:e6:40:8f:b5:e5:cf:58:e6:c3:8c:05:f1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=d720f36776373a2410422e91f9f4941c948ac6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:88:11:67:b6:bf:47:ce:74:71:1c:1d:21:
6a:dc:33:f7:6b:78:6c:c3:35:4d:72:3a:d1:b6:33:
76:33:b9:9e:48:97:3e:72:74:85:90:bb:82:19:06:
fd:de:0e:14:81:0e:9d:b8:56:23:c7:fc:1c:43:98:
22:d7:c7:dd:d6:2b:e1:5b:ce:9b:a1:98:2d:cb:f2:
b7:c6:65:1c:54:90:08:e3:2b:74:e5:8c:64:f8:e3:
99:33:63:e2:a8:f8:81:6f:b0:18:a4:ef:b4:25:6c:
4e:af:ce:28:9c:e0:25:90:bf:35:98:d7:95:12:7d:
3a:2f:87:9b:1f:3b:64:d8:bf:de:9b:5f:32:89:bf:
48:36:c7:3a:6b:cb:45:8e:53:41:70:17:00:9f:97:
1a:b7:a0:1e:85:1e:e9:ee:f5:2b:56:3b:1a:74:d2:
91:2e:96:8c:68:ce:fa:48:1c:ca:c2:d0:c9:3c:aa:
41:e8:a6:22:37:6e:17:e3:e1:09:01:db:90:c7:bb:
63:3b:5e:e5:ac:14:1b:3f:c4:70:c6:3d:06:f7:f1:
fb:4c:20:e9:a7:02:1f:c5:c4:b1:c4:f1:a5:25:15:
39:11:c3:49:1c:51:71:f4:ab:77:11:a6:92:cc:cd:
98:d1:0e:3a:56:4b:e8:83:03:4b:e5:24:ac:06:57:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:20:F3:67:76:37:3A:24:10:42:2E:91:F9:F4:94:1C:94:8A:C6:EF
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bf:5f:da:a9:00:34:59:62:31:26:03:52:f2:9a:82:1d:79:
10:9e:a4:3e:4a:28:a3:18:da:56:63:fa:df:a2:f0:e0:0b:cb:
e5:be:57:ae:c2:df:4e:50:d6:3d:ea:10:5d:99:21:ae:36:2f:
8d:9b:72:a1:b1:7b:fc:cc:a1:6d:e1:6a:db:02:b5:3a:f9:a8:
ab:e7:39:d3:d8:0f:5a:94:77:cf:33:00:2a:e1:6d:54:d6:9e:
45:83:27:e7:b1:eb:fc:ab:b3:57:53:5d:23:22:8f:00:99:08:
89:0b:d2:c9:5d:25:37:84:fa:04:80:6e:5c:a0:60:31:35:68:
48:62:ba:5e:51:5a:ed:16:71:7b:c2:ec:33:13:c9:49:16:e1:
28:b5:c3:cf:96:5e:d0:9b:dd:08:f2:6a:f8:5a:8d:e4:74:02:
9f:27:1c:4a:2c:8e:7f:5e:4c:53:5a:ad:ec:2b:b5:d9:b6:5b:
aa:ff:20:a6:f7:6b:7d:b7:8e:bb:31:7e:bd:e1:1d:bf:fc:c5:
78:72:dc:85:c4:53:4a:a0:c5:57:1a:4d:8c:91:00:d8:00:3d:
0b:a2:86:d6:06:fc:4e:74:2a:4f:48:be:c3:68:68:72:da:87:
e7:fb:d7:62:9d:6d:b1:25:da:df:48:ef:fc:de:f6:d0:96:cd:
bb:28:52:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:38 2025 by rpki-client