Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
File: aGOaIXWXlv46HZGfm1c362jXCOQ.mft (raw, json)
Hash identifier: uhdi7elNX23jJ9fO8395N8CRgoqT2+OU+b0wnQOA6O4=
Subject key identifier: 71:53:FA:C9:D2:80:E4:84:B2:56:9A:7F:FC:C1:2D:0D:64:21:78:DA
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Certificate issuer: /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial: 0194BCE05E0232E29D20E8B7E54A259D169C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
Manifest number: 1174
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: HaUn7tg_GQoLwUeKln7B89E1Zus.roa (hash: UBP04zlDEuw8zGqO58s8vILU4LoszVd4p1cFKyVRANw=)
2: Vaj_SKghwhMr5GkrNo3CpxB4bEs.roa (hash: 2ufypWC+H0u1FT85vML3Y3XXLbc7QafpFQUC4EhAO8E=)
3: aGOaIXWXlv46HZGfm1c362jXCOQ.crl (hash: 4XMpnpHcNadRDsqlyyFK4KkN2MPTu/cYwDqLeQDgSZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5e:02:32:e2:9d:20:e8:b7:e5:4a:25:9d:16:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=7153fac9d280e484b2569a7ffcc12d0d642178da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ea:18:30:cc:7a:00:8a:bd:27:57:9b:56:9b:
06:05:2d:d1:bf:b9:f0:57:f9:12:1c:04:6d:8e:46:
5a:8f:38:d0:7c:f5:7d:40:15:18:1f:06:ec:83:c9:
96:20:ae:7a:ff:9a:ed:f1:81:47:b1:3a:76:64:7e:
f8:43:79:04:4a:6d:b5:6d:b9:1f:3d:8c:a2:a2:89:
39:f8:77:57:86:a3:5d:2b:b1:ff:17:5d:66:a7:51:
a2:e1:dd:d7:fb:04:ae:47:a2:da:b1:d0:2e:58:02:
2f:ec:9c:9c:6f:ac:98:28:af:3a:1b:f0:60:61:82:
c0:df:ed:6e:98:b0:15:f3:10:03:81:dc:2c:0a:a9:
8e:f9:c2:e2:19:e9:f9:c8:86:41:e5:9d:bf:87:89:
fb:c9:8b:5c:ef:1d:53:7d:2b:91:95:09:78:21:14:
7f:50:09:1c:e4:21:bd:f1:61:29:49:9b:0e:9b:cd:
ce:4a:3a:c0:ef:b4:ed:5f:c1:5a:d8:65:29:8e:82:
cb:7b:13:17:43:39:07:9b:aa:47:e7:bc:d9:a5:b1:
4f:1b:78:62:9e:50:10:6b:a0:52:59:89:f9:7b:87:
43:63:19:e1:7b:91:e9:47:ec:2f:6d:2e:31:3d:43:
40:ab:b0:9d:2e:98:6d:5b:29:4b:52:72:1c:5d:5d:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:53:FA:C9:D2:80:E4:84:B2:56:9A:7F:FC:C1:2D:0D:64:21:78:DA
X509v3 Authority Key Identifier:
keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:80:bb:1e:fe:94:c9:bf:ec:a9:50:03:42:b9:39:ba:3a:4f:
4f:63:56:0a:11:fb:d3:a9:16:d8:41:be:bc:24:31:b3:87:97:
0f:b8:4a:94:a2:90:11:de:98:cf:a4:7e:0f:1d:f6:75:78:d2:
13:11:8e:b3:79:ea:f1:f6:6d:e6:0d:e4:eb:09:3c:04:e7:20:
04:8c:00:b1:fb:0e:57:32:a5:f5:4f:a0:96:ee:90:07:8c:75:
87:5f:a6:66:d4:98:4a:a7:04:50:67:df:c1:31:fd:44:bf:1a:
04:ac:51:34:dd:0c:94:9b:45:75:c0:bf:e3:59:72:b3:63:b5:
2e:75:89:a5:32:20:c1:58:bd:c6:6f:67:b3:2a:89:16:36:06:
29:b8:69:94:87:02:5a:94:40:9e:17:84:d5:6d:88:10:4e:dc:
76:b1:6a:12:c8:2c:0e:e1:aa:b3:b8:7f:a5:bd:cd:a3:e9:91:
bc:db:76:91:56:92:a2:b1:62:68:42:f1:d9:d9:75:b6:1e:fa:
30:db:7a:1b:ae:1a:ea:87:70:59:73:a1:74:c1:85:a3:60:46:
11:13:7a:0f:af:d7:53:09:69:8a:27:90:9b:46:ae:45:48:78:
6b:0e:10:dc:a8:3f:57:17:e6:0c:46:84:ad:87:e6:d4:9c:c9:
01:0a:7c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:48:23 2025 by rpki-client