Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: p5NGgs/wEmTZqHRa7RnCnI1xLbdDnrPwWyORYmriFsU=
Subject key identifier: CA:68:84:51:F3:FA:4F:BE:BB:63:79:8F:0E:59:33:78:76:89:AD:47
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 0194BC3BEB5779A56566DC6C5840E86D68FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 0BE1
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: 25mILoXp0OOdl2rnLxiFEgTLBos.roa (hash: uQI0/c4okxi/fENqO0Cr333fQlKXmmFVWtIJpko2Z/I=)
2: OcEbn_XmC6O6gZW7SE3MnKGMWjc.roa (hash: Fe9Ge8j9ipTZxLe40zNMZ4cZEJGLX2F8Cq4Mb+IDII4=)
3: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: yR09H2M67a8XWBQCDx7Dsc2cedvH1Od1o/LceFzEzjg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:eb:57:79:a5:65:66:dc:6c:58:40:e8:6d:68:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=ca688451f3fa4fbebb63798f0e5933787689ad47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2d:7e:8a:09:3b:80:4b:44:f0:78:c1:a9:09:
a5:c5:f9:06:d2:87:84:16:90:a6:0b:77:d5:15:5d:
a1:5e:f1:66:38:76:70:bd:6e:e0:69:d7:f7:fc:fa:
d0:3a:fe:d4:f6:2d:80:f9:c2:ef:8b:93:68:8f:8a:
30:c4:ce:e0:c9:1a:cb:d7:43:d6:85:6c:a6:38:50:
9b:9b:e5:c4:22:33:e2:2e:fa:3d:87:15:19:71:1a:
c7:16:19:2a:ae:ba:4b:31:41:a3:be:bb:9c:c2:79:
d9:de:31:1a:5a:c0:3b:18:aa:63:f1:8b:f5:01:db:
d5:61:ba:54:18:79:7d:53:b6:7a:3b:98:90:91:3d:
0b:dd:8a:28:bd:15:04:ab:d7:b6:06:00:dc:83:30:
30:03:35:44:cd:df:de:57:f3:24:ec:9f:61:f3:2d:
89:48:22:82:b7:73:4f:77:76:a1:68:78:32:87:68:
eb:7b:1f:13:72:f5:a2:fd:6e:28:ae:f9:0b:64:cc:
14:b6:4d:d0:26:2f:2f:eb:12:c1:41:ed:15:33:d8:
1e:ba:ae:01:95:d5:1f:8c:94:a8:e0:f5:71:b9:65:
e1:d9:66:9a:e0:e1:2d:56:5c:20:80:ac:88:33:05:
24:90:3a:b7:9d:90:ed:a4:b7:f0:c8:a8:1e:9d:14:
53:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:68:84:51:F3:FA:4F:BE:BB:63:79:8F:0E:59:33:78:76:89:AD:47
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f5:69:7e:97:02:2f:53:f7:6d:2f:1e:fb:82:1f:3f:f9:f2:
22:ca:08:08:83:5a:c9:4e:8a:06:23:fb:8f:ed:56:1d:36:82:
5d:59:aa:97:2e:31:9b:80:7d:e3:f1:27:35:79:74:e6:3f:7d:
ab:3d:80:cd:b2:1e:5b:b3:c7:36:3d:3d:0d:7a:ac:03:cb:2e:
b6:f7:3a:0f:4d:1a:c6:88:4f:d3:4c:39:59:77:f9:81:91:fe:
24:aa:a1:8c:d1:95:1a:c4:df:d1:42:f0:98:6d:4a:75:66:74:
1f:ae:99:04:ca:66:78:e1:82:01:46:41:3a:8c:80:75:0d:82:
52:e7:44:66:34:50:e3:6d:10:63:72:b4:b3:2c:b4:60:52:3c:
21:7f:9b:53:6c:2e:95:93:c9:79:80:b8:4c:8f:cc:cb:2a:fc:
7d:ef:39:da:b5:94:66:fd:5d:29:59:11:91:12:11:37:7f:7a:
e4:ed:7d:dc:b3:7a:1e:3c:1e:dd:1c:a8:89:7b:48:95:1a:ed:
7d:4f:d5:e9:24:87:a7:64:7e:c1:36:73:fe:e4:5e:17:c1:b6:
36:c6:8f:9d:76:4d:6e:bf:44:c7:d7:37:75:37:19:39:c2:55:
6b:1a:49:34:b8:a9:50:a7:8a:69:78:14:6d:1e:69:1e:8d:ed:
34:cd:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:19 2025 by rpki-client