Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: Kf0YRUVh4Os+0i7DZtHpyopzc9CJH/wuRsQ3IC/WZW0=
Subject key identifier: AC:F2:86:DC:00:50:49:4B:D2:3D:15:CF:31:61:5F:29:CC:0B:F9:67
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 0194BD4E88E94CAD8FDABF3A7FD11F221ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: 5yD7BMGOx_QxkEbApVWEDtAyJTc.roa (hash: 7HUgyfi698gsVlFHfeKtkaA7m5SlO3zRzjiuZrYZF5I=)
2: RqGemHASq4a3yEktWB8WjU_L-0c.roa (hash: vaorPMqPLbSGClI0kn7HOZCELp91/Z7k6rtXVGnH8yc=)
3: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: Rjy83PO22K8ERPMtO0ETZX9WyWBLoaYoxbYvP451J9g=)
4: ryABSBgMLByw-XFfZ_8SVzjoEH4.roa (hash: Qmf/YZ6xzpzD9CwzHR2N62ZnpRrAxDW7s9aRsiehW1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:88:e9:4c:ad:8f:da:bf:3a:7f:d1:1f:22:1a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=acf286dc0050494bd23d15cf31615f29cc0bf967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:0f:ad:e5:c7:d5:f5:3b:72:c5:aa:a6:0d:
2c:3a:17:2a:73:08:c7:e5:5b:1f:81:1e:16:5b:91:
93:54:03:94:5d:51:df:02:e0:31:af:48:80:82:fc:
13:f9:11:c2:a1:34:06:f4:77:8f:d5:93:de:12:98:
32:7b:cd:ab:ce:c7:eb:f5:75:23:23:a7:6d:52:38:
03:08:c5:c9:37:fb:1a:c3:46:25:fe:f5:34:ad:7e:
f0:d6:37:9c:c4:9b:e9:60:b6:60:88:70:a7:4b:69:
e4:b0:09:11:0a:ae:d6:52:e2:78:06:4a:c0:8e:98:
e6:5d:40:23:23:80:e1:4c:95:ee:3d:30:54:be:0b:
c3:9b:a8:c4:b8:a9:4b:f4:58:61:d6:7e:47:c1:8f:
6f:f3:45:ca:c9:4b:83:c1:da:af:ed:dc:d5:c9:db:
62:7b:bc:5c:13:a4:58:c7:06:9b:50:8d:c2:7c:84:
44:8a:8b:49:f0:1c:31:28:80:32:26:1f:34:62:08:
f3:30:dc:08:0e:47:26:b9:f0:9b:25:35:82:cf:6a:
64:dc:2f:5d:ed:99:4a:87:d5:45:47:d6:fe:4c:84:
8f:04:f0:59:72:42:95:86:61:25:1a:e8:bc:1d:e4:
88:de:ff:0b:d2:2d:6d:c9:f1:75:1b:ca:78:4a:37:
42:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F2:86:DC:00:50:49:4B:D2:3D:15:CF:31:61:5F:29:CC:0B:F9:67
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:50:ed:7a:00:21:e3:5b:eb:01:a7:d1:51:33:b7:5c:f5:fd:
47:eb:56:2a:7d:fc:fb:d9:c2:c0:27:0d:dd:25:21:4c:a5:e2:
35:2f:61:74:a4:a5:d8:f9:de:79:a9:38:12:80:02:05:0f:44:
3f:b1:a8:69:86:2f:78:36:74:6d:de:6f:66:76:7a:7c:cb:57:
8a:6c:51:23:7b:f1:6d:23:5e:dd:fe:6e:f7:2e:d4:2d:1b:ed:
89:4b:2e:c1:92:3a:0c:e1:cb:1c:90:2d:67:54:3c:bc:c6:92:
ac:59:5c:44:a3:ac:af:ed:a8:a9:93:7a:19:ea:16:40:65:0d:
6b:cc:68:50:82:8f:06:8a:91:fc:97:55:fc:97:87:82:04:0d:
bb:55:28:ff:78:89:4e:48:ab:1c:fc:b1:54:c8:95:41:8f:2e:
44:7d:45:b5:3d:41:d5:fb:30:70:9d:85:13:a0:fe:0f:ee:44:
b4:85:28:65:18:8f:a3:69:4c:33:a7:17:fe:63:4f:d3:1f:da:
80:1c:ad:be:67:ad:f3:e3:92:72:9e:08:8d:2d:7e:58:e7:11:
9e:ce:12:c9:e6:81:55:52:1b:79:f8:b8:48:0c:54:16:ca:91:
fa:5f:ee:72:0c:b5:e8:b8:7e:4e:e3:f3:68:9f:ba:d8:eb:31:
04:a0:07:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:25 2025 by rpki-client