Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
File: aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft (raw, json)
Hash identifier: 8Vr5ZNpbU17cgSts/Sz0Zdaq5U3gx+YJ+3V91ppU+Xo=
Subject key identifier: B9:DF:39:4E:D3:68:4C:F4:C9:60:C1:6A:4C:EC:97:E4:81:45:2F:F3
Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Certificate serial: 0194BD17F22473813AF985DFFE3DD3F0BCF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
Manifest number: 0395
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: AJ5wMI6kFAAGgXfPHZAVtLCSnP8.roa (hash: O5F5OKdgmFhYvl6NemyAslo9muG5v3CdZb38avB1q8I=)
2: aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl (hash: n3vaZkHoGHscSt+E69I7AVBDUtUWokqV9uDCD11XaG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f2:24:73:81:3a:f9:85:df:fe:3d:d3:f0:bc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=b9df394ed3684cf4c960c16a4cec97e481452ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:60:0a:f2:5a:34:4a:0f:19:71:25:23:ee:
75:94:6d:68:a2:41:84:43:6b:15:72:1b:f5:50:4a:
69:00:7c:2e:f2:99:ff:a1:c5:64:58:8e:af:10:be:
dd:5d:a2:79:67:c0:f5:95:39:ff:a4:10:e2:03:b5:
9d:0a:ac:f2:4d:34:e3:b3:c4:ef:6f:e6:d1:b2:2b:
a5:f3:ca:b6:4e:54:23:d8:44:c5:8f:21:b9:ae:f0:
62:42:d0:0a:e1:31:e2:ad:c9:37:95:83:9a:63:5e:
f9:49:72:1e:25:f9:b3:ec:85:b6:89:ee:45:c6:24:
e9:48:98:e0:68:44:62:6e:05:4f:d9:dc:05:ab:4c:
0f:91:28:26:2f:5d:cc:0b:88:25:ec:e4:99:e2:21:
52:cf:97:ad:06:10:ab:d3:07:7b:5a:a6:53:f3:f6:
58:61:ff:0c:58:ab:3a:ba:53:cf:69:4d:a1:c8:57:
b5:55:e9:3d:c0:07:7e:7f:67:d7:ac:bc:27:44:81:
ec:40:ee:03:12:5f:47:49:90:70:55:2a:09:12:d8:
0b:2f:bb:37:6c:ad:60:80:cd:38:67:06:fe:d3:93:
1d:c8:f5:e3:72:b9:ba:3c:0e:60:30:fa:40:34:bc:
0b:00:b8:bc:a8:e2:6a:7d:83:b6:77:34:ff:94:7e:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DF:39:4E:D3:68:4C:F4:C9:60:C1:6A:4C:EC:97:E4:81:45:2F:F3
X509v3 Authority Key Identifier:
keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:57:71:ef:d5:a7:27:ef:28:a1:97:35:4d:d8:7a:28:ee:d6:
d7:21:58:81:19:fe:e2:c7:82:0e:a4:a9:dd:a4:06:00:04:78:
29:7f:73:a0:95:51:44:90:1c:73:8a:d9:6f:f9:01:76:0f:5e:
bb:55:69:0b:1d:06:aa:24:dd:21:1b:0a:92:13:af:f2:8d:88:
17:eb:db:03:37:b6:53:87:26:4d:35:84:f4:a6:ed:98:e6:62:
da:d7:e2:21:4a:6f:58:5a:d2:f6:4d:95:cc:a3:62:55:eb:36:
04:ba:21:c1:8f:a8:a7:2f:d9:4a:e7:b9:99:38:92:01:01:fd:
5f:ef:ba:46:6b:14:f3:d4:70:63:d9:67:de:20:5f:3a:c7:a2:
37:0c:e3:2b:4d:89:ad:ff:77:22:03:89:4f:82:22:32:ca:f3:
4c:2c:a1:a9:87:22:22:28:1b:30:a7:d7:14:58:6c:11:09:c7:
a5:af:00:31:cb:a5:57:f4:5f:2d:83:df:38:94:fc:7c:69:f7:
90:75:54:fb:a5:98:be:a6:4d:78:d9:e8:5d:be:9b:c4:bb:b8:
cb:40:51:49:70:9a:c8:23:69:2c:c0:1c:8c:b5:8d:e5:56:24:
4e:43:81:da:f6:52:30:d7:42:eb:87:be:80:65:ec:e2:6c:d0:
cc:7c:55:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:41 2025 by rpki-client