Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
File: r7ALKTlueAM-26yv75hQsbDjUyM.mft (raw, json)
Hash identifier: uF+tbg7QSE+Iz6waUTLdbzdJQ9Xnv1SADuB6uqxkMKI=
Subject key identifier: 28:A1:84:B1:03:71:75:F8:79:9B:5F:8B:E9:47:E1:61:C3:E5:03:DB
Authority key identifier: AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
Certificate issuer: /CN=afb00b29396e78033edbacafef9850b1b0e35323
Certificate serial: 0194BD85A5A14FD00CCDA351C2DAA0C1AFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
Manifest number: 0CD8
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: CY3YIBeeXy7d304leRk_84B6aOw.roa (hash: a5cqctkZKmbgtiXrSitwhHqbpFExqVK4hQecaTEUPK8=)
2: r7ALKTlueAM-26yv75hQsbDjUyM.crl (hash: i7FohRAyUI87GsvcOCRCNYh+XyhzISB1Br3WyUDMTXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a5:a1:4f:d0:0c:cd:a3:51:c2:da:a0:c1:af:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb00b29396e78033edbacafef9850b1b0e35323
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=28a184b1037175f8799b5f8be947e161c3e503db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:9a:8a:a0:5f:4f:42:c5:97:5e:90:e0:eb:
e6:10:27:81:bb:3a:2e:e3:65:bd:9c:10:ad:2d:7e:
e8:bb:dd:ad:c5:46:2f:fd:8d:a6:46:24:90:34:7f:
f5:2d:74:fe:5e:fc:83:21:c1:11:ef:37:5c:77:6e:
6c:18:cd:4c:e1:94:9e:d7:02:49:5f:e2:18:c7:ce:
cb:f1:cc:6a:c1:d1:cc:cb:d6:ac:42:12:dc:95:5b:
b6:e0:e2:83:0c:69:28:df:ce:99:ff:dd:54:30:bd:
fa:8d:d1:28:ba:9e:04:14:0e:2f:14:67:d1:01:a0:
75:01:48:3c:a7:f4:67:0a:48:03:30:4d:44:90:5a:
8f:67:89:7b:26:b5:b1:13:40:c1:66:a3:84:e9:10:
6b:be:46:2d:94:d5:df:fe:34:3a:0e:5a:f9:26:35:
a2:76:9d:43:b5:3b:14:95:ab:76:37:28:e3:7f:04:
9c:34:4b:81:e4:8c:a0:65:96:80:32:f6:bc:7f:a8:
7b:8f:83:5c:dc:89:a5:28:12:89:eb:bb:6a:06:33:
67:5e:02:d9:e2:2f:2b:91:aa:1d:87:c3:a6:a5:65:
d1:82:fc:04:60:2f:0b:1b:30:d2:16:5e:16:d4:da:
73:1c:63:59:63:4c:28:b7:68:a2:fc:77:b1:9b:c1:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A1:84:B1:03:71:75:F8:79:9B:5F:8B:E9:47:E1:61:C3:E5:03:DB
X509v3 Authority Key Identifier:
keyid:AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d7:c5:fc:d8:4d:4b:52:39:3b:36:17:1e:8f:31:b5:7c:1a:
96:a9:cb:23:2f:78:a5:54:a1:7a:7b:b1:b4:d2:bd:a1:78:1b:
ba:f2:42:c9:8d:9b:05:8b:21:ce:03:0d:db:e9:31:80:ce:6e:
92:7e:cb:2c:24:c6:d5:c9:2e:19:b0:7e:f8:77:a3:34:a9:54:
6f:41:d1:48:18:46:67:d5:f1:6e:06:cc:c8:26:f4:67:94:5e:
02:2a:d1:d3:b5:e4:08:3c:0b:7c:02:d5:86:76:44:5c:bb:e9:
74:b5:ed:c0:94:4f:93:ee:d9:4a:c5:04:78:08:3d:09:41:96:
ab:41:85:11:1e:1c:5c:cd:22:4a:c2:77:d6:f3:49:97:28:71:
a0:da:54:ea:20:2b:4f:46:b2:20:e5:39:ac:3d:41:2f:e8:b7:
22:eb:6a:aa:69:5b:56:c1:55:f0:72:89:c0:0d:91:61:40:39:
4b:a8:38:a5:e9:ed:36:d8:84:5c:9e:98:aa:3d:23:cc:5b:39:
47:36:21:1e:19:20:0d:dd:ae:a8:35:11:8e:1d:cb:d8:5f:a6:
78:67:1c:81:0a:8f:80:4e:3f:76:54:08:b8:82:54:49:a6:3c:
88:3c:f8:7c:0b:4e:ee:1a:6b:92:a1:6d:d3:97:2f:a6:2b:a3:
5c:09:61:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:33:07 2025 by rpki-client