Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
File: r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft (raw, json)
Hash identifier: p/PJ70AGFfZRorf9rkVZyWiRWmS0o5hssKczlyyuvOA=
Subject key identifier: 61:67:7C:31:A9:00:CD:B3:E2:0D:66:F0:09:CE:C0:42:2E:80:B5:83
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 0194BCE0C30A067C2F67C31EA81C34CBD107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
Manifest number: 084E
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: 1-QcSYLdpveuStLYqlBunMp4JJ5g.roa (hash: NQizYlwEjERl0X/bxZE2nkkRnRTSix4QkB1fVvIKAMg=)
2: 919zV4Y9DazNzxZ8240IKYUxVZg.roa (hash: SgKOoYJQQGxdCU9fxEK7dNUsdZIPS3r//BxGFPu0GyQ=)
3: N77-Ng3AFH6-1aHCnMlAcN-LAHU.roa (hash: kLrijD9G/R0cMvtLz3nwtkgshfFFxhgBoeVfEmhz0ZI=)
4: gnkHs-huFz_Mv1gh2f--oMoTlbI.roa (hash: cAkEhiie/5ypOg0o3pr7TFLqNT0IK1/cxJALcW2pMbg=)
5: njDEZbySu24l3-7pqiEP7cKTkYk.roa (hash: sJSOzcEBtzhJa/6Rsm70KNeiGLuydqUWSSlaAXnP8xU=)
6: r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl (hash: dhtgtwb4RcYYX4LY0bFmP24K5snhnNsFx3fUtujsltM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c3:0a:06:7c:2f:67:c3:1e:a8:1c:34:cb:d1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=61677c31a900cdb3e20d66f009cec0422e80b583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:9f:aa:cf:51:20:6b:34:24:a8:62:a5:51:
b9:70:fe:f1:e0:ab:58:f1:37:39:0b:3a:f8:70:29:
6e:b8:45:9f:3b:e2:05:61:f0:a6:59:73:68:f2:c3:
1f:1f:5d:df:5f:08:6e:3a:d6:48:ad:28:16:f4:db:
b2:ad:24:95:d5:60:6e:7d:60:ef:44:11:03:d2:0b:
29:06:db:b2:b6:49:75:d3:56:93:cb:fa:f8:b9:34:
3d:e5:14:64:5f:2e:c8:fc:36:60:25:16:be:e3:93:
8b:18:8c:f4:11:34:16:11:ae:41:68:06:20:f3:8a:
03:97:77:05:84:34:99:a0:63:7d:1d:e5:b1:2b:c4:
8c:e5:a1:f2:66:39:a1:54:19:08:b3:09:70:6c:75:
42:dc:46:af:5c:79:c9:10:ac:0d:00:aa:0c:99:41:
95:58:6d:fd:08:2e:1b:4d:f3:ef:03:10:4b:4e:53:
f6:61:a2:13:3d:b8:3f:9c:f4:f2:57:eb:7a:91:44:
bf:fe:ee:57:9d:26:ba:fc:2f:95:16:4b:1d:56:cd:
cc:82:8c:73:38:b3:57:3b:58:35:eb:cd:8c:b4:b7:
88:ff:cc:51:8e:40:42:ad:97:97:10:36:34:b0:fe:
1a:b6:c2:df:73:30:7a:cc:ac:3f:23:23:70:ea:f9:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:67:7C:31:A9:00:CD:B3:E2:0D:66:F0:09:CE:C0:42:2E:80:B5:83
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:cf:98:29:09:7a:6f:3e:2d:d7:4e:95:ff:61:5b:de:35:19:
a5:02:09:85:15:9a:0f:e9:4e:94:64:c9:33:93:d1:11:05:59:
94:73:62:cb:48:e6:a5:a5:4e:a5:92:9f:05:a4:e5:ac:ea:7b:
3b:4c:12:94:ad:1b:bb:80:c4:08:c4:5c:53:56:56:c0:40:58:
bc:5c:63:fe:be:5d:f4:45:56:60:d8:18:e7:4b:e4:70:b2:06:
f3:2a:8f:c7:3a:9e:85:07:cf:50:a7:c3:c0:94:f2:d7:16:7b:
a0:45:17:70:cb:89:83:03:66:b3:75:ea:91:51:ee:01:8a:a2:
ef:9d:4a:22:b6:84:05:4c:db:96:a4:9b:00:7e:2e:19:70:02:
84:9a:aa:a0:11:0d:a6:6d:ed:69:cd:0e:a1:8a:11:4d:06:cc:
d3:b3:44:ea:08:17:dc:c5:c8:62:32:21:2e:f1:48:fe:07:6e:
a2:f3:77:ea:e3:48:ea:6d:3a:9e:c6:07:19:74:6b:48:7f:b3:
9e:a0:a3:73:ea:60:b4:e5:67:e4:3c:8d:43:53:26:b7:ba:81:
6c:5a:fe:99:84:93:36:02:62:d0:e3:21:0c:75:3d:20:97:bb:
32:54:9e:70:e4:66:39:c8:ef:55:dd:42:01:c1:16:06:f1:aa:
14:83:8c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:35 2025 by rpki-client