Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier: nUJZoAsRIW2hQFbZictimy2JdljSmsNfC7+FlUQJSiw=
Subject key identifier: 93:C1:C6:C9:89:C6:85:3F:44:D4:6E:4F:13:C7:11:B8:A4:EE:3C:05
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 0194BBCE5CC5DF7128165300842E85CD546F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number: 0C22
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: C8GJTtN7fk4YCqjJY8mOHTrefmE.roa (hash: UKesPOi4+5CzCQnG0snfHD/ZU73osDFB9OchjV8wo3E=)
2: eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa (hash: +YT5AumPRJxR5qeAOACvLYBXjcHMfp3cae2CLFa9pWo=)
3: pK186WjMEhCqpTApn72adWGJTc0.roa (hash: 2vPV6EcNoUKs6NmXfu/cqUoWqE3tnBkAH13PFqBjjPI=)
4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: 2OY3fyhgQ7e0IyuBzkJaMRvCVsVdIXit02k3dQjl9SM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5c:c5:df:71:28:16:53:00:84:2e:85:cd:54:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=93c1c6c989c6853f44d46e4f13c711b8a4ee3c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:34:10:6d:71:8a:16:f4:64:a6:e7:ac:b4:
74:ae:c1:c9:46:b9:6a:30:bf:96:d0:08:09:fd:e9:
72:af:49:06:23:12:c4:4a:d4:85:b0:cc:c1:d1:8e:
31:e2:ca:36:8b:41:4d:55:db:94:a6:50:67:93:34:
f8:a4:87:88:56:60:c1:c9:8f:ad:8a:38:b2:05:01:
d8:e3:d7:00:00:c8:66:89:c4:08:21:d4:c1:0c:ce:
c1:bb:2c:10:bf:22:d8:23:ba:a5:ca:fd:9e:ef:6c:
d0:5e:f9:be:de:aa:f2:44:4d:f6:58:a9:da:89:0b:
97:98:bd:cf:e5:9a:09:07:03:bb:ed:0a:5e:f1:45:
b2:b7:47:1f:cb:86:de:3f:04:ad:a5:6f:6c:f9:1c:
56:23:cf:ef:7d:af:f0:6c:62:5b:9f:b6:b4:62:27:
17:db:9e:87:65:7c:08:4e:18:e1:98:d4:d3:1c:d6:
f7:7a:21:31:ba:07:21:37:73:d5:f3:15:7c:32:e7:
bf:9a:b3:5d:97:94:af:a0:65:55:75:92:3c:d0:56:
4d:6e:6e:37:e8:76:5e:36:a3:dd:86:58:94:2c:09:
18:fb:6c:3b:7f:b6:6a:22:2c:25:0f:0e:b5:00:53:
fc:df:cb:bd:cf:62:ce:57:df:56:83:66:f7:a5:f3:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C1:C6:C9:89:C6:85:3F:44:D4:6E:4F:13:C7:11:B8:A4:EE:3C:05
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:98:e3:47:54:f5:60:88:52:25:af:d8:1c:0e:1a:08:31:fb:
16:67:ff:b6:8b:5d:36:e8:f8:75:aa:14:53:9a:fc:2c:7b:2d:
79:04:5d:d2:10:cd:97:c1:8b:57:8f:0c:ca:7d:23:ae:a1:c5:
e2:4f:30:e0:58:b2:96:48:e5:3e:d5:4e:39:dc:aa:5e:d0:86:
7d:28:5e:24:13:e3:c9:c7:b1:fe:73:eb:5a:3a:88:3f:65:b0:
45:e0:b6:f0:95:bb:4f:98:e9:6f:b7:9d:65:8f:2e:82:44:53:
b7:1d:f0:2d:18:20:a8:8f:dd:32:45:56:a0:99:46:dd:58:cb:
a6:ba:9b:a9:6c:1b:5d:22:d2:1e:50:4d:a1:35:cc:81:ea:14:
02:fb:1e:81:8f:6a:69:1e:74:24:9f:04:15:18:2c:38:e2:8d:
66:49:b1:8b:29:06:de:7d:ab:b8:a1:66:6b:64:70:f1:8f:62:
87:49:5a:05:99:af:e0:af:c0:e5:67:cd:09:2b:9e:1a:41:3a:
fe:76:14:9e:5f:ce:8d:5f:73:55:0a:df:dc:dc:84:c1:6f:dc:
fa:b9:ec:5e:d9:1d:fb:1a:fe:ce:37:06:86:f9:24:49:d1:82:
50:2f:8d:bf:66:36:4f:c9:a3:80:1a:41:00:f0:e6:53:80:86:
a0:9d:e0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:05 2025 by rpki-client