Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json)
Hash identifier: XJJTcFZupoUIGq72DtEjbFbe1mSHl/M1FLJxC9dBMf8=
Subject key identifier: F6:0A:48:2E:D7:62:FD:7A:3A:93:0C:80:49:FE:8D:65:4D:98:6F:AF
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 0194BD856C7948D2506689AAA8D008A82856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
Manifest number: 0E5D
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: 0tIESyblj1X2dLuOI_4dwtIbAGk.roa (hash: idjfq2bjhi01HcCWKceI06Z11yPeDXaUk7WJO8YC8DA=)
2: LDYwe1NBsYCxalQKxYjYefq4U28.roa (hash: A79SQsvfOp/HRlekoSuQN9wqWVf3iQKedeaKaMrunx4=)
3: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: aYI6xmwM0CXu+3Di317unGXo4b47JEvlnGltO8jYMxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6c:79:48:d2:50:66:89:aa:a8:d0:08:a8:28:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=f60a482ed762fd7a3a930c8049fe8d654d986faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:46:8b:14:ca:a7:cd:c3:a8:18:eb:15:42:14:
51:7d:06:d3:5b:ae:7f:34:af:6d:94:8a:1f:b2:be:
95:6a:24:ca:78:1f:6e:c3:26:7e:21:22:0d:1e:8a:
c8:1f:ce:74:54:de:52:cd:1d:01:c8:12:6a:92:bb:
67:6c:16:65:09:ff:16:9d:c4:86:d5:a5:5c:ab:5d:
7f:2e:dc:e8:f1:5a:da:32:55:11:52:bc:62:ed:37:
9e:a5:69:54:d6:bc:e9:12:2f:67:89:e3:13:f0:a9:
19:a4:60:cd:91:0a:2a:06:05:0f:e2:06:13:73:81:
90:29:6c:a6:7e:cf:69:44:61:a7:05:4c:41:84:4f:
db:28:25:1f:cd:68:ff:e1:89:bc:24:4f:05:aa:8f:
4a:72:ed:fc:d0:a3:b3:7b:1e:8f:80:9c:18:92:75:
ab:c9:a4:24:b5:56:48:42:6a:4b:13:64:a2:45:40:
42:f7:32:fe:50:18:e1:1f:f8:6c:ba:d0:02:b0:1b:
28:8b:5d:b9:eb:22:83:2d:a3:94:ed:5e:34:6f:7a:
b8:65:ba:94:5f:71:40:f8:ce:c5:d2:4d:84:f1:49:
50:5d:52:b0:a3:44:9c:43:62:13:7d:46:46:e9:eb:
92:d8:09:4f:b6:44:ea:84:d2:0d:20:cf:30:53:0d:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0A:48:2E:D7:62:FD:7A:3A:93:0C:80:49:FE:8D:65:4D:98:6F:AF
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:31:6f:c0:a9:41:c2:b4:9f:b5:40:46:5c:b5:cb:e5:cb:3e:
e5:39:4b:ab:84:5f:7a:d0:cf:9e:99:9e:d2:8c:cf:f3:60:26:
69:41:3a:f7:f1:84:eb:c5:d4:13:b2:01:53:ff:66:c5:0c:11:
00:c6:c0:c5:6e:f8:17:70:98:81:15:d4:ca:55:95:67:2e:71:
87:f5:cd:e0:42:41:40:76:45:39:27:50:cb:d3:7c:94:15:c8:
83:54:17:4c:35:1e:8e:ca:67:3b:59:bb:81:ea:5d:10:cd:4a:
1b:5d:63:ee:f6:6e:4e:95:8e:82:b8:37:14:86:8a:af:70:2a:
cd:a0:54:96:25:7b:e7:40:ec:17:49:39:98:f4:3a:b0:63:9a:
0e:1d:0b:37:fa:f1:8c:88:7f:e6:d6:9b:0f:5a:0b:91:19:13:
05:e1:a0:17:c9:f0:f4:f3:2d:cb:a9:b4:d6:25:01:b9:7a:a0:
67:26:8d:aa:6e:6d:e2:2a:4a:65:b9:a1:ea:7c:6d:82:8b:8f:
55:84:61:f3:85:1d:dc:de:8b:65:bd:e0:5d:14:4d:b0:1c:45:
13:8d:f8:90:59:f8:65:f0:8a:46:06:5a:8e:22:3c:b5:1e:16:
49:a8:81:85:d7:18:5a:4b:e2:81:9f:21:91:35:51:74:e7:26:
db:26:b2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:09 2025 by rpki-client