Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: nXC27Uh6RpCAGCNjNlgi5AVSF/vT64taMh9MKVuSj40=
Subject key identifier: C3:40:D2:51:23:23:BC:BD:A9:3C:48:1F:42:C1:CD:8E:33:34:4D:8A
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 0194BD8531DF9EE4B62897F44A214B517463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 1142
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: 0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa (hash: rLEoAgpILfeLseNAIpfgmASNTffHIHsRIbvYzKEOLhA=)
2: GoeAUL2QksRS16LiLx9M0SmG6h8.roa (hash: Lp7ZvoPe3FFQc8UoBl571bW941fIgYX0UUaKwSRXqLI=)
3: p9gQbHg8IpMtNLW0NQ42q_UAiDc.roa (hash: t3Lsla/WvydRj60ad7MeBwokpBl+kvF1NmkVZ9213jY=)
4: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: bhWBTP/HXaRASY4hq3nYeNqLh8Vjks0b8V0aMWxb4ek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:31:df:9e:e4:b6:28:97:f4:4a:21:4b:51:74:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=c340d2512323bcbda93c481f42c1cd8e33344d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:ae:63:33:05:09:98:ee:46:ed:45:3b:62:
5b:c6:99:ca:f5:3d:6d:83:88:79:c0:5a:7f:1a:48:
e9:e7:01:98:e5:80:df:aa:08:fb:83:3b:93:a8:e1:
b2:9c:b0:58:b4:c0:53:65:2b:27:02:fb:aa:7c:16:
8c:a7:e1:77:ca:e1:d0:0d:3a:f9:f6:8d:bc:33:05:
eb:22:7c:9e:1e:7b:7c:bc:28:d4:e5:b4:7a:08:f3:
6a:96:f4:18:15:1c:aa:9e:4f:56:ca:e9:f5:51:b5:
4c:17:74:97:97:a5:ba:1c:a8:0e:70:49:4e:04:7d:
79:1b:a8:23:d1:69:a3:3c:5f:e7:01:11:20:5f:dc:
c9:01:6c:01:50:7f:11:c2:23:b2:92:1f:63:4a:df:
cb:e9:41:a0:36:cc:cd:3a:05:d3:6b:27:2c:99:ee:
e4:f0:de:15:84:d0:7a:4e:2e:10:70:3a:ae:b7:bf:
3d:3f:2c:12:13:2d:04:10:6d:f4:59:62:66:85:e6:
51:ff:66:9a:a7:b0:65:f2:81:4c:96:67:c8:1c:15:
b4:ff:b8:dd:36:b6:b7:86:45:aa:5c:82:9b:54:dd:
84:71:8f:61:5e:e1:4f:09:44:41:f4:d9:79:b7:eb:
13:65:d4:96:96:2e:6b:b8:c0:7c:49:54:08:8c:43:
27:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:40:D2:51:23:23:BC:BD:A9:3C:48:1F:42:C1:CD:8E:33:34:4D:8A
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f1:e9:0a:ba:a3:4f:88:76:ac:5c:77:23:49:5e:65:16:85:
3c:69:be:ed:cc:26:28:fb:b5:11:2a:73:12:ee:db:be:cf:ba:
2d:d2:cd:d1:db:cc:4f:7a:55:90:2a:63:e0:38:e8:65:81:9c:
35:08:b1:c7:79:27:16:ee:10:b7:aa:9b:d4:68:0a:bd:e9:fb:
5d:c2:7e:c7:cb:b2:64:ec:cf:bf:e1:99:24:cd:b7:be:2a:de:
3f:20:7e:76:bc:a2:b6:51:d1:4c:53:db:09:3b:4a:58:68:55:
59:5b:f3:a8:42:05:19:3b:eb:8b:04:cb:33:be:36:be:c7:90:
36:45:d9:d6:de:56:1e:11:af:16:91:cc:09:ff:11:f7:63:fa:
3c:b2:2e:4e:7e:f3:32:b0:f4:45:5c:b3:bb:c2:d3:a9:6a:d5:
d6:ea:dd:f6:22:52:45:5e:9c:58:dd:4a:43:c1:0c:23:c8:de:
13:b2:cb:00:67:0c:77:28:42:54:f2:a3:35:c3:f9:0d:7f:dc:
48:e6:99:8c:e9:95:66:bf:ca:be:74:ea:e4:6e:d9:37:47:42:
c5:99:bd:23:40:9f:a8:0f:c2:34:f8:b8:69:e2:9b:f1:54:6f:
9f:14:46:03:32:16:91:43:ce:bc:ef:7d:3b:aa:75:64:07:53:
16:71:79:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:27 2025 by rpki-client