Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
File: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json)
Hash identifier: GiljZuwQdNqAeJvY3Z2iZRbRq5BtB4kTr/6zl+qiet0=
Subject key identifier: 53:1B:F8:FE:2B:E0:3F:78:46:AD:89:E2:3F:E2:52:5D:3B:DC:CA:AF
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 0195DFD959EB3F2A35AA1F4A10DBF2124E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
Manifest number: 14CD
Signing time: Sat 29 Mar 2025 03:01:58 +0000
Manifest this update: Sat 29 Mar 2025 03:01:58 +0000
Manifest next update: Sun 30 Mar 2025 03:01:58 +0000
Files and hashes: 1: 2MTpcYnM1k7_eZxG4JM1vyDTgyk.roa (hash: ymmdwaUbb6XKWmKTfQm4pWw8ouzRa7gwqokbxv+gmWU=)
2: 3CW8ZrBicXZ-3Xo2rFwfHtSekAs.roa (hash: 7ay6ExNqGjacU7HN/bzX0dJI8r/LlyrNhedhAiFT9ik=)
3: 4MiALt5VQvZmZRNJbgiFndSZM4w.roa (hash: GJAf7lhefseebsxtLfvA2JkOrit3YnALqwfo2sORCvw=)
4: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: W9qRNFzslYkLN7NS4d2+2msn3NFd+KfxASaX1gLk69k=)
5: Woo9uQ4ucTRYjMh9ah88cw5clxk.roa (hash: WrdAqZeK7ES2+LIoGcfX11G6G4YXGyd2qn4CZO/jQsA=)
6: Xih-EfVQ2lODpeM1Ya_8fjlb3e0.roa (hash: l4FttRaMYnWfbRGN1GiO7VFVJgCvU1nAC+1h/ttWafI=)
7: Z2PHW8LvacSdhO2HpcioR4D6P_g.roa (hash: kHWtIvwFttg31Y3IHOia+gnD127BKytZFvvHo2JKuAw=)
8: gbjyDe1jMzAx-GtGqvOl5rcNw2Y.roa (hash: bZY4frDqpa0VtHIgDLvz2UTVVluMMplhW24wn9Ofe38=)
9: kSocueKI3xqrxYrVlgp46XPJhoY.roa (hash: 38MoDqAostLgesLzGLlzSF6QuxV0tRHQ2WgTUcouUvI=)
10: zDn6BG65-N44C0uDlJe3RzkiUTs.roa (hash: EM6Uwy/Us+r0AtgVlMQcbmCbt0K/tS3jHqszI1mZVYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:59:eb:3f:2a:35:aa:1f:4a:10:db:f2:12:4e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Mar 29 03:01:58 2025 GMT
Not After : Mar 30 03:01:58 2025 GMT
Subject: CN=531bf8fe2be03f7846ad89e23fe2525d3bdccaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:49:f6:cf:d4:69:a1:6b:31:79:15:41:7c:
97:03:c9:c2:20:8a:da:53:7a:46:d3:85:8f:04:1a:
b1:f6:93:a6:82:90:b8:70:52:b3:63:52:05:b3:a1:
72:78:d2:6f:e9:4b:05:38:c8:b1:e1:11:d3:4f:91:
57:e2:a9:b3:6d:4c:d2:9b:f7:47:7a:22:71:ae:aa:
5b:71:ad:ac:5e:2a:9c:7c:e4:2d:44:ad:3c:4c:c3:
ba:de:1d:e5:e6:4c:e3:72:8c:57:c3:25:57:9c:ec:
6d:8c:24:74:12:ab:3b:8f:b4:a5:7b:a4:c0:38:de:
87:51:35:01:29:27:e5:ad:d5:73:c7:6b:d1:25:03:
bc:86:e2:00:1d:d4:80:1a:44:2b:a8:d7:29:92:89:
16:e1:e8:f6:d7:a2:58:69:bc:63:70:b2:fa:46:d8:
46:d8:c8:53:cf:6a:ac:bf:cc:b8:29:6e:b1:6b:54:
a4:46:ab:f1:1a:6f:30:bb:50:f3:8b:6a:14:66:44:
e0:9e:1b:98:0c:43:ff:62:6e:e5:1b:72:3d:fb:19:
ae:af:e8:5f:f8:f0:69:c4:62:77:c3:e2:e3:c9:bd:
e8:c3:7b:67:e0:58:ec:d1:14:49:77:c6:9e:e9:74:
3c:51:f5:4c:58:03:26:57:22:a9:61:cd:fe:1c:ef:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1B:F8:FE:2B:E0:3F:78:46:AD:89:E2:3F:E2:52:5D:3B:DC:CA:AF
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:32:5d:56:c5:76:3c:59:dc:40:fd:75:3e:3b:3c:04:19:6a:
6c:a1:60:c6:79:40:dc:37:a7:d4:7a:ac:28:cc:80:16:57:7b:
1f:b9:b0:22:e3:b4:11:16:31:ce:e5:ba:22:26:fc:cc:a7:91:
4f:46:7b:51:d3:83:57:91:51:84:13:c3:ad:f1:b1:a0:2b:a3:
b2:7f:0c:4e:db:82:3e:fe:85:eb:39:5d:f4:49:14:b2:23:36:
4d:5a:b7:72:51:49:f5:84:bb:d7:df:2f:17:9d:5f:b9:1d:7c:
80:4e:f2:f9:fe:7b:fe:eb:1c:a1:a7:ec:a0:70:ba:14:29:24:
e8:eb:7f:58:df:d6:4d:21:bc:5f:7c:a6:23:e7:54:2c:ac:ac:
a6:55:e8:fb:50:e8:43:0b:a5:f7:b0:f7:4b:d9:9f:a1:f2:6f:
e8:a4:9b:41:c7:69:f8:e0:d6:93:a6:54:8d:9a:09:85:78:20:
19:75:e1:89:b2:78:3c:35:c8:c4:55:24:0d:bf:14:fc:80:15:
8a:38:71:1f:ae:8f:56:98:f2:04:f2:f3:52:ea:6a:9b:01:95:
3a:7b:9d:4a:27:a7:48:66:67:04:9d:59:5a:1a:59:6a:9f:a4:
6f:01:24:f3:7d:1b:46:06:4e:2d:17:cf:fe:7d:e9:7b:fe:90:
cc:5f:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:11:19 2025 by rpki-client