Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/aCfcIhVE_HQhURKlgS3hlqKHLoY.mft
File: aCfcIhVE_HQhURKlgS3hlqKHLoY.mft (raw, json)
Hash identifier: j1EOe3xmYRVIW7XSh8vJ4Iu+N8Z+MMJWzlxUt03TeWE=
Subject key identifier: 6D:A5:1A:04:D9:6B:8F:28:6E:3E:6F:41:91:5B:49:47:22:0D:D4:35
Authority key identifier: 68:27:DC:22:15:44:FC:74:21:51:12:A5:81:2D:E1:96:A2:87:2E:86
Certificate issuer: /CN=6827dc221544fc74215112a5812de196a2872e86
Certificate serial: 019223432BE0A80BD642BE39242E3771BECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCfcIhVE_HQhURKlgS3hlqKHLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/aCfcIhVE_HQhURKlgS3hlqKHLoY.mft
Manifest number: 12D2
Signing time: Tue 24 Sep 2024 09:00:57 +0000
Manifest this update: Tue 24 Sep 2024 09:00:57 +0000
Manifest next update: Wed 25 Sep 2024 09:00:57 +0000
Files and hashes: 1: QrmyC4CIx2vv7Z-lUNdnjNCZypc.roa (hash: IKXQv/kemTMUqLb8i87zPHnPLw6tP7Q9dpNF+PZ6HJ0=)
2: aCfcIhVE_HQhURKlgS3hlqKHLoY.crl (hash: tTeTDpE6/90h/RLekQ7l5esrjsW91R2YgkVqhDeMAgA=)
3: uy4NeolDT3Z_TYfK4AqPHVghs80.roa (hash: NdtFxp/Qje0dV01Y2OmTYdMEdvNMs8FGTfM5ZLNP5mg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:23:43:2b:e0:a8:0b:d6:42:be:39:24:2e:37:71:be:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6827dc221544fc74215112a5812de196a2872e86
Validity
Not Before: Sep 24 09:00:57 2024 GMT
Not After : Sep 25 09:00:57 2024 GMT
Subject: CN=6da51a04d96b8f286e3e6f41915b4947220dd435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:38:48:d9:4d:80:ab:17:08:87:da:63:12:
d5:62:9d:4a:11:21:48:00:b9:3f:3f:6d:49:90:45:
57:43:05:04:1d:3b:12:1a:27:fe:04:ae:7d:07:e3:
53:62:f7:0f:e3:b1:a7:ff:d0:f1:3f:bc:3b:e1:24:
1a:09:da:1e:46:e9:5e:a6:de:d7:4c:7f:c5:ce:98:
cd:4e:52:e3:78:41:bd:d0:95:f1:d8:56:1b:3b:07:
ab:65:e0:f3:85:6d:4c:68:1a:13:5b:67:05:1c:82:
f0:48:a3:19:7b:3a:d0:31:3f:4b:d3:b9:17:5b:80:
e6:c6:46:91:c0:a8:a1:5b:84:29:22:dc:7e:3b:2d:
96:72:aa:28:c1:cf:e3:2b:e9:bc:bd:bc:a4:be:50:
18:40:e4:9a:b5:98:12:3b:a8:b9:f9:c3:ac:21:92:
03:5d:c3:31:43:ea:00:4f:33:f2:a2:aa:9c:c8:7d:
da:01:10:b1:5a:ce:a6:a3:4e:77:f8:be:1e:8f:0d:
0b:c4:45:35:58:5b:ad:a0:e5:8d:27:f3:10:8d:a1:
20:f6:7b:64:83:b4:eb:f9:75:ad:2a:d2:c4:45:dc:
5c:44:a8:3f:f4:e6:b6:c8:ec:12:04:7d:60:0a:89:
80:07:9f:50:bf:a4:2e:0e:fa:5b:7c:b5:8a:28:8f:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A5:1A:04:D9:6B:8F:28:6E:3E:6F:41:91:5B:49:47:22:0D:D4:35
X509v3 Authority Key Identifier:
keyid:68:27:DC:22:15:44:FC:74:21:51:12:A5:81:2D:E1:96:A2:87:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCfcIhVE_HQhURKlgS3hlqKHLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/aCfcIhVE_HQhURKlgS3hlqKHLoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fbf83-b28b-4d36-b118-eb1086075167/1/aCfcIhVE_HQhURKlgS3hlqKHLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bf:e8:c0:cf:2b:42:df:08:89:dd:ef:64:48:57:6c:eb:d0:
6d:1f:f8:83:71:be:79:f9:9e:54:06:bc:bf:99:5a:a8:28:40:
e9:69:b0:4b:4c:11:59:46:72:31:67:6b:27:27:43:83:9d:af:
27:e8:b7:db:7c:ac:9c:fb:ec:c5:a6:13:ec:cc:7b:9e:1e:e4:
a6:67:4e:5e:35:62:23:4e:0d:48:fd:7f:8a:b1:f2:94:94:f5:
4b:60:fe:4d:67:99:0f:f9:59:23:0d:72:66:3b:38:c9:8a:67:
67:c5:9c:71:92:33:01:65:78:18:82:46:29:02:39:2e:5d:56:
a5:52:ea:d0:d8:20:2b:09:aa:73:99:a7:bc:c6:61:a7:f5:15:
8c:1e:57:23:3a:96:a6:c9:40:1b:c7:ec:9b:7e:dd:f8:1d:98:
d0:ea:29:a6:00:d6:6c:cb:cd:08:4f:4a:66:5c:25:01:83:b5:
84:bb:91:9a:21:49:a4:87:58:fb:36:d8:7e:e5:14:74:00:73:
12:58:56:dc:21:25:a7:03:5a:c3:0a:46:17:0e:4e:cd:31:6d:
53:7d:9f:e1:6d:b4:5a:a1:da:0a:3d:4b:af:ce:c8:0b:21:03:
58:ba:b2:48:f9:aa:fe:6f:2d:e6:71:27:a8:c2:f8:f9:cd:c3:
1d:29:1f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:57 2025 by rpki-client