Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft
File: AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft (raw, json)
Hash identifier: 6jk2ECp8L+3xg7d090agLX0UpTDP6FpO2RTAzTk1jSk=
Subject key identifier: 66:A8:33:A7:72:B8:70:95:22:48:85:EC:28:07:FB:84:06:EB:64:DA
Authority key identifier: 00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7
Certificate issuer: /CN=0046801e45ca1eed3f78d99277d0193f576665c7
Certificate serial: 019710F9EA154782EBA04A57E66834075338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft
Manifest number: 0D79
Signing time: Tue 27 May 2025 09:01:43 +0000
Manifest this update: Tue 27 May 2025 09:01:43 +0000
Manifest next update: Wed 28 May 2025 09:01:43 +0000
Files and hashes: 1: AEaAHkXKHu0_eNmSd9AZP1dmZcc.crl (hash: zsVssnIRZU2oznhM2Gq0qg6NECtV/pok27MtFL72ydc=)
2: xiLGUGhf0T0iqyzSwJ-LQ5BF6Eo.roa (hash: YJzbP/5C/6ILVfg0WwaPWZ9SyS6RHby3juochsRhU0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:f9:ea:15:47:82:eb:a0:4a:57:e6:68:34:07:53:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0046801e45ca1eed3f78d99277d0193f576665c7
Validity
Not Before: May 27 09:01:43 2025 GMT
Not After : May 28 09:01:43 2025 GMT
Subject: CN=66a833a772b87095224885ec2807fb8406eb64da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:97:ba:a9:4e:13:44:71:4f:74:c0:6f:42:
e8:f0:32:85:ad:e2:90:22:70:ff:05:48:2a:6f:7d:
b9:aa:bf:2d:3a:b9:a1:a7:f3:5c:1d:19:0a:a4:83:
64:6f:ac:8c:c9:f1:e1:0b:be:75:20:ec:e2:69:a8:
e2:77:3b:18:63:3c:ca:ed:39:e6:1b:99:ad:5b:58:
22:10:68:ed:48:f7:05:97:4a:75:8d:41:f3:88:40:
a3:0c:08:4d:0b:5c:2e:bf:cc:07:c3:2e:b6:3e:07:
ec:bb:f1:86:bf:b2:05:9f:55:09:58:02:bc:e0:6e:
d2:c2:06:a2:93:bc:78:21:2e:0a:9b:4e:e8:f4:02:
ca:1b:79:ff:99:a8:4a:09:83:10:71:3b:60:7c:21:
51:c3:57:da:0a:c4:1f:f7:8c:15:99:11:1b:77:29:
7f:00:eb:cb:87:44:fc:e7:ce:30:05:de:94:b3:c3:
c1:c4:d7:dc:7f:22:3c:a1:1a:71:00:67:e0:43:7d:
99:b6:87:0c:5e:20:46:dc:d7:64:77:3a:7b:c4:52:
05:74:85:88:a7:5f:f3:4f:36:de:90:d1:bc:4b:1b:
6f:a5:b6:61:6f:9a:4c:22:c2:24:9a:f1:84:a9:e8:
9e:fd:ed:b9:05:9f:ce:a0:2e:1b:3c:7d:10:8d:c7:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A8:33:A7:72:B8:70:95:22:48:85:EC:28:07:FB:84:06:EB:64:DA
X509v3 Authority Key Identifier:
keyid:00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:85:be:66:75:57:88:1b:ce:d7:6c:8d:f0:47:2f:49:bf:03:
be:58:6c:a1:1d:c2:ab:fa:01:c4:f3:27:d8:1f:89:dd:e7:d0:
95:8e:39:35:ce:f3:9b:36:bb:0a:65:d0:d8:6b:8d:bc:ca:89:
1d:f2:1e:67:35:99:db:04:7d:03:2e:f1:52:e6:cb:35:75:7a:
af:72:f8:6b:8e:0e:a5:c6:52:32:39:cf:94:4d:27:4c:bd:df:
47:77:f8:56:94:20:66:7e:15:8b:6a:6c:c1:d3:f3:65:77:0c:
bd:ab:3e:db:52:30:9c:e7:f9:34:e4:bd:a0:39:a8:1c:1f:19:
9e:3f:0b:10:fe:cc:66:0e:25:a9:79:a3:18:a6:75:31:33:20:
cf:10:82:3d:28:23:f9:f4:ff:b7:59:c7:5a:49:73:c7:70:c9:
af:20:d0:e6:c2:af:2b:48:e6:1b:48:e4:81:8c:b5:a2:d8:e4:
6d:11:5e:b4:0c:89:24:9c:1b:25:07:17:a6:72:80:81:4e:2a:
32:e3:cb:2c:96:de:a3:0e:9b:cb:1c:5b:bf:07:91:f0:b3:3b:
20:7e:f8:6d:78:9e:33:f3:3c:10:e0:d9:8c:33:94:8c:aa:b2:
27:b1:81:2a:74:f0:9f:57:86:dd:45:cc:f9:e8:71:c4:b5:45:
c3:0b:dd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:57:54 2025 by rpki-client