Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File: akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier: QfVPxHS95WLIcLrsw5bBCQIMCWziGIqFuI1OgkXFJwU=
Subject key identifier: F4:86:7A:B6:12:2F:B7:73:99:53:B2:7A:76:75:FB:4F:68:BF:E0:7E
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 0195E0B45B802579172BF94A863C064155B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number: 14C7
Signing time: Sat 29 Mar 2025 07:01:10 +0000
Manifest this update: Sat 29 Mar 2025 07:01:10 +0000
Manifest next update: Sun 30 Mar 2025 07:01:10 +0000
Files and hashes: 1: IlxKEGw87TqUrlXSxslSI0lrjjE.roa (hash: +CLpYYfyRr0d2PNSvpzNlqaJXb+7Xttv53KR3i0plz4=)
2: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: RgbJwUfGUJuxP5575q1xqfmdD8x7x6IdugAichk7wec=)
3: cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa (hash: 3r+iWy7gnItJRFxaUeqbAj9oWcBjP35GR/4lv1d2DLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:5b:80:25:79:17:2b:f9:4a:86:3c:06:41:55:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Mar 29 07:01:10 2025 GMT
Not After : Mar 30 07:01:10 2025 GMT
Subject: CN=f4867ab6122fb7739953b27a7675fb4f68bfe07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:e4:91:b3:69:42:9f:8d:2d:5d:ad:0f:b5:
3c:ea:14:76:01:a6:c8:15:f3:20:38:9a:71:a0:8f:
78:fb:0e:0e:30:1c:e9:95:5d:d7:38:1f:b4:2b:ee:
f0:a9:78:90:37:ab:cb:e7:f7:42:5b:79:73:1e:f9:
36:15:ce:d5:83:f4:0d:f8:cd:72:6c:bf:c7:d0:db:
e4:b9:47:df:86:7b:38:94:74:83:6a:e7:d3:e6:b0:
69:4b:a8:2e:fc:7f:bd:0a:dc:b7:6f:bf:cf:96:c4:
53:13:57:6a:d5:a9:17:6d:06:1e:af:0b:b6:ac:fa:
e5:d9:0a:6f:c7:f3:87:8a:c4:8e:5d:15:57:42:dc:
77:50:58:71:f8:2e:6b:6a:dd:03:29:39:f3:60:f7:
38:53:75:45:4f:6a:14:c3:eb:44:60:aa:31:d6:21:
84:51:cc:47:86:8f:ad:b9:04:cc:69:85:b9:48:4a:
41:90:eb:dd:8d:88:84:d1:1a:1c:36:68:97:3a:47:
c9:eb:33:60:8a:68:b4:16:23:b3:dd:9b:25:5c:44:
46:80:0b:3e:71:7d:72:e1:c7:54:ff:de:ac:0c:1e:
8d:3d:9d:12:1a:27:56:82:85:52:3b:d7:18:3b:d1:
c5:a0:c7:51:0c:bf:54:e4:fa:5d:5f:ed:ea:72:c0:
be:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:86:7A:B6:12:2F:B7:73:99:53:B2:7A:76:75:FB:4F:68:BF:E0:7E
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c2:95:68:a1:95:dc:9b:04:29:26:7b:10:bb:fc:80:75:c2:
2f:12:ea:b5:99:84:c2:52:c4:13:8c:a3:b0:ef:03:96:83:92:
a7:0e:d4:23:d4:b0:a4:f5:61:38:ce:e1:9e:af:9d:32:1b:bf:
2e:4f:6f:cd:00:1f:70:32:28:37:9e:94:a1:17:fc:5a:c5:8c:
37:65:32:6d:43:d8:d7:c7:5f:13:e7:46:38:33:3b:47:8b:9f:
b2:51:dc:b9:95:ee:3b:c6:aa:09:93:b8:13:7a:2d:95:18:c7:
58:04:75:13:f4:a3:94:e6:9e:12:6c:d3:22:d7:bf:3d:c5:f7:
10:d7:e1:96:3c:61:1a:98:39:1b:60:c3:25:74:af:ab:2f:03:
5d:25:09:f4:88:30:8b:aa:53:15:3f:ba:92:9f:61:a3:77:d0:
66:3d:63:a7:43:0e:b1:f3:0e:e0:71:7d:6e:f5:3c:7f:4c:09:
0a:01:35:65:18:c3:ff:34:84:73:fd:2b:20:c9:93:b0:a0:92:
9b:bf:ad:2a:22:7c:a2:10:bb:1c:fd:bf:a7:d5:a7:2c:ce:5a:
39:27:f8:92:10:1c:d8:1d:39:e4:49:b1:6d:1f:08:78:b2:f6:
97:5f:06:db:c5:05:e2:b0:35:3c:30:2c:aa:d0:af:58:95:5c:
65:de:1e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:10:40 2025 by rpki-client