Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1b167b-186f-4851-a99e-0838a26339ad/1/aaIsFMI-_LRqRkd8bqnheSLvRk4.mft
File: aaIsFMI-_LRqRkd8bqnheSLvRk4.mft (raw, json)
Hash identifier: 6+oX/E7dLtukgqpsV07YK0OXicSw0y/gCXhJlaAKqJM=
Subject key identifier: 2A:2E:B2:00:7A:8A:4B:A5:8A:3F:41:71:6D:A2:AC:A2:58:64:67:F0
Authority key identifier: 69:A2:2C:14:C2:3E:FC:B4:6A:46:47:7C:6E:A9:E1:79:22:EF:46:4E
Certificate issuer: /CN=69a22c14c23efcb46a46477c6ea9e17922ef464e
Certificate serial: 01874673A9E1A86D32CC65992911882D955C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaIsFMI-_LRqRkd8bqnheSLvRk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1b167b-186f-4851-a99e-0838a26339ad/1/aaIsFMI-_LRqRkd8bqnheSLvRk4.mft
Manifest number: 0D07
Signing time: Mon 03 Apr 2023 09:29:57 +0000
Manifest this update: Mon 03 Apr 2023 09:29:57 +0000
Manifest next update: Tue 04 Apr 2023 09:29:57 +0000
Files and hashes: 1: 7Sb6FEE6a6RIo3Z8EQF7T8LcWpU.roa (hash: Ed3jAY0bXN8xTEDfkW2Rrh2cXwaiNPgRxlgPR3Ixs50=)
2: aaIsFMI-_LRqRkd8bqnheSLvRk4.crl (hash: a8JaCw1A8hBWQbhBwNid5vTKi+kDe0jqdjms8MQJVSc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:73:a9:e1:a8:6d:32:cc:65:99:29:11:88:2d:95:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a22c14c23efcb46a46477c6ea9e17922ef464e
Validity
Not Before: Apr 3 09:29:57 2023 GMT
Not After : Apr 4 09:29:57 2023 GMT
Subject: CN=2a2eb2007a8a4ba58a3f41716da2aca2586467f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:0f:3f:e8:bd:30:10:04:bd:2a:65:e7:53:
6a:c5:4b:b6:3a:1a:47:3b:68:ea:c3:06:f7:a9:2b:
e7:7c:d5:31:ca:4c:d8:22:6b:6d:7d:b2:1b:d9:98:
c8:08:31:19:d5:ed:c2:56:12:10:ed:86:7c:2c:6f:
0b:22:f7:d2:c3:d5:99:2a:b5:29:25:72:17:8c:8e:
55:9b:24:1d:88:ca:f7:40:6d:30:c9:07:cc:51:be:
de:5b:ce:f1:a5:f8:a7:f3:33:90:51:db:34:00:15:
a7:24:12:c8:1a:6e:83:9f:bf:1e:d6:90:f5:f4:ed:
06:3f:19:08:47:3a:e1:e5:45:02:ba:12:04:b2:9b:
b0:bf:b3:f4:2c:9d:b5:c1:b1:e8:ec:5e:f1:5b:8b:
66:6c:65:54:f4:b7:2b:9c:df:87:ee:27:5a:57:7d:
d8:d2:8b:59:7a:40:50:35:40:a5:b4:4c:c4:88:8e:
4e:6f:c6:bd:ef:70:c1:f1:7a:90:1d:c5:4f:18:47:
52:a6:ac:65:a4:42:20:6e:f0:09:36:c4:e4:2a:a5:
c2:d4:1b:0f:71:be:70:b5:74:d0:18:ba:0a:7b:a4:
8b:67:43:d5:c9:e5:ba:35:b7:13:4c:6f:e9:b6:b6:
7c:f3:f6:46:c4:00:74:66:bd:b2:0d:48:f4:5c:b4:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2E:B2:00:7A:8A:4B:A5:8A:3F:41:71:6D:A2:AC:A2:58:64:67:F0
X509v3 Authority Key Identifier:
keyid:69:A2:2C:14:C2:3E:FC:B4:6A:46:47:7C:6E:A9:E1:79:22:EF:46:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaIsFMI-_LRqRkd8bqnheSLvRk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1b167b-186f-4851-a99e-0838a26339ad/1/aaIsFMI-_LRqRkd8bqnheSLvRk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1b167b-186f-4851-a99e-0838a26339ad/1/aaIsFMI-_LRqRkd8bqnheSLvRk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8b:c3:f1:6a:7c:8f:ff:97:42:e2:14:06:ce:e1:49:58:38:
f6:ea:dc:65:a4:e2:a8:3e:4b:6f:9f:90:c6:05:de:b9:f4:8d:
08:54:41:c1:03:5b:4f:8b:27:5d:ec:3b:f7:dc:13:21:b2:9d:
68:56:35:93:f0:7f:ba:d0:45:73:16:6b:3b:48:da:8c:28:f4:
4f:2f:a8:43:0c:59:30:43:6c:ad:d7:c7:e7:49:4f:e9:7b:fb:
e0:3e:e0:fb:df:75:95:3b:68:e2:1c:35:97:15:f9:cc:33:ee:
64:54:c4:c2:55:aa:60:4d:95:80:2f:e2:f6:e8:16:6f:42:96:
6a:bb:c1:8a:2f:59:6d:f2:cc:50:65:71:32:19:c6:f2:bb:93:
0b:11:df:74:43:53:11:3f:2b:18:e2:50:ef:95:29:9f:3f:a8:
f3:6e:1b:ac:1f:36:65:3b:c3:87:96:69:61:33:1b:13:50:7b:
35:89:20:33:14:df:0f:1c:de:15:03:3d:ef:9b:3b:2a:9c:cf:
7b:aa:d9:88:25:9b:bb:83:bd:1a:64:ce:fe:14:95:eb:77:86:
91:82:c2:18:cf:d7:4e:78:1a:ec:71:28:93:eb:41:e8:4a:66:
3b:9d:a5:a0:d1:83:0e:d7:8f:77:16:99:5c:b9:a7:53:d5:7b:
64:c5:65:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:27:46 2025 by rpki-client