Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
File: aO_MqEmPXSbBIK802EbAKB_2Ka8.mft (raw, json)
Hash identifier: nnilqvLd5eVyjlzE5316Ny/hD1QgBDDY01C7Csibffw=
Subject key identifier: 36:FB:BD:68:8E:0B:A6:7C:D6:63:EB:36:B4:67:BA:1B:3A:23:D2:42
Authority key identifier: 68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
Certificate issuer: /CN=68efcca8498f5d26c120af34d846c0281ff629af
Certificate serial: 0195E00F4FA9C3612FE1888382454D311E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
Manifest number: 0F30
Signing time: Sat 29 Mar 2025 04:00:54 +0000
Manifest this update: Sat 29 Mar 2025 04:00:54 +0000
Manifest next update: Sun 30 Mar 2025 04:00:54 +0000
Files and hashes: 1: aO_MqEmPXSbBIK802EbAKB_2Ka8.crl (hash: /K8cZvsqt7pb5H3xt/QvTRzm0wWVpRTmYPShoUxNlx8=)
2: bz3fbBHm2ElR6vxL1-cqQoSLlk8.roa (hash: iWv2k5/cNl7lJrUkdCeVYiFcY+HPf8sJg4JbV1Gwcrc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:4f:a9:c3:61:2f:e1:88:83:82:45:4d:31:1e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68efcca8498f5d26c120af34d846c0281ff629af
Validity
Not Before: Mar 29 04:00:54 2025 GMT
Not After : Mar 30 04:00:54 2025 GMT
Subject: CN=36fbbd688e0ba67cd663eb36b467ba1b3a23d242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:69:21:74:43:98:96:e9:d8:11:67:6d:3b:4a:
12:8a:ae:85:ac:c6:f5:0f:c1:3d:a5:0b:dd:7b:37:
e4:33:e3:48:eb:bc:86:a3:fe:24:29:6a:47:02:87:
84:1c:7d:a2:17:e5:bc:7a:d0:5b:6d:ca:3b:24:50:
08:da:23:66:ca:11:43:96:4f:02:50:ed:cc:2d:92:
c0:17:28:71:07:00:81:a1:0d:65:42:66:a2:26:b6:
f1:ea:5c:ea:f8:60:a0:f8:8b:23:1c:6a:5a:fd:27:
13:97:01:5b:f8:f1:2d:19:4a:31:ef:45:80:4f:49:
35:ac:4a:c0:44:d8:68:49:89:0a:1d:bd:01:d7:82:
8c:21:68:b9:5f:d4:57:86:9d:a5:da:11:6e:64:65:
b9:11:9d:e6:cc:30:89:98:b0:b4:4d:b4:2e:5e:e0:
4d:77:30:9a:49:e8:57:51:a8:d0:03:60:3c:9f:2e:
3b:4b:a0:b8:4b:ee:81:6e:86:d2:be:92:aa:8f:5d:
3e:0a:b0:80:16:f2:14:1b:cf:57:e0:31:95:8f:f0:
91:9e:18:ab:99:26:00:7f:ed:e3:31:33:71:ec:64:
31:05:d6:ba:12:44:47:28:85:85:ba:bc:20:bf:07:
27:03:57:04:f7:83:5a:7f:57:32:9e:26:39:6b:3f:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FB:BD:68:8E:0B:A6:7C:D6:63:EB:36:B4:67:BA:1B:3A:23:D2:42
X509v3 Authority Key Identifier:
keyid:68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:21:09:bb:f9:99:ad:e5:82:dc:2d:82:1a:4f:68:ef:79:fe:
64:39:5b:c9:6e:38:65:7f:ff:20:29:85:53:94:aa:20:e7:ed:
70:60:14:19:55:e9:63:b2:41:fa:65:95:57:1c:17:a7:6a:a1:
e7:58:72:28:d4:b5:2b:4d:26:1d:3c:a6:d8:4d:aa:98:98:0a:
d9:c9:0f:12:3d:51:7c:4c:ec:8d:83:00:23:c9:df:75:22:1e:
1a:af:98:45:6a:48:6e:ba:03:ce:ca:81:af:bb:53:f5:18:10:
15:7e:3c:a2:41:f5:3a:b3:58:c4:e9:cf:b3:3f:9c:eb:1b:b2:
e0:b4:a4:c7:e7:5f:00:d4:ac:c4:ac:4c:0a:54:19:35:3a:ad:
06:ef:ec:76:d3:7e:56:21:f4:e5:1e:fe:96:2b:f6:95:5d:50:
df:c2:ad:c4:42:43:01:30:a5:ac:b9:d7:d6:87:4c:0e:4e:a2:
e2:c3:5b:f7:66:69:fe:98:27:f8:3b:46:82:d8:9c:4d:91:a1:
e2:f8:7d:48:19:02:16:20:4f:d2:3f:3f:8e:3a:fd:ce:6e:71:
9e:e7:eb:7a:5a:bd:07:25:a9:46:18:fc:fa:4f:ba:65:9d:0b:
d3:24:44:ae:1e:58:ac:4c:1b:67:9d:fd:76:a9:5c:f0:e6:d8:
7c:58:43:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:19:44 2025 by rpki-client