Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
File: al1BD0JdNedNRW9_h7ro7ZKzyCk.mft (raw, json)
Hash identifier: 5KqOmxJnYxiLozGGcQHMR47AG0VPLU+y/fLccL3l5Ss=
Subject key identifier: 0A:A1:18:C6:28:3F:6C:C9:EE:68:6C:6A:77:37:3E:63:29:33:9F:A2
Authority key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
Certificate issuer: /CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Certificate serial: 0195DFD8FBEDDA0964AFA921831C8DAF1E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
Manifest number: 1453
Signing time: Sat 29 Mar 2025 03:01:33 +0000
Manifest this update: Sat 29 Mar 2025 03:01:33 +0000
Manifest next update: Sun 30 Mar 2025 03:01:33 +0000
Files and hashes: 1: YRcPB026UNAbaic7bC0XnagQJ_8.roa (hash: F5LbuOIZKUKKLsIhj9ecbNiDMJqNxgANq1yR2w3iRxE=)
2: al1BD0JdNedNRW9_h7ro7ZKzyCk.crl (hash: VzCE/zvyiIzJBcIUckOqQLRnvB0eL7h483XE4fnGmAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:fb:ed:da:09:64:af:a9:21:83:1c:8d:af:1e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Validity
Not Before: Mar 29 03:01:33 2025 GMT
Not After : Mar 30 03:01:33 2025 GMT
Subject: CN=0aa118c6283f6cc9ee686c6a77373e6329339fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:6d:63:40:f7:65:26:83:6a:36:fd:ff:67:
90:72:30:f7:9b:8d:78:e5:e0:56:32:d7:96:07:de:
2c:a6:6e:ee:30:f4:62:e8:df:81:d5:8e:68:24:1a:
df:95:f1:19:c3:51:21:fe:30:44:d9:4d:07:46:31:
19:ec:1a:5d:88:b0:8f:d9:4a:1c:3f:96:8c:02:3d:
07:fd:c8:ee:e1:d9:ec:f9:6f:76:89:d9:86:8f:61:
22:16:35:7f:ed:7c:73:e4:9a:cf:bb:77:a7:dc:9f:
95:20:ed:c3:b8:81:0f:f9:d3:d0:9a:b3:bd:76:eb:
ab:40:0a:f5:a8:04:17:06:3f:e7:3e:03:1b:b8:b6:
92:b7:83:bc:2a:cd:bd:4e:62:f5:6a:47:f4:aa:b5:
98:f7:55:06:c6:5d:f7:6f:4e:b3:5d:2a:0d:27:6a:
35:6c:f7:2b:14:a4:e2:b5:ae:e1:d7:c9:c2:f4:fb:
ec:65:4b:07:81:0d:d2:f0:30:73:19:7b:d9:ef:8a:
cc:17:69:19:79:bf:00:2d:08:bf:31:02:d6:95:00:
70:97:e6:9f:84:ca:d4:40:4a:cf:8e:2d:9d:56:ae:
69:82:52:b7:08:89:71:86:70:04:60:1c:13:6b:d5:
28:59:e9:bf:2f:5d:e0:3a:94:23:55:d4:5b:08:21:
56:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A1:18:C6:28:3F:6C:C9:EE:68:6C:6A:77:37:3E:63:29:33:9F:A2
X509v3 Authority Key Identifier:
keyid:6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6f:0b:3a:45:a6:78:c2:55:c8:f7:e2:4c:db:c9:2f:23:c5:
2b:0c:d4:8e:61:c6:35:a0:14:77:8e:12:87:49:50:1a:1a:c3:
98:bb:48:fb:67:78:ba:26:f7:fb:86:cc:8d:0d:97:31:e6:53:
21:23:83:09:a7:ab:b8:e8:50:1b:99:f0:05:9c:b1:b0:21:9e:
ab:1f:51:eb:60:24:87:48:4a:9d:03:3b:92:70:05:18:0a:87:
c8:34:7e:4d:81:81:a8:c1:cd:4d:ad:b2:6e:07:83:ef:6a:1a:
f4:88:4c:2b:7b:54:31:a1:65:0b:96:fe:c9:b1:25:3a:b7:7b:
25:2a:b8:e8:53:43:fe:a0:35:00:5a:66:0e:a4:ab:58:eb:8d:
65:90:4e:05:66:17:52:c5:45:c4:ea:3b:e2:2e:b8:1c:82:97:
fd:15:a2:55:9f:92:37:ea:26:0b:fc:40:88:ec:a5:c7:91:a4:
41:ea:24:8a:67:58:88:06:e9:29:3b:70:ee:a5:a8:0a:eb:89:
10:1b:63:8d:6d:98:c1:0f:48:86:5a:15:09:9d:20:b4:7b:27:
2d:17:d3:7e:e7:40:99:2a:79:9a:8e:ec:46:39:50:51:ac:f0:
b1:82:c8:fb:46:10:97:a9:71:e1:2a:56:17:16:f0:dd:c9:08:
21:79:b4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:56:25 2025 by rpki-client