Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: Rh24ZMGok0i7wrk68Ov2rXy1aO3vQGaBy70FwO2GQSg=
Subject key identifier: D4:37:98:27:71:2C:14:38:C2:A2:22:13:28:E3:AE:9F:69:4D:9D:7F
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 0195DFD8BC1C05374EAB618E389DF9C5C822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 061F
Signing time: Sat 29 Mar 2025 03:01:17 +0000
Manifest this update: Sat 29 Mar 2025 03:01:17 +0000
Manifest next update: Sun 30 Mar 2025 03:01:17 +0000
Files and hashes: 1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: 8vrWiAWhFyhI2hNIjxe/tSJ/gL6qQ1OWMFZCL09XcVg=)
3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:bc:1c:05:37:4e:ab:61:8e:38:9d:f9:c5:c8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Mar 29 03:01:17 2025 GMT
Not After : Mar 30 03:01:17 2025 GMT
Subject: CN=d4379827712c1438c2a2221328e3ae9f694d9d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:47:61:96:80:27:1b:52:f4:27:04:06:65:
e1:06:20:e3:4b:83:c3:b2:6c:bc:62:76:18:b8:7e:
2a:e2:d5:9d:9e:0a:e0:72:b7:5c:ec:dd:2c:f1:84:
89:b6:9c:db:91:4c:51:09:d7:37:73:e1:97:66:5d:
1e:92:e3:a1:4c:9e:4d:72:ef:d7:01:dc:82:ba:09:
08:17:2f:bf:95:e6:f0:08:21:af:53:ec:7a:0a:71:
f4:27:67:80:30:af:a7:8e:11:dd:dd:87:6e:79:74:
f9:f4:83:29:c8:8e:55:58:19:0d:b4:39:d1:d0:bb:
c8:8a:15:99:1c:78:46:54:0b:34:ca:4c:e1:36:06:
0d:8b:53:1b:2d:4b:e7:e0:b7:ef:d3:33:7e:26:63:
e2:94:0c:2f:63:c5:8e:c2:30:21:03:41:c1:ab:be:
65:a0:6a:88:16:6d:49:df:2f:0b:24:22:06:f1:8d:
21:cd:1c:85:4f:c9:b9:85:f9:35:b4:27:89:07:cf:
27:8a:1e:64:7d:fe:ad:d8:db:89:2a:a9:0b:3f:57:
00:b0:fb:28:b4:42:01:82:46:83:a1:de:f2:28:01:
41:39:f8:f8:9d:9f:26:cb:91:68:56:e3:17:b1:22:
af:72:94:0b:74:27:f9:f5:2a:5b:87:26:09:db:10:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:37:98:27:71:2C:14:38:C2:A2:22:13:28:E3:AE:9F:69:4D:9D:7F
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:06:c3:5b:56:ef:4b:65:a0:66:e8:db:6b:47:05:51:9f:97:
cb:45:3f:79:6a:3d:fb:ee:5c:5c:b4:98:f3:f3:17:40:a6:d6:
cb:6e:77:ef:33:ac:bd:e7:1d:1b:ac:c7:5a:57:ad:5a:03:d1:
bf:14:d3:00:f0:30:d9:32:49:5c:5b:1b:18:08:fb:fc:49:d8:
29:59:71:30:40:a5:9d:75:d5:76:28:3b:7a:32:46:45:de:f8:
65:83:bf:67:80:29:f6:00:5c:f3:96:03:79:ad:4d:fb:55:e8:
d4:02:da:0c:95:25:b9:e7:ed:6b:9b:04:23:36:49:3f:a2:e3:
5a:6f:dd:70:8e:43:3b:f1:e0:6b:d0:1e:62:b7:76:b8:b9:94:
3b:ee:9c:9d:c5:2a:db:4d:ea:12:4d:e7:c6:47:e0:80:d2:b0:
4a:64:ae:ae:9f:2f:f3:51:c9:01:86:73:f6:4b:7c:cc:c7:27:
9b:1b:84:ab:54:a8:cc:d2:42:94:a3:4a:2b:bf:0d:a1:d2:97:
4a:2a:41:6a:19:69:34:3b:78:c6:33:1a:ff:7a:24:15:5b:b5:
0d:98:90:7d:c2:bd:89:ec:25:32:51:cc:b2:a9:f6:56:4c:a3:
a0:3d:c8:33:3e:3d:2e:27:30:f3:c1:1a:ed:ab:40:c9:a7:f1:
60:1d:c8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:29:54 2025 by rpki-client