Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/apz1pXvHRW10C0Xh_gjjaamhcUo.mft
File: apz1pXvHRW10C0Xh_gjjaamhcUo.mft (raw, json)
Hash identifier: NIeOVR3aqfxkp/hElxmfCtMkU/vwFLAXcxb81Vo3QvE=
Subject key identifier: D8:92:6D:10:87:94:A5:20:B7:2E:AB:6E:79:91:8C:3F:B8:F2:D3:75
Authority key identifier: 6A:9C:F5:A5:7B:C7:45:6D:74:0B:45:E1:FE:08:E3:69:A9:A1:71:4A
Certificate issuer: /CN=6a9cf5a57bc7456d740b45e1fe08e369a9a1714a
Certificate serial: 0195C7999869EEB100745A65E0268274E790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apz1pXvHRW10C0Xh_gjjaamhcUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/apz1pXvHRW10C0Xh_gjjaamhcUo.mft
Manifest number: 14B5
Signing time: Mon 24 Mar 2025 10:01:26 +0000
Manifest this update: Mon 24 Mar 2025 10:01:26 +0000
Manifest next update: Tue 25 Mar 2025 10:01:26 +0000
Files and hashes: 1: W5gLui2hXZ7sJI9UIKmvD2JTYpU.roa (hash: V/XfEAPaTzOxXEzXQ9Ey7h7BlTmoHc+eL3OCteRrtGo=)
2: apz1pXvHRW10C0Xh_gjjaamhcUo.crl (hash: NdFAqXHdYHZsbAJyAHm+tIIlEhxHaPeZ4l1BzEQSfnc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:99:98:69:ee:b1:00:74:5a:65:e0:26:82:74:e7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9cf5a57bc7456d740b45e1fe08e369a9a1714a
Validity
Not Before: Mar 24 10:01:26 2025 GMT
Not After : Mar 25 10:01:26 2025 GMT
Subject: CN=d8926d108794a520b72eab6e79918c3fb8f2d375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:fe:ac:30:b9:af:e3:b0:f1:d8:d3:d2:68:
f8:1e:8f:9b:2e:07:a0:94:f5:ba:2b:f0:55:67:25:
f8:fa:46:66:f4:50:44:b5:5c:e8:c1:91:15:2f:39:
f7:06:3b:34:02:0a:8c:53:bf:75:9d:7b:76:6b:5c:
17:dd:e8:1d:f1:7c:4c:b7:83:8a:34:9c:75:2a:b4:
dd:b4:52:9e:7f:76:bc:05:3e:94:f6:d9:39:95:02:
b7:ed:4b:ed:74:36:8e:f4:fd:31:95:1d:d0:c3:d7:
57:69:e4:44:b0:8b:92:2f:e6:40:ba:aa:f4:a4:ea:
b1:bf:fc:ac:46:57:8e:81:8c:8c:e8:9d:02:aa:a4:
43:15:59:09:15:8d:8d:70:1b:a1:c1:f0:22:b1:6c:
fd:26:a9:1d:ea:62:df:da:eb:75:66:7f:b9:5e:73:
f6:d0:16:5c:f9:7f:9b:a6:fa:e1:56:c8:17:dc:a7:
d3:be:9b:be:ae:c6:13:1f:09:2d:e6:ea:fa:fb:d7:
7a:38:97:78:70:cf:91:15:b4:f3:b4:01:4a:bc:90:
4f:b4:cf:2d:04:bd:e0:df:5e:da:04:64:b8:66:8e:
82:95:c5:4b:eb:a0:7e:00:1f:ae:47:88:da:46:23:
f9:28:77:69:38:ac:ef:a3:53:6d:b5:20:3c:9e:7b:
a3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:92:6D:10:87:94:A5:20:B7:2E:AB:6E:79:91:8C:3F:B8:F2:D3:75
X509v3 Authority Key Identifier:
keyid:6A:9C:F5:A5:7B:C7:45:6D:74:0B:45:E1:FE:08:E3:69:A9:A1:71:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apz1pXvHRW10C0Xh_gjjaamhcUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/apz1pXvHRW10C0Xh_gjjaamhcUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1fe3d7-9214-4de3-8f1c-2c0abbd2e85d/1/apz1pXvHRW10C0Xh_gjjaamhcUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ae:4e:a8:d3:9d:b9:f1:91:28:a9:87:db:ef:7e:72:1b:26:
0f:35:3b:9a:0e:7e:09:73:2d:14:5d:2d:65:16:52:f8:82:b2:
1f:be:4c:12:c1:81:e2:35:4b:cb:46:92:be:45:76:d5:15:da:
7e:ef:d8:76:3a:91:95:a0:d7:91:d7:c4:4d:11:b7:c7:da:d0:
f8:7d:53:06:26:cf:43:be:bf:d4:c8:2c:28:55:4a:d9:aa:1d:
0f:03:a9:26:2e:78:c8:59:8b:78:98:38:7f:90:c1:cd:be:d4:
fd:48:9d:a8:f4:c5:a1:54:ba:c6:03:86:77:89:d9:c2:44:bf:
b7:b2:75:68:a9:72:3e:49:75:92:a6:11:6f:a5:e7:0f:a0:d0:
13:5a:6f:1b:e0:7b:00:66:4e:97:4a:14:e6:98:75:7d:f5:b2:
5c:69:ce:4c:54:bf:d5:0f:1b:d2:b1:f2:aa:01:49:36:06:e5:
f1:d5:7f:54:82:1e:3d:d2:7e:9b:5b:50:2f:d4:eb:c4:be:cf:
62:ca:ce:f1:82:fe:5d:73:54:12:6d:68:23:e0:7c:6a:1b:b3:
54:a0:3f:f1:ef:02:6f:9b:88:c9:d5:01:b2:24:11:bc:15:4b:
5c:b6:8d:3a:6b:ee:a3:67:37:9c:7f:da:5f:d9:b9:3e:36:69:
26:f6:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:11 2025 by rpki-client