Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: aXKJvQTtAV46Hl8c0Ty87l6FdQjjvYhJQqIWYlIh5/A=
Subject key identifier: A6:E9:6D:42:A6:8C:1D:12:C6:A9:B5:CC:C8:5C:56:7F:C8:79:47:BE
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 0195E07D4D7D0AC440B649B3DD0EB1C872C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 06:01:02 +0000
Manifest this update: Sat 29 Mar 2025 06:01:02 +0000
Manifest next update: Sun 30 Mar 2025 06:01:02 +0000
Files and hashes: 1: XlEutT53Peaefw9BWBX8iOxdk0o.roa (hash: 3n8+7Yj6dfwFUOHjwioNJb1p8k9ewBTtziMwK34FcCQ=)
2: _GNQSp_bGjydsnVDpRHY8XNNqhs.roa (hash: pDYhj1QM7SQ6UTwVMyRGZcrJ6AnEuDllBqLjotU+jDg=)
3: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: PezNy3ZJM+2TB4PA5AQ+k5Dw7lRdmIVceq0eWaO+q1s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:4d:7d:0a:c4:40:b6:49:b3:dd:0e:b1:c8:72:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Mar 29 06:01:02 2025 GMT
Not After : Mar 30 06:01:02 2025 GMT
Subject: CN=a6e96d42a68c1d12c6a9b5ccc85c567fc87947be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:9c:36:9b:c6:cd:ff:a3:50:08:7c:94:98:
65:9c:aa:4b:5e:18:ff:53:59:f1:b4:9b:75:50:c5:
ca:ae:20:bb:b7:79:74:21:f6:38:98:e3:93:8a:3b:
c6:d2:e8:9e:04:00:69:64:ac:f3:47:14:36:ce:a5:
3e:d1:00:85:e5:d6:d5:cf:87:0a:dd:ab:44:ce:86:
f2:8d:32:4e:06:b9:fc:57:a0:04:e1:af:16:ec:fd:
a0:48:e5:54:e0:78:a5:42:9b:0b:fd:c8:67:ba:2d:
5a:bd:53:09:af:33:f2:9e:14:54:35:59:d9:a5:fd:
89:20:54:69:dc:13:b1:38:d7:75:ac:a9:8e:72:ca:
f8:09:1a:0a:49:49:fc:ff:8e:d9:1f:db:f0:01:3b:
d6:d9:a4:cc:9b:6a:f6:89:a4:49:32:45:bc:04:db:
0f:60:22:92:9f:17:71:c6:6e:d0:d7:3b:ca:33:13:
27:fb:01:0d:f9:6f:c1:da:98:0d:42:0d:25:ec:84:
0d:4d:78:64:45:ff:8f:08:0f:a7:a9:8f:7d:8a:7e:
3a:db:f8:22:e4:0d:76:9e:c5:ec:2f:87:eb:52:96:
6c:5a:66:1f:49:a2:30:38:ca:50:8f:63:05:a6:7f:
b6:13:6b:8b:0f:54:77:d4:59:8e:85:9d:a3:74:01:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E9:6D:42:A6:8C:1D:12:C6:A9:B5:CC:C8:5C:56:7F:C8:79:47:BE
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d8:90:da:5c:ca:87:32:e5:c9:c1:26:f6:d3:a2:ad:b5:a9:
43:08:06:2d:d8:d9:6c:84:3c:89:1e:34:bf:a1:95:c4:11:43:
41:35:40:8f:80:fa:c6:7f:d8:68:42:7b:dc:f0:ea:5f:54:4f:
7e:79:66:d9:fe:87:48:39:1b:1f:98:d4:bd:a8:5a:23:45:20:
1d:6d:ab:6e:a3:84:4b:c6:58:9c:4f:63:cd:3c:b0:56:f3:f0:
30:1e:bc:c6:df:04:4e:bd:84:85:07:3c:7b:8a:9a:f3:91:84:
a7:4c:0d:91:b2:a8:09:22:47:a8:02:bf:4f:c2:ec:47:ea:58:
28:c5:41:22:8a:20:1e:f5:9c:ef:5c:96:cd:68:d1:7d:18:b6:
50:5e:51:1b:49:12:01:67:2b:16:85:ac:d2:46:8f:1a:08:99:
94:87:77:a6:54:ea:99:e3:59:d7:fb:b3:b0:86:69:27:f0:92:
f3:b4:7f:d6:f6:34:ec:df:7d:97:01:2f:ad:8d:7a:e9:b4:ca:
f9:75:c6:7d:f9:f9:31:70:da:11:05:09:37:82:33:b6:44:af:
ea:48:3c:74:2f:23:66:ce:eb:4a:fd:d3:2b:47:db:b4:b6:61:
72:2a:76:0e:99:47:8b:0f:a2:31:76:82:02:ec:40:f3:54:ab:
af:1a:bc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:56:20 2025 by rpki-client