Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
File: afKVoxCPXPHTJv_pv2EPvPGNct8.mft (raw, json)
Hash identifier: eivTBZdSleBm7EXRjYcKBgjTqDHjGblEyBgaJhHlnjQ=
Subject key identifier: 37:30:45:A8:33:86:68:56:6F:75:E4:6D:D8:76:FD:CC:48:6A:86:45
Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
Certificate issuer: /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Certificate serial: 0195E1225D71B8C5A5FF8F22C14214D9156B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
Manifest number: 0850
Signing time: Sat 29 Mar 2025 09:01:20 +0000
Manifest this update: Sat 29 Mar 2025 09:01:20 +0000
Manifest next update: Sun 30 Mar 2025 09:01:20 +0000
Files and hashes: 1: 2kKgjfyddVwBqBtbcmC591hhds0.roa (hash: J3PsfHURY5KO0r8jrXSygLDWI9PtPmq+khbJ0BwKbpo=)
2: afKVoxCPXPHTJv_pv2EPvPGNct8.crl (hash: pabZ2m+vmbPnLH/q9i43f2hLAQGgB3ZFQRvYVlzk2ls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:5d:71:b8:c5:a5:ff:8f:22:c1:42:14:d9:15:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Validity
Not Before: Mar 29 09:01:20 2025 GMT
Not After : Mar 30 09:01:20 2025 GMT
Subject: CN=373045a8338668566f75e46dd876fdcc486a8645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:6c:3b:c0:67:6c:e0:a6:11:c7:89:77:a4:
d3:f2:af:a6:7f:aa:93:85:32:b2:70:4b:43:48:7d:
25:d7:01:2d:23:22:a3:d9:44:01:ca:a0:32:d6:31:
59:c0:53:d0:fa:06:dc:fa:8d:63:e0:7e:19:c6:b0:
d5:db:c4:19:ed:b3:a4:5b:91:33:7e:65:c2:e7:84:
63:f5:0a:c5:6a:54:e7:13:a9:a3:bd:66:e5:53:1b:
43:5d:09:95:68:ff:4e:ab:d8:da:bf:46:65:95:7e:
ea:c2:2a:ff:1f:f9:95:d5:3a:6c:38:a1:36:e3:96:
51:9a:80:03:7c:ab:57:96:b9:c9:fe:af:e5:d1:32:
14:d9:3d:98:a0:f2:43:57:73:9a:41:da:e0:61:c2:
2c:37:37:96:a5:08:9b:a3:ad:d3:d5:df:b4:ab:b6:
ac:dd:f1:bf:5f:17:66:a8:6f:d7:29:81:69:26:c9:
39:17:d7:77:ef:96:0f:dc:01:c9:4a:e7:3a:38:b6:
fc:cb:2c:50:6a:ff:c2:83:be:49:3c:bd:0c:12:7c:
b4:d9:cd:90:e2:9a:d2:3c:69:9a:b1:4c:f9:af:ec:
b2:d4:9c:b2:65:63:84:26:cf:e4:d2:39:75:46:44:
65:bc:4a:57:24:74:32:39:bf:1b:0a:56:fc:29:a0:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:30:45:A8:33:86:68:56:6F:75:E4:6D:D8:76:FD:CC:48:6A:86:45
X509v3 Authority Key Identifier:
keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:3a:7f:92:d0:fb:49:6c:88:45:03:a1:db:24:a2:8f:84:bd:
d0:55:cd:f6:b5:df:5f:12:f3:dd:62:85:80:9b:1e:69:d7:be:
91:59:0d:a4:48:67:1d:02:45:e2:6e:4e:88:80:1f:d7:0d:f1:
de:17:05:5b:59:25:57:a7:dd:00:c6:d1:47:bf:9c:8c:54:b9:
2d:bb:d9:20:e8:f0:40:ae:b9:1d:20:2e:61:f8:9d:9d:0e:55:
f1:7c:8b:05:71:d3:ba:0f:9d:2b:e1:2e:ed:0d:a8:87:87:40:
37:03:e2:89:bd:1e:34:9b:95:4c:75:66:54:08:b9:bc:eb:4a:
33:f5:fa:5d:a3:ec:bf:c9:5c:69:3c:bc:e4:7c:79:2c:65:ec:
cc:43:a8:b5:b4:87:6d:82:76:ca:5e:e5:88:8e:e8:76:b1:a2:
d2:55:63:ad:f9:69:61:09:55:3e:41:d7:50:04:da:fa:78:56:
5b:74:e2:93:5d:e4:b9:22:dc:b2:c8:9d:6a:1e:95:b7:93:d8:
40:ce:97:a2:8f:b8:2b:6d:00:44:b7:10:8c:90:ea:49:d5:ee:
00:e5:35:a8:b7:f9:95:2a:29:03:6b:21:35:40:d4:ab:37:2a:
b4:d3:84:8a:e1:e2:0f:cf:18:8f:d4:f4:a5:6f:30:55:5d:d2:
a6:ae:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:38:18 2025 by rpki-client