Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier: Ysezw4zgD9HRAIZLFtQYUSdvALcxAi0rKVJd7F3sFOM=
Subject key identifier: 69:24:62:FB:6E:5A:0E:53:47:E1:9C:E5:AF:3D:A8:D5:0E:83:FA:5E
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 0195E0B417CA967A137EA1293680C6099762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number: 03AF
Signing time: Sat 29 Mar 2025 07:00:53 +0000
Manifest this update: Sat 29 Mar 2025 07:00:53 +0000
Manifest next update: Sun 30 Mar 2025 07:00:53 +0000
Files and hashes: 1: 1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa (hash: bOO4FlKJWXEQJjLmaOoP7m2UMLj2WLiNGPSaCEd5lyU=)
2: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: s3CIFoxl/U3hLnYJ5hAf7FKM5HR/QOiw3PdegDtIoAg=)
3: fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa (hash: 9pMUqI23+lfSB11w0dNCq2uY/O6yUaZq0tlanY1cD7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:17:ca:96:7a:13:7e:a1:29:36:80:c6:09:97:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Mar 29 07:00:53 2025 GMT
Not After : Mar 30 07:00:53 2025 GMT
Subject: CN=692462fb6e5a0e5347e19ce5af3da8d50e83fa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:6c:e8:40:4c:b3:13:75:4e:c3:2b:68:eb:
d5:a4:fb:5a:ac:8d:67:03:bb:fa:89:28:d5:11:07:
04:16:75:7d:5d:dd:52:2e:ce:48:c5:10:a7:29:aa:
b5:e3:44:dc:31:02:65:35:f9:66:d1:30:ef:2d:2a:
5c:98:87:d6:09:fc:53:18:be:3d:86:47:70:24:1e:
70:18:87:0f:f4:bc:b7:13:48:38:19:e2:dc:d8:00:
dd:34:0f:e8:12:3c:a0:67:25:b8:46:09:67:f0:3d:
e8:70:7c:f9:03:cc:aa:13:17:a7:29:c8:46:19:b2:
da:9a:c0:e4:83:8f:8b:b0:34:09:4e:8a:b4:86:ed:
69:b3:29:c8:9e:48:c7:57:4b:c8:99:b0:b3:54:35:
16:f4:73:26:3f:3c:9f:81:71:d2:fc:60:3a:40:ee:
eb:a6:18:69:40:4d:f1:90:d8:d9:a6:f4:ee:30:d0:
1f:7d:d2:e2:b8:02:4f:77:4c:b6:59:03:c6:ef:da:
a3:3c:79:26:de:85:6d:f9:e6:8d:df:e9:ca:f0:a7:
47:36:f6:11:18:3b:c1:b2:54:07:a0:fb:67:a5:7a:
30:8b:8b:7b:1a:97:e0:5e:20:ce:6a:d7:e6:46:aa:
74:c5:d8:a9:58:ff:56:2c:90:10:23:cf:f4:b9:0e:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:24:62:FB:6E:5A:0E:53:47:E1:9C:E5:AF:3D:A8:D5:0E:83:FA:5E
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:10:d0:6f:5c:36:e3:15:b6:9e:db:5d:c4:55:ab:bb:6f:7a:
4f:ba:12:ea:77:08:a9:23:9e:ea:86:31:8f:0c:6c:11:8a:c3:
53:04:2b:a0:f0:55:52:2d:1f:97:13:0e:4b:03:13:79:65:9d:
0a:3e:dc:60:93:84:6b:13:0a:9e:86:ba:9b:65:af:53:2d:b0:
4e:64:83:77:28:22:26:09:64:4c:10:4e:36:57:b2:be:81:0a:
b9:a4:b1:6c:09:41:6e:d5:72:a7:2a:e8:13:e2:fa:da:67:44:
90:3e:ef:f8:2e:70:db:cf:eb:38:a1:29:15:3d:a3:f5:71:27:
a0:22:76:a7:86:2b:b9:d0:6b:89:74:c1:b1:f3:64:26:8c:9e:
a0:af:2b:78:b6:56:86:a4:23:ee:a3:66:fe:6e:1f:3c:8b:b8:
c0:3f:66:ce:56:02:72:56:2b:ba:ef:94:dd:1d:fa:aa:56:df:
ba:ca:7f:5b:cc:96:82:ff:00:47:d7:b6:00:13:f7:c9:00:75:
e9:c9:a0:0c:d8:bc:19:ab:a6:3a:74:12:4c:5b:68:2a:18:73:
58:5f:c4:49:22:69:90:f7:51:ab:0a:f9:4d:9e:39:6a:4b:e2:
f9:fc:ac:2e:b2:35:14:90:e0:0f:d5:17:8f:04:86:35:db:bf:
7b:e0:03:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:44 2025 by rpki-client