Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
File: axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json)
Hash identifier: /B778UbNaS7o102I3PH+VrLSXkGRKS1ksLeoIjncIyI=
Subject key identifier: 66:7E:88:DC:07:BD:07:A0:E9:39:24:BA:4D:BB:BD:E8:57:AF:E4:66
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Certificate issuer: /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial: 0195E00FF4A13B500B77D6C86541662434D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
Manifest number: 12B6
Signing time: Sat 29 Mar 2025 04:01:36 +0000
Manifest this update: Sat 29 Mar 2025 04:01:36 +0000
Manifest next update: Sun 30 Mar 2025 04:01:36 +0000
Files and hashes: 1: LDFoqWoquL9wTVn9saN9JZc4auE.roa (hash: YdwrX0/CFiNvv9tuZOtWWVIYa8NZD1PSP+bR1o1/Vn8=)
2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: RPtl3idIqwPVADR94q7p3rW7CPXxsgnlZkESelxaERM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:f4:a1:3b:50:0b:77:d6:c8:65:41:66:24:34:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Validity
Not Before: Mar 29 04:01:36 2025 GMT
Not After : Mar 30 04:01:36 2025 GMT
Subject: CN=667e88dc07bd07a0e93924ba4dbbbde857afe466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:d0:5a:7e:c1:a5:9c:65:ea:f0:01:e4:4b:
40:4e:71:3a:a9:6e:a1:ec:44:2c:33:e7:6a:74:42:
a1:db:33:a6:47:99:a0:55:99:5e:37:9e:5d:e0:e6:
8e:5f:84:f5:f9:1f:38:c7:95:6e:bc:b2:e5:c9:b9:
f3:53:f7:7a:02:9a:5e:90:f1:d7:4a:63:c9:6d:9c:
60:7a:2d:0c:28:4f:22:6a:b6:a7:34:b1:d1:90:d1:
f5:a4:55:d7:fc:3e:57:41:a4:07:3a:b9:25:3d:ac:
21:fe:60:8c:c4:bb:3a:da:df:5e:13:b7:88:55:49:
0b:96:dd:5c:46:f7:1f:52:98:fe:97:9a:e7:c6:cc:
ac:dd:cc:96:3b:19:7b:68:28:61:42:b0:fc:43:e5:
33:75:d8:c5:52:67:7d:5a:22:ea:fb:ce:09:21:70:
81:a4:38:96:68:b5:01:0f:bd:68:0a:02:b7:f9:9c:
78:cf:5a:b5:87:50:2a:e4:a3:f4:e5:6d:ad:39:f2:
af:83:9b:a0:ef:f0:4a:a7:52:5d:b0:91:f9:49:e2:
e1:1d:ae:2a:9b:6e:5b:c0:50:c1:ab:8b:69:0c:67:
ac:86:08:69:ac:37:42:1a:90:fc:ea:c5:08:d5:88:
2e:44:15:1d:7c:80:83:5c:a8:a8:97:4e:06:ca:13:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7E:88:DC:07:BD:07:A0:E9:39:24:BA:4D:BB:BD:E8:57:AF:E4:66
X509v3 Authority Key Identifier:
keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5b:de:3e:7d:b5:c4:79:d7:e2:bc:da:b3:12:0c:f3:52:2d:
09:4d:b3:35:5d:25:8c:6d:6f:69:54:fb:d6:6b:8c:16:db:03:
f8:73:60:bf:e8:2a:b8:7f:e1:71:81:e2:c5:e8:69:01:d6:e5:
95:60:46:9c:82:60:63:a8:b8:6c:40:90:28:c1:be:25:d2:6a:
0e:c8:5d:bc:a4:38:cc:ce:68:d9:a8:70:24:e0:b0:29:f0:b9:
d5:1e:b9:82:6f:da:bd:dc:c2:46:71:b1:1a:02:95:7f:49:e9:
e4:c0:4d:7b:2e:ab:5a:70:c6:b4:f0:aa:68:ea:c5:ee:73:31:
7d:a2:6c:5a:8a:ff:3c:3c:f5:af:f4:24:0a:5e:26:cb:cc:65:
44:55:c5:6d:65:ef:43:58:3e:34:12:b9:9c:ba:d8:d6:7b:a1:
f9:a5:8a:20:58:28:a0:73:f5:04:18:d9:cf:56:30:72:0d:6c:
2b:33:e6:73:43:48:03:63:80:aa:96:c8:2d:07:7c:1c:30:dc:
7c:40:f2:f1:0d:31:87:0e:13:a3:4d:5e:13:7c:be:7b:cc:d9:
c5:1a:81:22:61:ed:7f:38:7a:f9:4a:58:f5:95:2d:de:86:97:
5a:5e:5d:65:bc:a3:b2:7a:d5:75:be:c3:af:78:be:ba:45:d6:
b1:15:85:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:33 2025 by rpki-client