Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/81ce74-1115-42c2-b906-6004ca86724e/1/acNeAIyGBVpnHU4GXMML5j41OV4.mft
File: acNeAIyGBVpnHU4GXMML5j41OV4.mft (raw, json)
Hash identifier: V/tRy4XAsiw9T96oqzZ/Te3Jd29Xo47qB5qoRu5DMbU=
Subject key identifier: 11:6F:D7:3D:D7:47:73:7E:F9:73:10:D8:6B:CB:34:0A:04:F2:DF:A6
Authority key identifier: 69:C3:5E:00:8C:86:05:5A:67:1D:4E:06:5C:C3:0B:E6:3E:35:39:5E
Certificate issuer: /CN=69c35e008c86055a671d4e065cc30be63e35395e
Certificate serial: 0493AE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acNeAIyGBVpnHU4GXMML5j41OV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/81ce74-1115-42c2-b906-6004ca86724e/1/acNeAIyGBVpnHU4GXMML5j41OV4.mft
Manifest number: 05E4
Signing time: Fri 25 Mar 2022 05:43:05 +0000
Manifest this update: Fri 25 Mar 2022 05:43:05 +0000
Manifest next update: Sat 26 Mar 2022 05:43:05 +0000
Files and hashes: 1: K9biA_wX1kiXwgN-1MctpBkK5CY.roa (hash: iJc8VF3d0aNAwOUScqHrP+2tLNnu5Zx3uI2BMPp6/TA=)
2: acNeAIyGBVpnHU4GXMML5j41OV4.crl (hash: sfPKKz8s+2ommmo/mAwoN9expaQwEOkOrzVOkbRAzLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76787211 (0x493ae0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c35e008c86055a671d4e065cc30be63e35395e
Validity
Not Before: Mar 25 05:43:05 2022 GMT
Not After : Mar 26 05:43:05 2022 GMT
Subject: CN=116fd73dd747737ef97310d86bcb340a04f2dfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:c5:a5:4a:eb:81:92:66:31:ac:1b:d3:d5:
14:51:bf:26:74:ac:d6:38:33:c9:d0:06:cc:9e:ac:
be:17:2a:f3:c2:58:eb:84:d0:bb:bb:11:a2:07:7b:
22:51:56:c9:aa:91:29:6e:44:46:da:3f:80:fd:bc:
c9:5d:40:34:e0:0e:dc:4c:04:53:19:85:51:b6:31:
47:99:5d:44:20:7d:cd:fb:e7:57:f0:ef:95:16:b7:
ca:f3:82:3d:7b:55:51:c1:27:cd:d7:38:8c:4e:5a:
51:c5:ea:ac:72:cd:7d:b5:6d:ea:3c:cf:fc:c5:b3:
ab:20:4e:da:a1:e3:e9:6a:51:a9:fd:0e:cc:04:76:
02:23:ae:46:f8:56:a0:1c:a4:7d:59:b8:5c:d4:e1:
2d:00:65:18:e3:89:9c:4d:ab:a1:27:2f:66:da:04:
cf:81:ec:27:8a:4c:66:c7:66:56:ac:89:67:c0:c5:
ee:36:ad:f2:77:4a:41:da:d0:a3:62:47:a1:49:86:
d6:b8:b9:63:f1:77:c8:c6:8f:3c:c8:59:95:aa:18:
5f:b6:d5:58:2d:d6:0c:e4:0a:2d:19:c9:08:6b:f4:
27:23:c2:49:b2:a3:1c:5c:5c:b7:2a:85:1a:41:f7:
4a:57:df:e8:83:d0:77:fa:ac:e0:cf:08:aa:b6:47:
e5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6F:D7:3D:D7:47:73:7E:F9:73:10:D8:6B:CB:34:0A:04:F2:DF:A6
X509v3 Authority Key Identifier:
keyid:69:C3:5E:00:8C:86:05:5A:67:1D:4E:06:5C:C3:0B:E6:3E:35:39:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acNeAIyGBVpnHU4GXMML5j41OV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/81ce74-1115-42c2-b906-6004ca86724e/1/acNeAIyGBVpnHU4GXMML5j41OV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/81ce74-1115-42c2-b906-6004ca86724e/1/acNeAIyGBVpnHU4GXMML5j41OV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ad:21:ec:9b:01:25:f0:be:56:53:0e:61:98:e3:53:8a:cf:
1e:d0:ba:1f:5b:f0:c1:a6:fe:1e:4d:51:43:e2:3e:a7:05:fb:
6d:43:3b:ac:31:cb:21:6c:f6:56:c1:c3:81:a4:21:ce:fc:6d:
f1:3b:2f:16:ac:6e:39:40:a9:9c:98:18:60:0e:36:51:31:bc:
65:d4:f5:8a:31:fa:84:1b:9b:2a:91:f0:c4:cc:a6:01:e9:67:
fa:89:6e:dc:44:1e:9e:45:e8:7f:d1:8e:c5:9f:dd:de:20:59:
40:4f:8f:3c:3e:72:73:72:4b:7f:77:b8:d6:55:51:55:77:85:
78:29:7e:36:a1:a2:9f:3c:d3:16:1a:9f:35:f6:85:e2:e3:f3:
58:d8:17:db:99:6d:f3:14:87:12:63:cb:c3:ca:57:a2:98:a1:
68:b9:ab:ea:56:00:94:6c:ff:ef:f0:1d:46:40:bf:c1:7d:ce:
13:cb:06:99:37:c4:a4:ef:b3:b4:3d:7a:dd:33:af:4b:26:90:
ef:54:e4:66:75:f3:8c:53:0d:f0:cb:cc:ee:e7:02:cb:cd:ad:
05:39:50:37:6d:ee:89:98:b3:cb:7a:5c:c1:63:6b:73:c6:5a:
e9:97:d2:bb:1b:2d:85:59:95:16:e5:d7:26:4b:c1:da:41:15:
15:16:05:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:00:18 2025 by rpki-client