Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: P3J9QMmmENwjtFG1vTHjeeVXxWCHIz872pvTaEtVW3U=
Subject key identifier: 48:45:C0:98:CB:E9:17:FC:D4:8E:A8:1F:62:06:31:79:B3:A6:48:73
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 0194BD858E27022CE3424D2759ABE13E98A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 1370
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: IpwLBzBikE84HPOdSX/kq0WxTRhwfYZHR5WefC8Rv8E=)
2: iGWnAlCFQ6pmXTyPhSirCP5UB4U.roa (hash: 4zG8JsxyxdWf4j+Yjdv8Dm4ymHITRyxtThA4racm63s=)
3: rDWkJyuDMvY3qk_P3bLz1VAfXBA.roa (hash: T51bFQ1LTlcOohBY3SvkvA3KStpNAaU7OZJJkLrtQ5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8e:27:02:2c:e3:42:4d:27:59:ab:e1:3e:98:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=4845c098cbe917fcd48ea81f62063179b3a64873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9c:f7:42:df:1b:98:d2:c9:e9:f1:ef:81:62:
61:98:e5:88:4a:4f:66:01:87:a7:0b:b3:16:cb:0e:
d2:b1:56:b9:1d:70:c7:9e:dc:06:03:b3:93:e6:e3:
62:2c:ae:58:ff:71:67:90:0c:8a:ff:25:83:04:59:
ba:fb:05:c2:77:7a:31:42:a2:d7:dc:89:0b:63:32:
65:c3:a5:16:4f:a3:68:98:c9:d4:3c:6d:64:a5:8f:
dd:94:8c:76:34:99:d5:24:1a:d2:5f:ae:86:c4:53:
c4:6c:b6:5e:ed:5b:4c:c9:6b:bc:be:53:5c:2b:fa:
ff:53:e2:f7:7c:2d:6b:74:26:8c:fc:8a:2c:ab:5a:
fa:f4:6a:f4:cb:76:ce:b0:d5:b5:c4:8a:cc:1b:0d:
b4:aa:e3:ed:d4:b4:b0:23:e6:6e:f4:33:61:ca:da:
0c:16:7b:ef:67:d5:87:58:c1:b6:16:98:16:fe:df:
e3:07:b5:ae:91:f6:35:b1:86:50:85:2f:3f:6c:a6:
3e:1b:f1:74:2a:2d:81:b8:25:79:cb:78:3b:5e:07:
18:70:70:1c:ae:3d:22:c1:e2:58:be:23:f4:ea:43:
5e:22:88:b6:47:a9:3c:8a:08:b5:11:3a:be:41:b3:
5e:a1:16:f5:af:0c:cf:9e:95:fb:81:13:06:d2:75:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:45:C0:98:CB:E9:17:FC:D4:8E:A8:1F:62:06:31:79:B3:A6:48:73
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:dd:12:af:38:aa:2f:85:b4:b1:75:45:6c:e0:ef:18:19:02:
bd:46:3f:b6:22:49:e5:1b:c2:0f:de:62:ea:7c:78:10:c0:66:
a0:73:0b:ab:c4:fa:17:40:9d:d9:08:d4:a4:fa:3d:8b:59:02:
dd:c8:1b:46:17:0b:b0:54:78:2f:f8:e4:e3:d0:5e:fb:34:1d:
7f:77:b1:0c:28:49:0e:cc:26:92:0b:75:71:b2:17:1d:31:46:
7e:0d:da:0b:45:e3:0b:9d:e7:ed:c9:7c:83:a0:55:2e:bc:d9:
32:84:bf:8b:61:da:59:39:ce:bc:bc:1a:9e:7a:fb:c5:9d:00:
ad:8a:41:1a:9e:70:f9:4f:24:9f:65:c4:34:b9:88:fd:7d:06:
91:3c:88:a8:be:d8:a4:97:65:65:5c:8c:99:59:e2:4f:1c:3c:
db:6e:43:48:5d:fe:45:14:fa:7c:f6:f5:9b:7d:c3:dc:61:ac:
13:b2:e5:8a:ba:37:21:01:34:98:58:f3:85:b8:f4:94:8a:40:
d8:e6:42:65:66:80:6c:86:10:4f:ad:84:d3:2e:56:d3:4f:c6:
b6:97:a9:b6:96:77:cf:b3:1d:19:63:3b:f2:a6:65:cc:7e:b7:
17:c4:cb:ef:a7:1e:e9:21:63:5b:7f:0d:2b:94:a9:72:e4:11:
88:5e:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:04:18 2025 by rpki-client