Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier: raVlnCqadarG/XNKtrlqx6CPiEg5mZB93BaPa1kBAT0=
Subject key identifier: AA:75:8B:69:CD:22:E0:AF:64:D3:C0:FF:89:7C:B9:FB:30:07:EE:4F
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial: 0194BD177B9A58096014A222882F47BD008D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: 05ygJTzuB3ObkkSLzqCp48YOVhy0hWvxcEjMV8ezXps=)
2: K1Ne1nVDXTkowzkdUM3CXdE4E6A.roa (hash: yQEUlbKzH3JK4cDR8vmY0Ufn57XLcgJT+5SEVNFl3Yo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7b:9a:58:09:60:14:a2:22:88:2f:47:bd:00:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=aa758b69cd22e0af64d3c0ff897cb9fb3007ee4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:98:1e:60:8c:3e:00:4b:c2:4a:fe:01:5d:
6c:0c:5d:da:f6:0d:27:d1:13:fc:36:da:1d:ed:47:
fd:28:84:4e:ff:43:a0:98:ff:4a:03:01:81:09:71:
d4:9b:e2:c6:5a:65:11:6b:2c:91:fd:ae:00:f6:83:
bd:40:4d:db:66:b0:b3:ce:2c:c2:21:f6:13:90:da:
78:04:f4:fc:26:f3:8f:24:e1:d5:b6:eb:eb:46:ab:
76:e0:7e:a3:2e:72:11:38:ba:1f:69:07:f5:5e:47:
f2:40:43:01:e2:31:fe:08:d6:32:09:fb:28:6b:34:
b9:3f:21:0d:d6:8c:64:0b:9f:11:c2:e9:63:8b:5d:
0b:72:06:3d:63:29:06:bc:63:fe:74:93:46:82:1f:
1b:3c:86:a2:da:d2:65:16:ae:3a:b0:83:70:f3:ed:
5d:3a:50:ee:be:31:a4:ed:ed:8e:ed:11:e0:f2:de:
93:da:40:e0:3b:3a:49:b1:ca:fa:94:22:cc:d7:78:
88:30:99:d6:9e:1b:ca:1c:92:9f:ff:ee:c2:4d:4f:
99:e0:45:86:b2:64:40:cc:a9:c2:e6:6f:a6:4c:ae:
4c:44:ee:a5:1e:5d:b7:5e:99:06:29:f5:e1:e8:a0:
1d:2b:d9:1b:65:0d:65:4d:94:87:33:88:38:d0:85:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:75:8B:69:CD:22:E0:AF:64:D3:C0:FF:89:7C:B9:FB:30:07:EE:4F
X509v3 Authority Key Identifier:
keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:07:36:ae:db:b4:04:5a:d7:9e:ea:4c:b1:d6:f1:28:73:ef:
4d:20:4d:91:c8:4c:92:46:be:3a:62:bc:5e:1f:4d:e7:a3:9b:
53:47:92:e2:91:12:4a:35:f9:f8:bd:a8:cc:57:bd:3a:92:95:
aa:11:68:cd:f0:f3:2a:86:24:b7:d7:4b:f3:d8:e0:34:df:4c:
da:b3:03:41:11:10:53:c4:13:42:54:d3:1f:2d:19:7f:7f:fb:
10:0d:ce:3e:ed:31:1c:1c:b1:4c:3b:00:5d:ad:9b:08:e8:9e:
e2:e6:c5:cc:16:77:24:7d:b4:44:b1:3d:9c:c1:6b:98:22:6e:
ba:37:e6:94:4d:58:25:ff:b1:14:bb:ef:f8:bf:e7:fa:a8:22:
50:4a:a9:f7:a7:11:c1:ac:49:8e:c0:88:fd:09:bf:9e:87:a7:
4e:c3:6d:ac:7e:96:6b:fc:43:9a:7b:a9:88:cb:68:54:6d:22:
a6:c0:21:f9:4f:38:da:fc:b4:6c:dd:fa:ab:97:b6:91:dd:3e:
80:3e:1c:c7:b4:b5:67:d0:48:bf:f3:d9:33:11:c6:f7:51:ea:
9f:20:ef:bd:82:67:df:fe:4b:2c:ce:34:96:36:f4:78:d3:e4:
bc:03:0d:e1:fc:1b:56:58:3e:12:3a:b4:2f:31:d5:7d:22:99:
fd:94:2f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:10 2025 by rpki-client