Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
File: Aleh_L8udaLhA0ynSg6XJiO7xJw.mft (raw, json)
Hash identifier: LDwmRmPlTYxrKnVkh5mPX1FKT0iwIYpclm+X3RkUC+Q=
Subject key identifier: C1:4F:42:93:0E:09:1B:5E:37:56:63:A9:D4:68:6A:24:6A:5E:7A:17
Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
Certificate issuer: /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Certificate serial: 0194BD8572854E937B42FBEE53B39430520E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
Manifest number: 018D
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: Aleh_L8udaLhA0ynSg6XJiO7xJw.crl (hash: o+Yous4BTbtVIS6qyi1nSMWByH+oO4ftAAoyJED9nmI=)
2: uyn_U6sylrn5wTqRGzlqSQ4TKtg.roa (hash: fhFG1UXX8cmMfDAY924tzYfk7fne+/jmPzGgnROSYrY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:72:85:4e:93:7b:42:fb:ee:53:b3:94:30:52:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=c14f42930e091b5e375663a9d4686a246a5e7a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:54:80:0d:f8:40:35:bb:37:02:8e:d6:1d:
13:d6:a4:e6:b8:67:26:bd:0c:e1:00:b4:18:88:11:
97:72:05:12:06:5b:4b:31:ef:d8:9d:00:91:95:b6:
f1:8d:d9:d2:c5:bf:05:57:e5:29:7b:73:5f:31:50:
76:23:27:47:63:a5:b4:75:b2:e3:6b:4d:78:22:90:
40:db:28:e8:dc:f1:5f:e5:ff:2f:06:34:8b:95:1b:
67:9e:a0:93:3c:54:24:d8:7f:78:71:bb:fc:7c:7b:
25:89:01:c1:98:24:62:c6:ac:dc:b2:f3:78:47:0b:
fb:13:d8:ad:92:8a:aa:55:7a:c3:c7:71:b6:62:fd:
a4:d4:de:49:8a:df:35:42:9f:6a:90:2a:24:36:c6:
54:a2:be:e5:cb:a5:f4:95:79:66:14:ca:f0:43:b8:
fd:35:d2:6c:8f:ae:9d:f1:0e:b5:9a:3e:5c:62:c4:
a0:a5:1d:99:01:f3:42:65:82:c6:18:30:2e:54:ac:
3e:bd:21:f7:ba:f4:b5:5b:a8:30:b7:ab:d0:08:8f:
a5:de:f5:b3:a1:54:de:92:6c:c9:90:37:e2:47:4f:
0b:b5:0a:33:2e:22:b7:e0:47:4f:31:47:45:f9:32:
42:26:43:d2:6b:63:ee:b5:f7:ca:95:92:ba:9f:a3:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4F:42:93:0E:09:1B:5E:37:56:63:A9:D4:68:6A:24:6A:5E:7A:17
X509v3 Authority Key Identifier:
keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:79:05:ff:ab:3b:e0:ab:c6:dd:62:77:95:be:91:c0:2e:a9:
3a:88:61:81:04:a8:22:a5:27:02:25:cc:8e:07:f1:75:15:be:
fc:16:7d:8c:ad:59:b9:f9:b8:e4:9b:07:3c:11:81:af:db:99:
34:05:41:eb:a2:21:f3:ba:f8:8b:b2:7e:5a:f1:25:ba:0b:09:
19:3b:38:12:8d:b1:ec:39:2f:3c:ca:86:f2:31:72:46:52:1c:
a9:db:f5:28:51:7a:cd:37:7d:d1:86:7d:1c:6b:36:e4:9b:53:
e4:ce:a7:fe:ff:5e:ed:e5:27:36:d1:2b:49:9e:dc:9a:2e:58:
31:25:c6:9b:5c:bf:33:98:fc:87:10:a8:72:58:2d:82:f0:c1:
b6:b9:05:44:6d:86:95:7a:f7:c6:5d:28:77:9c:7a:30:29:52:
ea:ce:c9:c6:60:87:e2:48:63:ba:4e:dd:6e:8d:47:fd:8b:ea:
c8:fc:6e:5c:11:15:58:77:00:4d:6b:99:09:80:72:5f:7a:db:
4e:ab:96:60:0c:2c:95:04:a7:9e:a4:23:ca:0a:70:2e:c2:eb:
5c:05:e4:95:05:6b:92:89:fc:fe:83:e6:a5:b3:5e:4f:78:59:
69:4a:cf:a4:54:a9:7f:ce:70:06:9d:7e:c4:95:4e:89:e9:cf:
31:60:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:17:49 2025 by rpki-client