Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
File: aYLwUTKpmJUH6_bumJUYdTuizbU.mft (raw, json)
Hash identifier: 49RVrsHA2cljxET2ZALlMzU6LSIdb0Atqyj3bXEt+w4=
Subject key identifier: 70:05:81:1C:C8:EC:DF:5D:DE:5D:DB:4A:AC:71:C9:E3:C5:46:CB:5A
Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
Certificate issuer: /CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Certificate serial: 0194BCA9AAB03C69224A317574DECBB0B7B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
Manifest number: 08DC
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: aYLwUTKpmJUH6_bumJUYdTuizbU.crl (hash: Frn8qRCCb9uMnWCdvBKd8cRxbaObMZabLV6UHbWIZfc=)
2: fAKnpTzt0oxsrzvaA1bygJJ8CWQ.roa (hash: cdf+GHG9jpY7S3hS2aX03Crb7b2Au3gPgbB6NvaxmuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:aa:b0:3c:69:22:4a:31:75:74:de:cb:b0:b7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=7005811cc8ecdf5dde5ddb4aac71c9e3c546cb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:f0:a7:28:1e:f4:de:fb:49:8b:a6:d2:d1:
f5:61:c5:3e:59:c6:50:0c:ac:da:8f:90:75:b9:ae:
f0:a6:66:cd:f4:26:55:2c:f7:70:2f:d8:33:cb:15:
59:22:5c:c3:31:3e:a7:f4:2b:85:20:75:99:e8:cd:
4b:18:de:55:ab:23:6a:61:9f:19:1d:96:9f:09:9f:
f1:b2:ac:f8:7c:42:56:db:2b:05:39:6d:f2:8a:a1:
49:82:98:df:ab:60:db:91:13:ef:f9:0a:a5:9f:78:
78:6a:ed:7d:e5:65:7d:e8:8f:f8:10:7c:b0:08:a4:
64:62:c9:52:ea:83:85:fc:18:d3:b6:81:b9:a1:da:
6e:81:2d:f1:42:ff:13:bc:8c:4b:07:fc:0d:d0:7a:
27:75:7a:62:e1:41:a4:96:f6:f5:45:30:d7:85:ab:
d2:7d:5b:90:65:49:ef:dd:59:d6:4d:8c:ae:59:85:
b9:ef:21:3a:e4:d0:2e:a0:25:b0:ca:eb:c0:ce:be:
99:2c:5e:1a:49:2b:7e:0e:2c:94:8a:0f:22:80:26:
90:b1:de:30:7f:d5:5b:7f:10:c2:b6:54:5a:c9:43:
0a:5d:6c:2d:db:3d:70:c8:3d:d9:29:15:d2:17:25:
80:87:89:72:f5:ae:7d:59:d2:e7:ad:53:82:0d:fb:
cf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:05:81:1C:C8:EC:DF:5D:DE:5D:DB:4A:AC:71:C9:E3:C5:46:CB:5A
X509v3 Authority Key Identifier:
keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f4:79:90:af:39:d1:18:b3:eb:a9:2b:a2:96:b6:32:b6:7c:
44:7d:e1:d5:65:af:97:cf:e7:5f:d7:54:85:34:a9:1f:11:80:
59:a3:e7:3c:b1:18:e2:cf:64:1e:9d:5d:fc:5e:49:6a:0d:91:
b8:44:76:55:a2:26:bf:79:6a:44:09:93:e6:d7:eb:9a:46:ae:
0d:c6:00:12:48:f5:b0:65:5f:37:38:fd:c1:d1:df:3b:74:0a:
c7:73:37:b7:dc:36:51:e0:4a:71:36:41:17:60:0f:41:95:18:
8d:c1:e7:68:b4:95:3c:ae:45:3e:77:1e:aa:56:63:eb:66:d6:
96:ff:59:81:29:ff:5e:a2:ee:2f:77:1d:80:b4:bb:36:4e:1f:
93:7e:0c:1a:1d:66:a1:15:30:3f:d6:14:9c:6d:09:a4:06:35:
c3:cd:ee:5c:dd:9d:95:f5:44:0c:a5:dd:fd:4b:5f:a8:5a:fd:
f5:33:9f:e8:e9:c0:da:c4:8b:92:e1:bd:f3:c7:14:a2:db:66:
df:89:54:fe:ac:ac:a1:49:42:11:17:68:10:b9:d5:c2:54:8c:
8c:a3:13:64:33:e3:8a:1e:5a:ee:32:bb:10:2e:61:64:07:ce:
6f:a8:f2:ac:a9:15:47:df:19:d4:fd:60:7b:a9:6f:6e:9e:6a:
45:da:d5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:15 2025 by rpki-client