Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: lfQM9hgXjxjYgnK2TpDnaYDCVSdPQq/HolCm8M4l/UU=
Subject key identifier: D5:F1:08:F4:4F:D4:63:7F:00:F1:C3:63:44:E7:E8:66:A3:DC:45:64
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 0194BBCDFB8F2E591DA91A04855DFD411BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: CAX8W4U0hp9rcWPYVPwcRKLgrF7eM/8tjFJiRTtyIzs=)
2: epNs1frSSHg0k8RApfvyiS1o3e4.roa (hash: EqfynGitiIuAYCHQvy1uEOFIiGIwRJnEdzdFNRHUcpQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fb:8f:2e:59:1d:a9:1a:04:85:5d:fd:41:1b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=d5f108f44fd4637f00f1c36344e7e866a3dc4564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:78:0c:7b:41:a0:7c:ea:aa:5e:47:79:d9:
1d:f1:53:ff:d4:e7:20:b9:53:98:c0:1d:14:6d:58:
62:36:63:8c:a1:36:c0:d8:d2:eb:d2:e5:c3:d7:94:
43:1e:7b:55:a3:f2:b5:cb:c2:03:a4:b5:5d:00:96:
e4:34:be:ea:e0:e1:75:cb:dc:7e:20:80:d7:45:d5:
c4:cc:80:c6:1c:ce:cd:6e:2f:8a:67:4c:83:26:8f:
89:ee:63:8f:af:7b:db:fb:94:39:b8:31:fe:ea:14:
09:70:10:35:b3:e2:a5:86:81:5a:9c:67:7e:f5:0d:
41:2f:ce:2a:23:60:b7:18:00:20:c2:0f:cb:0e:b9:
27:b8:02:88:5b:1b:99:25:76:90:c3:c2:68:f1:b9:
2e:77:c2:fc:84:9a:b4:86:ca:45:28:3d:36:d2:64:
07:77:3a:30:43:15:f6:61:cb:ae:71:a8:e4:d4:fa:
75:e4:32:c4:f6:30:dd:7a:1e:5a:8f:64:bd:73:1e:
5b:07:18:3d:89:4e:f3:91:a4:75:9e:f1:7c:3f:3f:
23:29:b0:ce:77:03:de:4a:a1:68:c1:18:a0:3d:7e:
93:ba:13:03:03:74:2f:70:cd:f0:be:b9:6d:d0:ac:
a5:33:16:30:56:6d:a5:c9:6a:ee:ff:94:7e:d3:fe:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:08:F4:4F:D4:63:7F:00:F1:C3:63:44:E7:E8:66:A3:DC:45:64
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0d:5c:b4:ac:95:b9:57:de:ca:50:02:3c:d7:86:2e:0e:db:
dd:a3:77:95:b6:d4:c4:55:ac:49:a4:b6:49:7f:a6:7f:4a:2a:
6d:d8:89:c8:23:99:9d:2a:2e:27:e5:d0:ba:0a:60:66:a7:e7:
a5:1e:72:f2:8c:37:8c:71:82:e3:7d:70:fd:08:00:c9:47:b1:
5f:1c:47:13:2d:4b:d6:7c:a0:86:80:72:90:97:4d:38:6c:4b:
3e:4f:a5:bb:99:b1:e7:2f:05:fd:b5:6a:62:27:6c:9b:cd:36:
10:11:f1:03:3f:96:15:49:b4:35:90:77:26:bf:83:3e:f2:54:
88:90:7e:94:44:59:23:cf:7f:6b:24:9a:fb:d0:51:fc:f8:dd:
f9:51:79:be:8f:09:de:3b:21:74:15:f2:7a:61:63:2f:48:c7:
5e:cd:82:8c:27:0a:61:8b:90:7f:88:e7:fd:f8:6e:c9:0b:68:
b2:86:9d:51:7e:24:3a:f0:dd:90:a3:6e:09:a4:6f:e7:2d:36:
a0:eb:b7:ee:9f:a0:e9:ce:52:a5:71:64:34:e8:93:68:6a:a1:
79:be:ce:4a:58:40:2d:86:60:da:3a:6d:b0:cb:5a:e0:bd:8c:
a0:7e:7b:46:7d:a6:56:df:8f:c3:82:48:d5:2c:6c:30:3d:15:
29:89:bf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:55:58 2025 by rpki-client