Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
File: aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft (raw, json)
Hash identifier: UEpDMsnHtfesZz1/LkqfI8iU3fUlIPWudRKcDLt+Xbg=
Subject key identifier: F4:B1:6C:27:16:5B:04:49:0E:53:99:19:F4:3D:ED:AF:61:6A:B8:91
Authority key identifier: 68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28
Certificate issuer: /CN=683b33dc7218b3fe883c49505134cb39a664fd28
Certificate serial: 0194BD854EA336B04EADDA717CEEB7933C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
Manifest number: 0894
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: PecnHh8YFMYIBEgD1PQBC-sYFMY.roa (hash: G67Iyj0Q7isunYlJO9b465cfL0xQGyEo+TS/2SlDQcA=)
2: aDsz3HIYs_6IPElQUTTLOaZk_Sg.crl (hash: V338uubBouUU/LmGkq7XfoUzWYIPOCTSv5Io3ABC4Ww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4e:a3:36:b0:4e:ad:da:71:7c:ee:b7:93:3c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=683b33dc7218b3fe883c49505134cb39a664fd28
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=f4b16c27165b04490e539919f43dedaf616ab891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:87:ac:44:13:c5:c5:37:33:36:53:d6:c3:
b4:9b:e8:92:95:ad:62:e2:7a:01:fc:98:8c:1d:6e:
1e:7a:0f:13:5c:1a:cf:ae:ad:d9:3d:3d:e1:12:4e:
2d:a7:dc:70:82:93:48:e8:ff:72:f1:8d:bd:85:d8:
c2:a0:51:53:ef:e6:3a:66:92:31:54:0f:8f:86:57:
ee:39:08:74:90:74:11:af:f5:b0:6c:42:25:c9:f3:
bb:f9:0c:33:cc:56:9b:2b:a6:bf:6e:08:0b:66:21:
09:22:e7:a6:23:3e:8c:b1:de:24:e9:22:8a:ba:ae:
f8:32:b3:bf:a0:f5:92:8a:3f:c1:ad:3e:76:1d:2d:
38:47:90:a9:2f:8f:11:45:84:98:51:a0:8e:f6:19:
4a:15:06:37:61:aa:8a:45:da:80:08:27:ec:e6:be:
7d:1e:2b:85:18:89:cc:eb:50:4b:bb:f1:3e:12:10:
4b:3a:27:82:f7:09:97:47:26:5f:ef:88:2e:83:cf:
f3:14:dc:26:f0:e2:0d:2c:15:ba:0e:be:f8:06:d2:
cf:46:42:5b:56:39:f4:02:62:e4:de:48:ee:8f:58:
8a:6d:ed:b3:41:cb:04:69:ae:2d:f3:e0:54:74:e7:
64:ae:e4:03:5a:c1:c2:76:2f:d8:e9:1a:ee:8c:f5:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B1:6C:27:16:5B:04:49:0E:53:99:19:F4:3D:ED:AF:61:6A:B8:91
X509v3 Authority Key Identifier:
keyid:68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:00:50:9d:bb:db:ae:61:4a:68:38:82:cf:7d:d0:fa:07:06:
62:8e:89:d5:e1:0e:8a:8b:43:6f:58:3a:c8:2e:56:a5:a8:f0:
c0:f6:31:83:b8:ab:7b:71:c2:15:5b:f9:fe:4b:33:d5:aa:b7:
9d:9c:cb:64:87:d3:66:a6:d2:b0:13:aa:18:c4:a9:1a:df:8e:
fe:1b:8d:c4:50:55:fc:66:1a:98:89:e8:51:66:12:54:bb:2e:
03:fd:67:d7:37:69:3f:98:a8:72:e7:2f:1e:04:a2:e8:e2:51:
94:7e:01:72:19:2c:9d:4e:de:b8:28:7f:1d:05:2e:cd:2e:0c:
78:78:4a:18:3b:ff:54:10:69:7d:52:b2:99:26:33:17:ae:3a:
6f:c1:72:91:7b:fa:ab:4b:06:87:e9:47:a0:cb:96:c2:7b:91:
12:ec:ea:33:e7:2a:0f:dc:a5:cc:22:01:eb:3d:55:23:b9:fc:
66:13:20:1a:be:3c:10:3b:77:3c:8f:83:2c:72:5c:a2:31:88:
83:b1:4d:b3:9d:fd:15:08:c4:21:71:f5:3c:5e:33:2c:52:37:
7c:4d:cd:25:1e:8a:fa:09:a4:ff:f5:a1:f0:5e:0a:fa:22:9b:
98:03:c0:b8:4a:16:b6:79:08:69:9b:22:63:2c:75:b3:67:ad:
e1:dd:29:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:40 2025 by rpki-client