Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
File: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft (raw, json)
Hash identifier: VkIgfK+gGztkgZmrSKQLOV4OX7R2s8ZvSeVtxYC+Akc=
Subject key identifier: 23:87:5C:B5:69:F9:77:BE:C4:F6:C6:08:B3:14:B2:0E:48:96:33:B7
Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
Certificate issuer: /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Certificate serial: 0194BD8572D920739E3924B7696CDD19BA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: 1-POC2nfhxokaO34U4IxxrQdEyHg.roa (hash: HGa5ESI5zwwldA7SOJhQSh4vTo8C4LN7Ht6oX1cZupU=)
2: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl (hash: zjni/LUrpDCA9u9A9DgJ0qYaRD6J9FoOAccIiKmmHWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:72:d9:20:73:9e:39:24:b7:69:6c:dd:19:ba:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=23875cb569f977bec4f6c608b314b20e489633b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b0:13:da:37:20:8f:32:fa:38:04:75:6d:f4:
dc:98:89:3a:9c:ba:26:7d:bf:29:3f:27:a6:8c:4a:
b9:fb:20:23:d0:93:44:0f:c2:17:97:a8:dc:ab:61:
60:4c:69:b4:3a:f6:96:01:a8:cd:10:21:10:68:0b:
09:96:6d:23:00:c3:01:09:46:ea:06:ca:32:ee:a7:
2d:d9:61:17:76:18:c2:4f:4d:33:0f:9b:8d:88:c7:
61:8f:98:bc:41:3b:58:d4:c4:8a:ec:39:55:f4:b0:
29:ae:92:b7:97:d7:cf:84:0f:82:57:d7:36:53:4a:
26:aa:f1:bf:d2:ee:39:f3:80:d2:32:58:1c:6c:8d:
b8:b1:59:dd:ae:8c:1c:f2:9b:57:e0:0b:37:e3:7c:
2b:66:62:0e:57:b0:26:78:d4:82:1e:b0:13:29:a0:
87:a6:70:be:3c:7e:f9:7c:d7:92:58:1a:fd:48:61:
4b:b4:3a:60:5e:31:31:11:9c:e3:b1:59:b3:8f:0f:
97:2c:1f:dc:2d:b4:59:1d:59:2c:73:e5:04:91:d3:
e7:ea:29:08:15:41:de:64:85:cc:45:fe:ae:2a:7c:
78:fd:67:d4:32:74:40:43:ac:8d:a8:34:4c:a1:40:
ec:96:80:07:0d:03:20:da:9c:45:4f:82:33:7b:aa:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:87:5C:B5:69:F9:77:BE:C4:F6:C6:08:B3:14:B2:0E:48:96:33:B7
X509v3 Authority Key Identifier:
keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f3:69:eb:58:2a:47:0f:d7:64:6d:33:0d:1e:0c:5c:af:65:
1a:51:de:ae:2a:83:0b:dd:d4:6a:71:7d:d3:f4:b8:50:6c:5e:
42:61:3d:d4:9f:13:29:fb:ae:d2:f6:33:64:df:da:5a:f4:90:
88:c8:52:a4:71:63:be:1d:36:4f:ff:fd:f5:a6:14:c8:dc:27:
b0:f9:5b:a4:86:84:7f:45:d5:c3:82:03:dd:45:24:77:38:dc:
4c:ad:cb:0b:a3:7a:ab:1f:7b:96:52:6e:59:35:f0:46:99:df:
0c:f8:64:bf:f0:41:a9:b1:18:b4:b4:b6:ad:71:d8:55:e3:3d:
41:c5:ce:cc:35:41:7a:4a:82:33:13:ed:c1:90:a3:af:8d:10:
9f:1f:cc:62:46:ea:7d:c8:f6:45:f7:2a:48:ba:ad:e0:ca:c6:
62:10:14:73:4a:7b:c9:b2:b8:45:23:18:24:42:19:60:a5:f9:
2c:a7:0d:b7:10:ea:e3:b5:39:82:62:e7:9b:2d:87:6a:7f:8f:
41:75:bd:ac:0e:c4:94:f7:a6:10:c8:80:3e:53:d3:38:29:1a:
0c:19:55:0d:d2:ab:6a:ee:55:7b:1d:83:75:43:1f:f5:8c:c0:
25:c9:65:a4:a2:51:03:9f:68:c2:48:57:b5:b6:b5:83:6e:cd:
b0:93:c5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:50 2025 by rpki-client