Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: 8nMU14Efox+6uKWjvnrSrHKdz0mijqsTatxPVzOlE7E=
Subject key identifier: F8:24:73:D8:3D:B3:1F:D2:00:06:DD:78:B8:ED:A4:24:FA:3F:53:BB
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 0194BD8597D840A74DD8912E9AEA40378EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0956
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: gbqjp7UTpxOUclfUBbxKHaWet3A7tjdK73HdprIOOfA=)
3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:97:d8:40:a7:4d:d8:91:2e:9a:ea:40:37:8e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=f82473d83db31fd20006dd78b8eda424fa3f53bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6e:77:97:8b:b7:c5:5d:aa:14:0b:50:f7:a3:
a8:d9:81:0d:93:8d:86:fc:aa:20:7d:3b:bc:4f:8a:
89:13:22:f2:d3:c0:f1:c4:c4:ec:f7:90:5e:02:2c:
98:fd:a4:5a:e7:de:b7:31:1a:10:d1:91:e8:ac:10:
87:58:5a:b9:dc:3f:0a:16:bd:b1:7b:96:07:bd:bc:
69:e4:0a:cf:59:59:f8:16:2a:47:d1:22:67:98:e2:
78:1b:af:98:7d:a2:dd:44:9e:bc:9b:97:a7:3b:b7:
b6:4a:93:ed:e4:da:c2:59:5d:37:67:78:6d:be:8b:
64:9f:8f:3e:0c:36:67:28:64:89:51:5e:d9:c5:39:
15:c3:10:fc:0b:e5:23:b2:a8:3a:9e:95:38:af:80:
14:13:8d:4c:7f:37:aa:b4:28:1d:38:17:b4:6e:2b:
2d:0f:b6:76:19:37:a7:8b:2f:16:2f:a5:ef:b6:3c:
e0:93:ed:a9:e9:30:fe:60:78:22:cb:05:2e:18:c9:
d9:63:92:b6:5b:00:53:86:1a:a5:68:46:47:0f:a9:
5a:d2:b5:d1:8e:57:40:3c:c6:44:95:a1:c5:21:6f:
d1:05:a3:74:22:6a:42:8d:dc:88:aa:6c:86:23:67:
76:26:4a:78:25:68:e6:ba:4d:a0:45:f4:d4:17:e3:
e1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:24:73:D8:3D:B3:1F:D2:00:06:DD:78:B8:ED:A4:24:FA:3F:53:BB
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:13:eb:4a:36:76:8d:da:18:04:23:bb:73:3d:91:9c:46:55:
3a:c3:6b:15:9d:af:21:39:74:01:60:d4:ea:c8:92:c6:3a:67:
d5:37:bf:23:ad:77:04:53:0a:e9:8f:c3:85:3a:45:2a:66:ca:
25:b0:76:62:73:d3:41:8f:c4:58:25:44:a8:8d:1a:82:16:d6:
20:ae:72:34:6c:30:e6:08:8b:4f:eb:18:46:d6:59:7d:b9:06:
ef:76:bc:d2:f8:23:99:77:de:6f:fd:b8:ba:b3:a4:4f:dd:3b:
2d:ce:21:e7:ac:6e:be:1d:9a:84:20:b4:fd:2e:1c:0d:f5:1c:
bb:90:40:4d:56:82:54:94:1b:a2:c4:13:59:a0:ad:99:57:8e:
ff:1b:33:42:bc:c1:bc:a9:fb:89:60:30:1b:06:5e:95:f3:64:
eb:8f:df:e3:a0:f0:61:40:c6:e1:3d:8c:00:f3:5e:b7:c9:94:
2f:ab:38:0b:5e:b3:f0:2b:6f:14:e8:56:20:63:e7:3f:1d:41:
0c:86:11:36:0c:9a:ff:1d:ad:8d:c9:77:2c:ea:43:87:7c:ce:
db:bf:19:8c:10:54:d5:62:d9:7f:16:8c:41:9b:5a:c1:13:b5:
d0:f5:95:b7:78:a3:41:98:e3:a6:ad:c6:04:1f:d1:68:80:72:
a7:18:71:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:33 2025 by rpki-client