Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File: A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier: 9+oK11FVw16uLXY5VlzNMfAC5Kp2Nk4zFzNAux0VFHY=
Subject key identifier: 5D:E1:57:3A:E5:9C:2D:79:0E:22:83:3B:D3:8E:33:80:73:B3:C3:71
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 0194BBCE7CE68F915507D1D431C59BDB6063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: 9t22owOYC7Mw8jA_t9_7gDwHF1o.roa (hash: iV2EeKk18zEE+h5tJ2D8tk3awOGzeRIEDnvnGsDqR3g=)
2: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: 2V27EkNuiJHguxNT1zm3fFLKXvSTWlHY8aMO5ROGuy8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7c:e6:8f:91:55:07:d1:d4:31:c5:9b:db:60:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=5de1573ae59c2d790e22833bd38e338073b3c371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:6f:dc:2d:83:59:9b:e9:ed:58:03:14:68:
19:65:29:68:ba:ee:d9:5d:2a:c7:9c:a8:96:ac:06:
3f:7b:e4:75:7e:95:13:78:48:15:14:6f:50:c1:cc:
3a:c3:ba:61:08:46:22:fc:68:bd:dc:5c:21:03:45:
e3:70:ca:95:29:33:1b:84:67:78:58:b4:12:6a:8c:
81:f6:c8:97:42:6b:9b:ed:c8:97:6d:12:fc:5f:f5:
22:da:d5:2a:89:68:d0:7c:db:f0:bf:0b:41:5e:4c:
e4:a5:66:3e:05:fb:ca:6a:38:a1:30:0a:71:6a:74:
e8:5f:40:bd:dd:31:89:21:34:ac:5f:c3:6a:75:45:
3f:b4:2c:f2:35:05:19:7b:a7:7d:aa:a3:f7:0b:19:
ce:5f:67:6f:5a:10:86:ba:23:83:83:5c:dc:2f:49:
c8:16:86:37:3d:e4:9d:a3:0a:1e:7c:a6:e3:c9:f1:
28:62:79:57:07:e9:2b:88:0a:6e:a5:52:ef:19:86:
55:b7:91:a8:36:28:28:ab:57:2d:bc:4c:78:07:3c:
d3:bf:eb:e0:9d:56:96:51:e9:da:a7:ec:8a:92:20:
89:9f:3c:d3:99:92:f2:4b:d9:44:1f:06:1d:31:bb:
ac:ba:93:0c:e6:bd:57:ee:a7:f2:f7:20:88:90:c0:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E1:57:3A:E5:9C:2D:79:0E:22:83:3B:D3:8E:33:80:73:B3:C3:71
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:32:3f:b1:9b:2e:e8:21:da:1a:65:cb:49:74:b3:35:1a:86:
4f:c2:d3:c8:96:5b:79:58:c7:e1:07:53:1d:41:14:a4:6e:3c:
b3:67:c8:12:cb:b4:b6:23:db:65:9b:f5:ac:f1:e8:fc:c1:ff:
85:ee:38:76:6c:4d:f8:bd:0b:b5:85:59:9f:b5:cd:8b:a2:b1:
7a:ec:ee:52:31:46:82:7d:60:73:84:c4:c0:be:b5:fe:03:ac:
ae:c5:51:e7:57:30:76:a2:3a:05:07:f1:a5:cc:2a:23:72:d2:
d1:55:ad:27:96:c3:50:6a:f5:4b:3e:b4:67:f2:c0:64:59:78:
f0:93:b5:86:85:f7:41:e9:d0:7c:2f:46:ea:8c:7a:3c:61:37:
e7:d1:ee:54:dc:45:ef:de:f1:94:7a:56:2e:59:b9:a1:05:91:
a2:22:02:64:c3:b9:e6:fc:5d:d8:dd:b9:97:a5:81:3a:6e:6c:
d6:07:df:d5:01:5b:1e:23:55:d1:65:2e:21:83:7f:ee:bd:a2:
51:a5:2f:4f:ab:17:7f:16:31:9f:d4:e1:b4:4d:ff:b3:d8:b0:
01:2f:06:58:c7:09:ca:75:7a:c5:53:73:ca:b5:7f:fc:82:9d:
b9:e1:c8:73:df:6b:42:e4:77:8b:be:27:e1:49:0a:be:de:1e:
03:46:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:42 2025 by rpki-client