Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File: AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier: Jdd0UC8nStC+VUQInSmj4NeOvrJ2ncND2SwwLCCb3Jk=
Subject key identifier: B4:62:23:81:40:99:BE:BF:B8:DC:12:1F:8B:33:D2:2C:AB:46:E9:08
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer: /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial: 0194BC72A76E565209045B69E75524CB146C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number: 0CED
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: ieWASScAD6Nv4ml8RdOZo7A3RWTgY44x6m1IUfCMsKQ=)
2: NDyhuvBiD7Dcf-VvAcHjeKP4Wls.roa (hash: oeDnEopXVy5MJcNbGxGeEZ1ceng1jmSd304y/xLBjoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a7:6e:56:52:09:04:5b:69:e7:55:24:cb:14:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=b46223814099bebfb8dc121f8b33d22cab46e908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c1:ab:8e:32:80:db:3e:08:b5:87:16:ee:1e:
92:f2:5c:93:89:02:e4:12:16:98:2e:d8:9d:ee:35:
8c:81:79:dd:51:48:e2:51:e7:97:e3:17:c9:4f:d0:
72:18:5b:88:84:9a:19:54:77:d0:f2:dd:5a:aa:11:
a5:70:11:53:38:e1:18:37:29:8f:f6:59:70:a7:d6:
21:8d:bb:55:da:f0:db:be:ec:11:54:3e:31:99:95:
b5:e5:cd:b6:c4:44:2d:f6:10:25:ab:4b:96:3a:99:
b8:8b:b0:74:53:52:c6:b8:4e:55:27:af:a1:d5:99:
ee:a2:33:0d:fa:47:f4:97:a5:40:fb:aa:f9:61:c9:
a4:9c:5b:8a:df:db:cc:0f:6c:8b:2a:5e:11:b9:53:
41:4b:87:28:8e:1b:d6:54:ad:17:a7:00:27:6f:db:
cc:11:16:51:eb:f7:8b:01:3c:c3:3b:ec:a9:f3:b8:
79:bf:86:24:99:e9:62:f3:16:4d:e4:50:2d:7b:09:
17:9b:74:47:dc:cb:11:a4:7e:13:34:06:15:02:cd:
88:9d:a7:26:d1:f3:a3:7e:7a:ea:3a:2d:68:dd:18:
c2:e8:68:ba:28:0c:5a:20:e6:93:53:f4:9b:6f:9c:
af:27:eb:7c:0e:d0:bc:8f:0e:99:3c:f2:e8:06:7d:
f0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:62:23:81:40:99:BE:BF:B8:DC:12:1F:8B:33:D2:2C:AB:46:E9:08
X509v3 Authority Key Identifier:
keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5d:d8:61:79:84:20:c1:45:ab:cb:7e:ed:98:95:4f:06:ab:
da:ba:9d:3d:d9:5c:d4:e9:cc:99:63:28:87:3f:89:54:48:c8:
34:88:7b:ac:f9:a5:49:3f:8a:0a:35:62:64:21:9d:4e:3b:47:
eb:17:a9:a9:d0:24:85:48:4c:7b:72:d5:7a:47:00:ac:06:96:
fc:c5:fb:4d:94:70:02:dd:da:ac:4f:5a:3e:64:80:62:c0:d2:
2e:95:34:d3:3d:79:e8:36:d1:14:e3:4b:42:7b:e3:69:89:1f:
77:55:4e:f8:aa:1d:35:5c:6e:86:f1:ac:12:ca:e6:37:2a:7f:
25:74:06:2a:11:54:fd:3b:50:85:99:42:3a:0f:d4:a2:69:9f:
0d:84:47:a1:1e:18:eb:f4:f8:19:f3:f5:9c:61:db:53:b8:aa:
0c:f8:db:f9:9f:13:45:17:51:ab:f8:73:4f:aa:1c:3c:61:f3:
c1:d0:4a:9e:5c:87:6b:eb:35:b2:5b:79:70:b1:12:07:3d:2d:
c8:0a:b4:18:50:ab:af:ef:36:ed:40:69:0a:19:6a:c2:9b:6b:
b3:de:78:4e:0f:52:08:e0:98:c2:c9:7c:e8:77:9b:56:5f:62:
c1:be:95:e3:e7:82:ad:24:41:05:0b:df:99:57:70:9e:bc:f6:
75:1b:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:20 2025 by rpki-client