Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier: wB+dT0OApYjMA6+cx5y4vQX8C4aicHpb9cE7nqOwzOY=
Subject key identifier: B7:B0:E7:ED:31:31:99:23:FA:8D:A6:15:76:36:28:5D:65:03:2E:0D
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial: 0194BD8593E52D1C4FA4FF49BA031D13937D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number: A2
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: Nwn600VTBWhm0oViHqMPk5sbBFXO64D04sClfHsySBY=)
2: MjNTeuDZoZBSiYMMBlGbwm18F_4.roa (hash: xrzN9SEKC0+LvNwMnFZs7anGQYuDHjD+YhAY9xZXYug=)
3: WzQqWTPX0fEyIlFkp7-iNqdN2P0.roa (hash: Q+kUeFVbSuKwCm5qvDAhc5eM1Ixbr2hlTlxwU89PPRY=)
4: fT1ahSf9wi-gW3Iq--IGboVi4C4.roa (hash: YnGxJTeY8IKamyoquQxtFC7vxkI/y/D59R3eBCQNWcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:93:e5:2d:1c:4f:a4:ff:49:ba:03:1d:13:93:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=b7b0e7ed31319923fa8da6157636285d65032e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ef:09:5c:8d:9a:f2:5b:02:de:52:7f:dd:09:
f7:85:5f:59:be:84:45:47:56:02:f6:01:f5:40:3c:
72:13:8a:90:aa:9f:08:5c:0d:34:eb:1a:c9:92:db:
6b:a9:8d:fc:21:98:0b:02:77:64:16:c1:48:3e:31:
e3:37:87:56:07:31:cc:4c:ed:8f:9e:89:ea:cf:17:
3f:a5:4a:bd:1c:c5:4b:ec:31:f9:93:28:3f:0d:a1:
c3:0b:7b:42:1a:6e:ad:bf:32:49:0e:0a:6a:3a:f0:
de:d6:9b:30:7d:2e:d6:c2:db:14:3f:52:39:76:33:
ad:8a:e6:d8:31:b7:a7:03:07:ae:bb:42:6e:a2:e9:
63:39:87:18:56:76:8b:00:15:c0:5b:50:de:4b:67:
eb:aa:90:8b:bb:1a:d3:cb:b5:09:f0:a1:46:c0:ef:
5a:b7:6c:d2:ed:86:69:54:7b:b5:da:fd:09:55:e7:
ff:cf:17:73:7b:0c:11:4c:a9:d1:b0:b8:bd:de:34:
8b:0a:f2:3e:cd:1f:e0:bd:d8:ba:21:20:47:f8:b9:
1e:d4:1b:e4:86:a0:2d:73:6b:c1:af:28:9b:e6:f5:
ef:d3:b5:f7:2b:8f:b0:9b:8e:a6:23:8a:6e:88:7a:
c4:89:6b:bd:b1:0c:8f:d9:49:e3:8f:72:34:23:23:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:E7:ED:31:31:99:23:FA:8D:A6:15:76:36:28:5D:65:03:2E:0D
X509v3 Authority Key Identifier:
keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:78:f0:44:5b:c8:a8:e9:bb:98:59:a0:7b:11:25:d5:4a:72:
25:a6:a8:be:ba:76:f6:c8:cb:42:7f:25:2e:21:64:4f:1b:0e:
86:77:de:49:f3:b2:9e:15:d4:f4:aa:42:5a:71:2f:0b:65:37:
b6:82:10:66:14:f6:00:af:19:c8:64:74:95:d7:fd:42:e3:41:
fa:b5:6b:a8:0b:19:24:ef:c2:f1:99:43:d9:7a:00:6f:c6:1a:
fe:62:fd:7d:f8:5f:d6:6e:87:c0:53:b2:09:bd:d6:04:67:2d:
75:61:84:62:2f:74:97:b8:cb:f5:08:bf:22:2b:82:27:e5:f2:
01:5a:78:cc:c4:0b:56:3d:38:54:7c:7b:33:12:18:01:ba:b1:
df:fa:55:81:b0:50:f7:d4:37:e4:37:48:aa:41:7f:a1:4c:ae:
a0:07:5a:62:68:80:fe:b7:bb:71:ae:9d:63:2d:73:d7:ad:79:
73:6a:fb:26:59:0c:90:13:90:9f:97:63:1b:d3:2c:e3:b1:92:
bb:86:95:06:b3:81:22:39:32:ff:9c:3a:f5:df:ea:b2:74:d0:
b3:ea:fb:98:41:95:36:9c:3a:fc:f9:ea:da:16:6f:26:7f:a1:
c6:8f:65:10:17:23:35:f1:fc:ae:a0:3a:38:90:71:b6:b8:fb:
16:3d:8c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:06 2025 by rpki-client