Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft
File: ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft (raw, json)
Hash identifier: xquISkuhH2893IGewjO3wR4m04yEvy61Pwm+2YmMEZw=
Subject key identifier: B4:95:F1:CC:55:CC:44:25:EE:2D:3D:35:4B:C8:9F:65:27:9C:32:40
Authority key identifier: 02:91:D4:DE:13:0D:A6:AA:CE:22:ED:99:65:0B:E1:82:49:7E:0B:CF
Certificate issuer: /CN=0291d4de130da6aace22ed99650be182497e0bcf
Certificate serial: 0194BD857AAB23C2FEBC501C9D4B9A167176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: ApHU3hMNpqrOIu2ZZQvhgkl-C88.crl (hash: HKFDxbZH94PziSLcmsj843s5x0RfqHcgS8jktJSffls=)
2: Bbv2QAFPf4Szau3NTd0aayAiypc.roa (hash: cRocTgGmyLRnpI3qcdUdz3Vd6OE/CS3oghy6+UyVfVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7a:ab:23:c2:fe:bc:50:1c:9d:4b:9a:16:71:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0291d4de130da6aace22ed99650be182497e0bcf
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=b495f1cc55cc4425ee2d3d354bc89f65279c3240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:b3:a5:33:64:a9:5f:34:5d:17:e1:7b:cb:
12:68:72:02:6c:5e:cd:74:27:38:f1:64:f4:5f:d5:
2c:0b:98:54:78:4f:9c:73:02:17:f3:8a:10:c9:ab:
46:67:39:a8:19:18:c3:4c:ac:bf:aa:9f:ff:9e:44:
9c:09:52:c9:1d:3e:fe:6e:5d:f4:2e:66:0f:1c:b5:
5e:c1:3a:99:be:aa:76:36:cf:c3:3b:fd:13:92:62:
4d:1a:5a:fa:b6:27:5e:8f:7e:0f:63:aa:57:0b:1a:
65:bf:7f:6b:08:c3:68:6d:0d:90:37:ea:53:5d:b7:
80:1b:df:aa:ff:5f:e3:fa:ef:ac:3c:2b:3e:2d:c7:
66:9b:3d:a6:46:bc:d7:b3:3e:8e:62:2f:e7:b3:17:
8f:21:ba:9d:fa:bb:fb:b6:11:ac:27:05:9a:27:b3:
5d:a5:4d:c1:a7:dd:68:09:c9:47:f1:32:61:e9:2c:
06:0d:c3:8c:d3:2d:24:03:30:e4:25:c6:97:2e:24:
d1:92:16:ff:2b:68:f8:98:56:b9:eb:1f:f5:fc:90:
a4:75:ea:e5:47:9e:09:1a:b5:91:61:23:5a:dd:9f:
10:d4:8c:97:9c:f8:86:e6:c5:44:03:5b:05:a2:4d:
55:26:e5:65:36:c7:64:01:c9:81:c9:c8:e3:15:75:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:95:F1:CC:55:CC:44:25:EE:2D:3D:35:4B:C8:9F:65:27:9C:32:40
X509v3 Authority Key Identifier:
keyid:02:91:D4:DE:13:0D:A6:AA:CE:22:ED:99:65:0B:E1:82:49:7E:0B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApHU3hMNpqrOIu2ZZQvhgkl-C88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a9a479-9e2f-4cb0-8ded-7781681077f7/1/ApHU3hMNpqrOIu2ZZQvhgkl-C88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:63:aa:01:6f:97:7c:b2:8b:c8:d2:c1:ec:0f:5c:64:f0:c5:
ff:08:1c:e7:b7:9c:bc:1c:2b:99:9a:e8:3c:b9:74:f9:ab:8c:
8d:c2:7e:2f:19:f3:72:cd:25:07:6e:40:f6:07:f2:9a:a6:01:
81:33:53:e6:59:4b:14:24:75:6a:c0:13:8d:82:ea:ba:8e:30:
d6:d4:8a:6e:58:05:96:74:65:22:2d:cf:cf:db:db:16:34:f1:
7a:af:26:fd:e0:7f:49:90:10:72:e6:b0:0a:f8:67:6b:13:82:
47:80:a8:9d:e4:be:65:14:0f:c3:ac:a3:e5:14:85:93:6a:77:
c5:4e:18:38:b1:ee:de:71:2b:25:de:36:05:b7:7f:1a:84:e3:
a0:1c:b9:6b:80:04:d1:c9:00:4d:2a:83:67:d3:34:9f:38:68:
9b:6b:18:34:84:2e:30:92:1b:0f:ae:e7:67:c0:77:72:6c:a9:
d7:1b:ce:10:7f:ec:80:b8:c0:59:66:a5:29:d9:b8:3b:1b:8d:
f1:ff:1b:1d:2c:71:a9:c3:4c:f5:60:dc:62:ec:9b:87:1c:3b:
aa:57:81:eb:00:b2:39:5d:99:a3:87:cf:47:26:ce:00:34:88:
65:b2:64:1c:a5:ef:1b:14:6c:b0:3d:90:ed:0e:a7:0d:f8:f2:
d2:fe:be:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:21 2025 by rpki-client