Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
File: AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft (raw, json)
Hash identifier: Nhgw/2qYb05ermBFVVs0J84VL4Yo8eW+B7RyGV9BlBQ=
Subject key identifier: E3:37:36:79:42:ED:25:32:A1:1D:51:92:02:D8:F5:BE:DD:71:41:ED
Authority key identifier: 00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
Certificate issuer: /CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Certificate serial: 0194BCE09E6FBD4763E510BC1A05EBFCD2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
Manifest number: 0398
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl (hash: oQhK5A8wPSaiFR+JbJpctgryc06F39T1SDNChbkdVeA=)
2: e0RKB6c0KB07YznYp0xB1MsPmzk.roa (hash: qPmTA1Xz3mqQ1fzxdYI8NmB7dWpfMeJeVGXYLIJQJaY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9e:6f:bd:47:63:e5:10:bc:1a:05:eb:fc:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=e337367942ed2532a11d519202d8f5bedd7141ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:dd:6f:88:8f:a1:c8:61:11:dc:9b:b4:f6:
06:81:39:a7:0f:3b:52:fe:53:67:d8:44:9e:33:c6:
5d:f3:5e:dc:d1:43:38:d2:15:f5:5e:9f:20:dc:10:
d7:23:26:d0:c7:71:5e:8c:2e:92:4e:88:4e:4d:99:
f3:fd:eb:68:f6:a4:e4:26:a1:82:e5:9e:c0:4f:00:
3d:17:b5:7b:d3:f1:e5:69:ca:4f:91:09:1f:53:72:
72:2d:fc:4e:63:87:84:9b:7a:46:50:b3:90:fd:4d:
ad:ef:fe:7d:a6:06:90:04:18:a1:b6:3c:c3:6b:03:
9b:6c:3e:ba:ab:e8:f5:8c:c8:cc:d8:32:de:df:36:
82:1f:95:53:a2:13:9b:68:f0:98:2f:4f:54:b8:9e:
76:c0:67:ba:32:dd:50:c4:cd:20:1e:b0:90:97:14:
21:23:58:31:cb:c6:61:5b:cb:30:b5:01:ed:03:fd:
44:ec:60:63:68:6d:7a:e0:3e:5c:01:08:fb:75:f1:
39:83:68:08:df:ef:e5:a6:35:22:d2:50:2b:df:86:
5f:f8:d3:1f:bd:3c:3c:c4:88:f2:1b:a0:04:75:b3:
cb:b3:02:fc:29:21:69:cb:96:3a:df:08:2e:6e:92:
b3:39:dd:ce:ff:0a:ba:06:4a:2a:8f:32:d4:47:99:
e3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:37:36:79:42:ED:25:32:A1:1D:51:92:02:D8:F5:BE:DD:71:41:ED
X509v3 Authority Key Identifier:
keyid:00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c9:ea:02:9a:c8:92:38:ff:7d:bd:91:61:03:23:88:2d:f5:
93:4b:a3:d0:47:9f:59:9a:5d:8c:5e:2b:d0:ff:9f:be:6d:ad:
d8:56:c0:c3:9f:ed:fd:11:48:00:de:83:d6:b0:7e:30:37:37:
2a:a4:f0:8b:51:69:bf:19:6e:67:6f:9f:c8:1d:ce:c5:32:c8:
63:39:e5:5f:48:7f:6d:2f:cc:5d:ca:f3:4d:dd:07:39:f5:8a:
ce:26:a8:8e:80:78:68:90:21:75:32:05:ad:4f:1b:e7:36:f6:
a7:86:b5:a8:2d:bb:44:da:1d:44:bb:50:7f:9d:94:a4:53:0c:
04:9d:96:00:63:a1:ae:58:d1:3e:e6:cd:52:a9:e1:14:94:05:
82:a4:2a:4a:14:48:40:8d:d2:71:f1:e9:f6:c2:22:50:2b:d9:
60:45:2d:1b:74:aa:2d:cb:17:e8:3a:ba:f8:12:7e:6f:d8:68:
ef:99:18:20:3f:cf:eb:e7:6b:c1:f9:da:eb:cf:79:2a:17:79:
6d:2f:e7:44:09:e2:07:fc:ff:79:df:22:a9:2c:38:d4:14:3a:
e0:cd:10:32:89:f5:45:d2:b1:f1:cc:da:d9:ce:9e:5c:65:85:
a8:98:f2:b5:2f:7d:17:05:7b:8b:0a:c5:a2:d7:c0:12:98:cd:
ed:19:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:21 2025 by rpki-client