Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: krwALl9CJdDriGzzt+ve+iiCbTr7Fgyx35AY2LEpeI4=
Subject key identifier: F2:E3:B4:42:DD:0C:D4:34:F6:81:22:24:96:5E:61:F1:8E:79:0D:25
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 0194BD852DBB3680C5E129EBCBA0535BB643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 095C
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: 6Z3iiHN3VyWW6gZ2ZKzE17TH2kM.roa (hash: cm3sLpQPG8ZwhW1sT/aVnn9uH1eRaB9OvY6srQjdKdA=)
2: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: nU7Yn6E55pWorwlRaBDxu+H+Ripx48xcVAIimkfFf7g=)
3: Y1KfRgbBfVzefGdkb0Fwgsciahg.roa (hash: aNRmz1hoVc6DWpXca8uL7+cZ3Jjgl7p4/PhhQMng11U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2d:bb:36:80:c5:e1:29:eb:cb:a0:53:5b:b6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=f2e3b442dd0cd434f6812224965e61f18e790d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:51:1e:81:ee:9d:a5:78:8f:4e:b1:f2:20:
a4:21:81:71:ad:bc:a1:cd:cf:65:af:d1:f3:f4:13:
84:f4:a8:53:20:c5:ad:25:62:4e:5b:67:1e:5d:56:
95:6a:44:ea:96:60:4d:19:a6:82:f0:98:f3:2d:56:
13:84:35:18:ff:e0:6e:14:47:7d:bd:4e:38:8e:20:
99:6f:f0:db:8f:f6:42:14:5a:81:3f:db:d7:2c:b1:
cf:2f:10:59:9b:26:c7:ed:ec:6c:68:4d:17:bd:22:
b4:14:3d:cb:68:5b:21:07:f6:3b:44:b9:eb:42:4e:
8a:85:c4:f6:44:3c:dc:8c:c2:98:a7:da:8f:80:2e:
55:4c:6a:87:bc:d3:82:23:a6:73:06:28:d1:ff:89:
46:b2:87:c4:be:41:ba:2b:6d:93:91:c8:88:17:df:
39:66:66:d7:4e:da:8d:69:b6:01:e1:d3:3a:a2:51:
29:d6:43:f8:f9:ea:a7:05:08:51:c7:93:dd:80:dc:
38:60:0b:7b:a4:49:a4:92:c0:60:ac:a3:f9:68:e8:
f5:b8:14:e4:43:8c:61:31:c0:f7:2d:56:bf:16:10:
e6:77:da:d3:a7:ad:8a:3a:0e:65:8a:32:67:ac:1a:
7a:3b:26:38:ac:65:f4:3f:fb:d1:78:ff:1a:1c:df:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E3:B4:42:DD:0C:D4:34:F6:81:22:24:96:5E:61:F1:8E:79:0D:25
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:11:6e:87:d6:51:37:80:cf:e4:80:08:18:88:2a:58:e5:f0:
b1:c5:2a:dc:cb:5e:04:0f:11:a9:19:a1:2a:df:86:d0:f8:91:
c3:47:b3:7d:c2:62:40:9a:6e:b2:38:ac:98:19:25:09:d6:d2:
17:8e:0a:35:21:aa:5c:a6:59:97:1d:0e:5c:45:bd:83:03:68:
ac:a1:ab:d7:2a:c0:2b:11:80:d5:af:15:d0:14:47:d4:81:45:
4b:f9:fc:44:6e:e3:57:a8:7d:bd:89:ce:7a:32:a5:b3:8e:e0:
8e:21:54:5e:50:54:90:da:98:62:39:a4:fd:de:6a:9c:d0:4e:
2d:51:e7:31:27:2e:e1:e7:d6:2c:a2:ea:7f:44:29:a4:30:ad:
8d:93:91:eb:d6:75:10:49:62:46:47:54:1f:70:9e:3d:bb:2c:
df:4b:d6:83:a5:ba:9c:63:99:35:ee:75:e0:b8:3b:c8:f4:ea:
86:c8:0f:f2:0f:3a:dc:94:9d:d1:cd:6e:95:e1:d3:04:bb:a7:
01:f6:bf:68:10:d3:25:89:93:06:80:52:3a:15:01:8a:79:c0:
e7:bd:9e:71:d1:92:ba:05:1a:81:47:ed:c7:8d:0b:0b:21:d7:
55:8b:56:3d:1e:3e:42:60:fc:51:03:a2:f6:0a:98:61:70:2d:
10:61:a9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:12 2025 by rpki-client