Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
File: AydVBXxpvXun2iJSAQnkm1sEzAM.mft (raw, json)
Hash identifier: 22eKFPntGXCZQ2gTiNmdxFXCqZPaDvoKcJupN1c0Kkk=
Subject key identifier: ED:3E:50:91:23:4E:63:E0:F0:50:17:D8:66:DF:09:74:82:1C:62:C4
Authority key identifier: 03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03
Certificate issuer: /CN=032755057c69bd7ba7da22520109e49b5b04cc03
Certificate serial: 0194BC3C7615DDA911BC3093765684B2A225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: AydVBXxpvXun2iJSAQnkm1sEzAM.crl (hash: 4Q9DU3No7U9xc3dZl3L41eFCkNQdS0tuoCdQgcFcfOM=)
2: EJzvV6VT4JO2fNcaeaZDcT8DKYo.roa (hash: bG9n2ritOo8P4pLXuKhyV+b01tNOeWKOB0xqyu4uUe4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:76:15:dd:a9:11:bc:30:93:76:56:84:b2:a2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032755057c69bd7ba7da22520109e49b5b04cc03
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=ed3e5091234e63e0f05017d866df0974821c62c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:63:f5:76:d2:45:6f:79:ed:8a:e9:e1:fb:
75:e3:d0:26:b9:c1:e2:2f:fb:d7:f2:76:8c:8f:53:
cf:1e:4f:a7:0a:49:56:87:b9:53:fd:29:15:09:7d:
75:18:30:be:0d:5b:4b:c8:3d:73:e3:3f:72:9b:99:
77:65:8e:15:9c:2d:1e:34:41:cf:25:0b:3a:a9:8d:
2d:bb:1d:0e:c1:b2:c3:b8:2f:ec:00:6c:78:39:a9:
ea:37:d7:7a:86:ad:56:d1:53:ee:49:c9:1b:ea:ff:
e3:ab:29:2f:dc:24:02:bb:c0:e3:d2:32:ef:56:bb:
88:3c:66:ec:d1:68:6e:56:f7:4e:1c:78:05:c2:d1:
fc:29:d5:e1:76:24:be:85:9c:f9:0f:32:83:2d:9c:
01:63:17:4f:d6:cf:f0:3a:e0:e2:de:b8:5d:9f:03:
48:d3:55:b4:1f:d7:c5:fb:5b:67:b7:ab:6d:c7:12:
35:33:4f:2d:f3:fe:3b:a4:11:41:7d:97:3f:76:90:
cf:ee:62:b8:21:84:eb:96:c3:b4:87:e6:02:b4:e8:
e2:22:a4:b0:1d:89:40:3a:6d:52:ee:1f:9b:87:ad:
20:2b:92:03:1e:83:26:27:b1:49:f1:cd:29:a9:3c:
42:4d:98:a7:b6:51:40:3f:16:47:65:18:0d:2c:ae:
63:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3E:50:91:23:4E:63:E0:F0:50:17:D8:66:DF:09:74:82:1C:62:C4
X509v3 Authority Key Identifier:
keyid:03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ac:3f:64:ae:e4:ea:a6:06:da:68:d9:93:54:98:61:65:4e:
36:71:c2:6e:9b:7d:dd:6f:fd:4e:45:19:7b:27:58:10:5c:74:
21:42:a4:bb:4e:72:fb:fe:c5:0e:56:77:80:40:19:5c:5d:09:
41:44:bb:9d:f1:68:eb:fc:7d:48:b5:86:ae:bf:92:d8:f4:b4:
6c:98:27:76:e8:d3:9e:41:74:ff:a1:e9:74:1b:f4:93:8a:84:
ac:cb:f9:de:ac:c5:10:56:0e:36:af:b1:40:91:47:e7:01:8a:
b7:66:49:b0:75:15:38:b0:b5:54:61:c1:18:95:57:19:e1:eb:
c2:6c:ab:db:b1:02:0f:d4:a5:e5:d5:ba:c5:7d:a4:dd:8b:df:
b9:bf:06:4f:65:5b:8a:08:70:57:af:50:9b:c5:f4:1a:5c:ce:
a9:40:bd:cc:4b:24:53:54:c3:d2:09:59:13:a4:39:a7:ab:fe:
7a:e4:4e:88:03:36:fc:8b:35:9a:6a:30:38:89:0f:05:df:b5:
6a:f0:36:c5:86:3c:37:42:20:df:b9:db:1c:2e:7c:cd:97:d0:
63:e3:ee:f4:51:dd:e0:d7:84:42:2b:05:db:82:10:91:72:9b:
b8:52:4e:a0:8f:fc:d3:90:fd:15:2b:08:db:dc:bb:d9:d6:14:
bf:0b:3d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:11 2025 by rpki-client