Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
File: aDei-kt4dzpmIA_qTFhQepLzEgM.mft (raw, json)
Hash identifier: /xc81SGhuoYJjsnpvG1MbIx1eeVylhTkrgAo5OXS9Jg=
Subject key identifier: 3F:1E:92:D6:18:CD:5E:05:2A:26:FC:37:41:46:0A:AC:CB:90:F3:52
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial: 0194BD17E42A385BFEBF80447C2FE08CE23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
Manifest number: 017C
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: TeI7S8OZx8mbZ1CT76zicAPWzfI.roa (hash: i/HXyRHpcSf9pln1mzWKzux0Q76zSD8sVny0yg1+Z14=)
2: aDei-kt4dzpmIA_qTFhQepLzEgM.crl (hash: 1klqsVaV9uzNdcSLTGceh54GnLkjO/4Kkp4GQ7wLH1Q=)
3: lTJh8IlgtKxtTsHbl0PqQi9XedY.roa (hash: WDZ9b3f2N4SwaPm559/K0k771yOilnYto8OW0s+oHSA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e4:2a:38:5b:fe:bf:80:44:7c:2f:e0:8c:e2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=3f1e92d618cd5e052a26fc3741460aaccb90f352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:de:73:44:e4:f7:10:4b:75:1a:c3:a6:54:
50:9a:96:fc:34:25:ed:80:1e:4b:fc:af:1f:97:83:
3b:14:b1:d0:13:9d:11:eb:ae:28:39:0c:87:a0:f2:
e6:c3:7c:cf:ba:4f:ae:62:48:fd:f2:c1:7f:da:f8:
d6:f4:e8:82:82:26:82:54:48:d5:88:40:b8:e5:16:
df:2f:92:2f:2d:a8:f8:c0:fd:5e:fc:4f:32:b9:42:
47:a3:93:38:e1:5b:9f:16:46:ed:0a:30:56:32:c4:
c0:2b:31:20:90:46:81:3a:b8:bb:fc:4b:5e:b1:ef:
86:f1:98:3a:00:da:a6:50:46:c1:7a:be:c6:63:7f:
dd:43:86:b3:0e:af:07:5d:52:a5:f5:46:df:fc:0c:
ad:21:fd:e7:c2:71:5d:d8:9a:db:e3:b0:b3:38:3c:
d8:ac:ab:e6:14:6b:0b:25:12:2f:a5:4e:67:25:2e:
14:2b:ee:30:1f:73:2c:0d:29:52:8c:36:f3:f1:c0:
a8:54:0c:0e:86:63:b3:72:e5:25:b9:c0:ce:f5:c6:
9b:ae:2d:f7:cd:90:57:b8:fd:6f:1c:b2:e5:35:20:
e0:7a:c9:77:23:49:e7:f8:17:3b:43:3f:8f:2e:6e:
ea:31:ba:8a:e9:a3:f1:98:15:d2:b6:70:fc:38:ff:
cf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1E:92:D6:18:CD:5E:05:2A:26:FC:37:41:46:0A:AC:CB:90:F3:52
X509v3 Authority Key Identifier:
keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:56:2c:41:f4:e3:4d:ac:fb:53:4c:15:e9:a2:04:08:ec:30:
5d:61:ad:00:f7:de:4b:86:c4:4d:8d:39:d6:8d:9a:79:aa:c5:
74:fc:3c:02:4e:fc:20:0f:03:1e:a2:c6:8c:8a:0c:8e:7a:95:
49:6a:20:66:f2:96:9e:6f:ac:4b:18:b0:2b:1b:59:fc:2c:ba:
6e:6e:1a:2d:72:f6:5a:b8:f9:0e:77:74:8f:2c:2e:d6:b9:68:
e8:ac:c0:39:30:0a:c7:74:0a:22:3a:31:dc:0f:1f:59:33:fd:
49:80:80:07:53:16:77:9f:47:37:41:75:76:16:c1:93:22:50:
d0:93:0a:c5:6b:30:cd:79:4e:05:0a:8c:2d:c2:fd:46:57:22:
88:cc:33:49:70:1f:46:5f:e1:5e:51:d8:6d:fc:2d:14:7e:5e:
29:cb:3a:c4:2f:8f:29:85:f3:5f:76:f2:8b:08:f5:a7:59:57:
7c:dc:17:af:3b:c2:fa:37:2d:d2:3c:1d:27:d7:dc:53:f5:82:
fd:50:83:ed:b6:32:33:c8:74:b8:97:41:c7:0a:30:13:5d:f5:
67:18:5b:3c:52:6c:3e:17:1e:ba:46:9f:fc:d6:eb:25:a5:0b:
b3:d0:56:60:de:1b:ce:2c:c6:65:f0:a9:b1:b6:d9:22:d9:1c:
67:07:32:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:28 2025 by rpki-client