Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
File: AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json)
Hash identifier: zCGqfj1YfmjNGdbmaVPOjQW+9RDMlZQ72JRSD696D0k=
Subject key identifier: 65:A5:E1:E4:F5:93:EE:A8:3E:10:89:51:E5:47:22:A7:8A:6E:FF:B0
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Certificate issuer: /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial: 0194BCA9E21662E6C35A00E446686B3D4440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: VtQTOw2DmzcivhQQQzGN217QT6tWNGXtCZi+J3jJkHQ=)
2: HrI_ZNL0dOaa5SSqv99U6ELy6t4.roa (hash: n13hSIM8J7SvepGBD+Vp8UM2xhOsDHmf6h7aK70kh0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e2:16:62:e6:c3:5a:00:e4:46:68:6b:3d:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=65a5e1e4f593eea83e108951e54722a78a6effb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:16:18:44:0e:16:05:f9:ef:6d:d4:92:d6:e3:
81:2b:21:6a:92:0c:49:b4:70:22:73:f0:2a:11:68:
13:df:cd:33:70:7d:41:59:07:0f:96:96:c0:52:de:
42:59:df:6f:65:54:d8:9d:ea:cf:06:8a:7d:59:b0:
2e:48:b6:cb:8a:b1:d6:e2:a1:48:27:dd:44:69:ef:
83:00:cb:1b:27:55:bf:4d:dc:72:52:1d:14:56:cd:
69:97:ca:65:11:72:09:55:62:f2:a6:b6:b5:ac:90:
49:7e:43:f2:63:7b:3a:33:58:87:49:df:26:34:44:
e3:cd:db:5d:7c:33:08:50:9f:08:f2:2a:21:94:06:
cd:b4:3e:da:67:0d:5d:33:8c:e6:cf:ec:99:c0:26:
48:4a:b1:a5:c9:10:f7:99:28:55:1f:50:00:fe:46:
78:5e:13:30:09:4b:6a:fa:cc:ab:dc:8a:55:06:a9:
b2:20:bb:af:90:92:76:bf:f3:c2:70:0d:7b:36:28:
c2:e1:24:9d:d3:6f:12:c7:78:f5:00:df:38:35:6d:
23:95:a0:a5:b2:bf:25:a5:3c:7e:05:69:82:50:0d:
76:8c:71:12:79:0a:09:40:87:e7:60:dd:14:75:97:
7d:e3:9a:ad:14:45:48:00:5f:55:b8:a9:c0:ee:a6:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A5:E1:E4:F5:93:EE:A8:3E:10:89:51:E5:47:22:A7:8A:6E:FF:B0
X509v3 Authority Key Identifier:
keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a4:ef:4d:c0:99:c3:65:65:f8:c2:a6:80:4a:2a:31:b4:05:
ca:20:12:04:80:07:f1:02:3b:91:0c:d0:8a:1b:08:09:9f:07:
4b:8f:b9:ed:7d:8e:7c:0b:f7:82:2c:cc:d2:aa:0a:9d:94:63:
bd:05:1b:e5:c0:b5:48:73:d4:7a:4c:6a:20:f5:95:db:2c:0d:
93:5f:ab:2b:0d:f2:9d:2d:65:5d:25:48:6b:ad:b3:54:59:ba:
33:a7:fb:88:42:1c:03:92:f4:78:73:0c:39:7a:cc:83:dc:91:
03:57:35:01:b9:94:29:3e:e5:9d:69:5c:75:37:c0:c2:08:a4:
7e:80:ff:14:f4:3b:f5:2f:6c:b6:ba:6a:e0:77:49:ed:67:11:
66:de:32:0a:df:6f:03:34:7e:9e:0e:29:72:08:5e:e2:c8:98:
5b:09:a7:a9:a5:e6:f0:eb:1e:63:1d:23:56:24:7b:93:01:f5:
b9:6c:b9:32:65:7c:31:53:00:cf:b8:33:cb:ab:f3:3e:ec:16:
57:94:e8:32:60:c7:c8:de:04:f8:c8:d4:79:b2:14:ee:c3:79:
41:bd:60:9a:36:5a:ef:da:ae:76:80:11:e1:f9:7e:0d:7e:37:
a0:24:ea:65:70:2c:cc:c7:1e:36:26:35:04:d0:e2:c7:e9:06:
c5:92:53:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:30 2025 by rpki-client