Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: 0Gzud2B2eBn1+RBeE4HdWfbsRotdyN7IUIpEiEflXQI=
Subject key identifier: 35:21:87:0E:F4:CB:A5:C8:CD:E1:A1:2C:FB:2B:F1:5D:F9:9D:91:27
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 0194BC04F59A06C006EBB2AD01E0843B789A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: 6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa (hash: nJO5IBDQ2MODS/Zojmv3q8UXuHQA1f7Z7pPIMcFUXg8=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: cTecyap+BcqKvwaNXO50+57gvvcAJWMEtqNuiFrK0vA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f5:9a:06:c0:06:eb:b2:ad:01:e0:84:3b:78:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=3521870ef4cba5c8cde1a12cfb2bf15df99d9127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:00:6a:32:d3:0b:90:79:27:52:15:e5:5f:
56:99:8f:2c:3a:8f:01:93:57:2c:94:45:3d:8c:6a:
b6:a0:08:2b:0d:ec:e9:fb:f1:94:61:80:9c:35:39:
48:f1:c7:16:30:4c:9b:31:bc:48:e3:c7:0f:04:d7:
c5:1a:5e:87:9a:30:22:22:4a:93:fc:96:05:c1:e8:
cd:e9:cb:ab:87:46:9d:39:41:30:fe:e6:e0:da:5d:
53:0e:f0:6f:b9:ab:cd:76:0c:10:c2:06:76:fe:01:
0a:76:56:89:c4:ee:94:b5:bf:a1:02:fd:05:73:f8:
52:81:ad:8d:db:43:29:ac:f5:d6:26:f8:d2:26:a0:
d5:89:a5:b0:04:25:5b:8f:e0:9a:a1:b8:3e:90:07:
00:8d:26:02:c8:e7:32:f6:4d:50:2e:2f:90:05:00:
61:db:53:ec:e3:9d:76:50:38:a1:ce:03:5b:cc:8d:
54:0c:80:c2:41:b6:5c:42:3e:73:86:91:c1:17:84:
36:fc:1d:22:1b:80:9c:1b:72:e1:ed:30:e9:55:d4:
c1:3f:6b:e6:60:2c:e8:fd:1e:e7:45:2e:ed:28:df:
61:38:5c:62:70:7c:66:40:6c:7f:9e:30:e0:b2:44:
c5:bd:c9:5d:9e:7c:20:ea:37:15:cf:2e:6a:8a:19:
05:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:21:87:0E:F4:CB:A5:C8:CD:E1:A1:2C:FB:2B:F1:5D:F9:9D:91:27
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:51:3f:06:4b:64:ca:17:06:37:b5:38:2d:5f:1d:7f:8c:74:
c2:97:8e:08:49:f6:b8:ee:30:c2:0f:16:6d:80:05:11:95:53:
4b:37:ae:61:f5:26:36:0f:92:c8:26:6d:63:c5:0d:cc:00:d8:
f1:22:3f:48:4f:e1:63:8b:25:f5:d6:83:d0:29:e3:6f:e6:f2:
85:c5:f1:ef:bd:c2:29:94:0f:82:f2:bb:68:7e:6c:5f:85:4f:
af:40:82:05:ff:9a:89:b4:6b:e7:2d:8c:00:6a:62:5a:8f:4f:
32:d0:99:97:86:38:fa:40:22:c1:35:4c:77:18:c6:61:47:ea:
ca:6d:34:a8:c9:a2:c0:04:7e:c0:85:9b:ce:d3:ff:50:90:c2:
17:61:83:1c:78:0c:f2:0b:d2:72:a8:b6:5e:c1:44:72:99:0a:
2c:96:8b:d1:09:88:4b:7d:6e:9b:62:b2:de:82:c2:fc:30:db:
fb:50:72:36:fc:90:75:c2:9f:1d:5b:40:2c:1a:ff:bf:95:0f:
a1:0c:89:00:9a:39:0e:72:3a:3f:46:d3:92:c2:a4:4a:6c:25:
60:5d:ce:fb:90:4b:03:62:0c:72:26:73:b0:7b:69:1f:60:b9:
32:07:0c:63:44:92:94:c9:51:70:28:66:72:8d:06:a5:82:a9:
a2:84:99:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:45:30 2025 by rpki-client