Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: 6DTpqA6l+A19sf7xzMY85f69FpBP/iPzKTfolq1QszQ=
Subject key identifier: A9:F6:CF:DD:13:0D:68:5E:52:6E:8B:C7:70:0B:D8:33:A7:88:8A:82
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 0194BCAA1185E97897585D6C709A4C7A93C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 0E4A
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: ttkfGJMTG9PVpRru2h6qmQwlTEDr+BshaYZghzaAmew=)
2: YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa (hash: 8GJk/xJD9TDW949jEwNVPLQ5jxG7+jInYSsAj0hFBHo=)
3: hL7gjsE__TvimmJVNhYnW8HxcTk.roa (hash: fSQmS4KDtYP+UxUBfXGw0aeIOC4KTOr+x3hlF+s6H3s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:11:85:e9:78:97:58:5d:6c:70:9a:4c:7a:93:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=a9f6cfdd130d685e526e8bc7700bd833a7888a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:91:cd:54:1f:62:02:f6:5c:b7:2e:59:26:
0f:b8:d1:83:be:9d:01:29:a5:c0:07:f1:09:d2:5e:
6c:48:18:4c:50:79:28:0b:20:30:ca:ae:d3:eb:8d:
91:88:ce:a0:48:9f:93:3f:11:68:33:88:6a:60:8b:
44:25:5d:af:17:5a:30:c6:8b:9d:ed:9d:a8:3a:b3:
c6:44:c2:d1:60:9e:ec:5d:39:e7:7b:f5:87:0a:8b:
2e:0b:63:04:b7:40:14:96:e5:43:ae:2f:71:dc:3b:
24:f9:45:1b:c4:2c:20:53:81:6c:79:99:b6:da:7a:
d5:fa:05:0a:e3:21:ec:d0:98:51:b9:d4:f1:00:8a:
02:6d:71:be:5d:d3:e4:df:db:7c:32:83:72:0d:3c:
ae:3d:3d:39:20:38:18:8d:00:09:af:f8:61:39:8c:
b9:72:46:a9:72:13:bf:e3:ba:af:a0:fa:bd:a8:e5:
e4:0f:7a:8c:1e:f0:31:c9:f5:0d:6e:0e:d8:2d:6b:
29:b4:58:2b:15:61:59:3c:28:9c:de:03:6d:ab:bb:
3f:ad:9f:01:0c:5e:59:7c:73:0c:51:6d:58:b9:c9:
7d:ec:4c:43:e7:73:ea:ce:f9:22:73:45:c8:6a:4a:
1a:21:3c:ea:a9:0d:0f:56:51:5e:d3:e6:ca:cf:78:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F6:CF:DD:13:0D:68:5E:52:6E:8B:C7:70:0B:D8:33:A7:88:8A:82
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ab:00:b2:44:63:69:8d:ba:c7:b9:bc:8e:aa:18:77:38:0c:
5a:95:f6:c1:89:d6:eb:29:ff:dd:b4:42:82:02:ba:6e:30:02:
79:0b:51:a2:1e:d7:f0:5c:08:bd:13:e0:f6:e1:42:5a:66:76:
9f:94:03:3a:cc:3e:a9:44:96:3e:f8:1e:aa:70:bf:74:2d:b7:
da:4b:bd:8e:56:ea:d3:c7:c6:a8:44:98:e5:dd:17:8c:80:fc:
5e:9f:6a:11:10:09:dd:f8:91:5a:11:56:fc:b6:f7:68:d2:c8:
f6:06:b6:fa:42:8d:d1:cd:f0:72:83:c0:2a:23:65:b2:55:0e:
58:34:33:26:e5:be:fc:72:86:30:3a:42:95:ad:83:32:8c:d9:
93:75:0b:1e:25:2e:3e:80:a0:c4:77:59:b2:13:a7:b5:5b:f4:
10:f4:b9:c7:cf:10:ff:23:19:08:76:ca:1e:95:82:19:38:f0:
82:7a:fa:c0:42:cc:0a:7b:19:51:37:36:a0:bc:32:62:f5:34:
cd:66:ef:c3:08:8e:91:eb:c6:e3:44:d0:d8:1e:55:bc:9b:d6:
d1:6d:b3:91:77:d9:7b:a7:b7:06:a7:76:81:e7:62:7a:11:2d:
14:c3:09:3f:df:d0:c8:96:be:4c:72:2a:1e:83:47:62:05:9f:
8e:fb:89:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:28 2025 by rpki-client