Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
File: aUAlihpormBcBz-1g7E-E3a3eKc.mft (raw, json)
Hash identifier: yLDftnLVpkcmgYldbx4LzHbstXN/47WzqpVgW3iw7kM=
Subject key identifier: 24:DD:49:13:53:B4:11:67:F5:C5:57:C2:6F:F2:D9:18:8E:38:8E:5A
Authority key identifier: 69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
Certificate issuer: /CN=6940258a1a68ae605c073fb583b13e1376b778a7
Certificate serial: 0194BC04E373EC07EB880EF81634406C49CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: 2sc4xknukJW-o5vl5Fz96F0QucA.roa (hash: MbYv6i++8VmdaYHm6adLazhX2ff10i5IN4qgNm5FoPs=)
2: aUAlihpormBcBz-1g7E-E3a3eKc.crl (hash: 5L1ufxILzlpsrFSzc9/C2GynZoqQHLbRX+qhi7i3DtQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e3:73:ec:07:eb:88:0e:f8:16:34:40:6c:49:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6940258a1a68ae605c073fb583b13e1376b778a7
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=24dd491353b41167f5c557c26ff2d9188e388e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:09:92:68:94:e0:90:e9:af:ce:aa:53:19:
10:1a:31:78:2b:64:aa:16:91:9b:e4:1d:47:e1:c8:
00:e7:71:e1:84:3c:c1:bb:8c:20:78:89:9d:a0:67:
7e:a1:9c:6f:f4:7f:18:10:a0:de:9a:28:2d:89:09:
23:a2:03:4f:5d:cd:bd:df:2a:3f:3a:14:45:60:76:
6c:b9:78:48:19:3c:5d:3d:cf:29:76:dc:4b:1a:71:
c4:ad:65:ea:21:d2:c6:eb:5d:ae:3b:17:24:28:8b:
6b:a1:e2:83:65:ae:6a:5e:b2:b5:be:2d:e6:fd:97:
ff:c7:27:67:e3:a5:e0:a4:e9:e1:6e:a2:0b:7a:db:
d2:b8:5c:5f:19:b4:4e:93:10:67:85:b0:6f:36:a9:
9a:c0:e1:d6:de:45:8a:d6:ab:32:f4:60:84:fa:ed:
0a:ed:58:5d:15:6d:b9:21:c0:54:2f:98:e3:26:76:
a6:89:79:f3:bc:5c:ba:72:6a:50:01:df:94:23:30:
2d:02:27:65:9b:4c:2b:13:bc:00:5d:17:bd:01:ad:
06:dc:ee:e8:69:4d:a4:8a:f9:1d:cb:0d:30:d1:65:
ee:59:dc:27:6d:d1:37:6a:1f:71:f2:0a:22:0f:de:
32:17:3d:d2:e1:8c:f1:03:cd:17:d4:09:fe:c4:94:
af:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DD:49:13:53:B4:11:67:F5:C5:57:C2:6F:F2:D9:18:8E:38:8E:5A
X509v3 Authority Key Identifier:
keyid:69:40:25:8A:1A:68:AE:60:5C:07:3F:B5:83:B1:3E:13:76:B7:78:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUAlihpormBcBz-1g7E-E3a3eKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1434cd-a3d6-4488-8888-749e980ec0b7/1/aUAlihpormBcBz-1g7E-E3a3eKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:72:a6:b0:99:4b:3e:1c:f6:96:a9:8d:ee:38:dc:82:37:63:
21:de:98:8b:44:0b:70:eb:e7:b3:29:59:2d:83:dd:b1:04:a9:
ee:a2:bc:5a:38:72:36:95:da:40:50:09:70:99:b1:84:33:87:
39:75:a7:a0:3d:87:06:e1:35:d8:b8:70:f8:f4:1f:2c:c2:a5:
ce:e4:4d:42:d7:ff:d8:e3:91:2f:68:b1:fe:a1:c3:56:3c:27:
a3:6a:50:b1:f3:f2:d4:15:2a:b7:31:51:29:d5:79:38:55:74:
b4:9e:96:51:41:f1:c0:b6:d1:b2:d7:48:4f:8a:db:f3:06:17:
cb:eb:17:bb:f2:b9:d5:8a:43:79:f9:68:c6:b7:2a:c2:c5:10:
ea:55:a0:e6:8b:e4:93:b6:8c:c0:86:3c:ea:be:cd:33:da:ca:
d1:8d:74:ea:cb:f4:9f:e1:2a:2d:ed:c2:36:58:62:4b:85:e6:
62:3a:c2:4a:ed:3b:20:82:04:31:69:68:76:8f:79:e9:3f:08:
40:35:4d:9b:e3:9c:71:2f:67:68:0c:a6:06:83:73:9e:83:cf:
11:06:9f:f3:fe:fc:49:bf:23:5d:04:5c:d0:09:62:e2:97:12:
68:58:a0:9f:2f:48:1b:28:37:3c:11:dc:6a:f1:25:f1:bd:56:
6b:79:f8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:33 2025 by rpki-client