Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
File: AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json)
Hash identifier: U+TsHpYPQ5Rg53e08KNSfJDDWbvMXaxuSqOZ3gMvDwI=
Subject key identifier: FB:34:01:6D:55:83:F9:E1:78:A2:5F:45:B6:DD:DD:7E:92:47:B4:8B
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial: 0194BC3C608086EDDDE84E4DD6E2303471D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: p1spNM1xvUQggd5ylVjnSyNfVEr7ddBlGAmXilYEZA4=)
2: Nnzra6MgMjwIPTBIOZIkaKMH6aY.roa (hash: AeoYOs9mV63Xly1m52PMpieci7ekofQ+wo4YmlONy4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:60:80:86:ed:dd:e8:4e:4d:d6:e2:30:34:71:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=fb34016d5583f9e178a25f45b6dddd7e9247b48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:49:c9:40:8f:de:da:ea:98:17:e9:c7:93:
c3:a3:6f:53:da:74:35:e5:15:86:e4:dc:c2:de:18:
84:43:1f:b9:ae:4e:00:9b:da:a8:e9:d7:7e:8b:af:
7d:7d:88:60:eb:ec:66:84:8a:f7:df:3c:11:3b:b8:
ad:14:c0:2b:97:bf:05:2d:20:66:58:10:d7:7e:ca:
97:4a:a8:5e:eb:e3:cb:ec:88:c1:dd:86:c1:dd:3b:
e8:e1:f1:fb:7b:46:c3:bb:c8:0e:4d:7f:3b:81:4d:
c3:f3:5a:04:04:03:fa:d6:c7:9e:f9:d8:54:91:3a:
66:79:13:5f:00:f2:f7:d9:cc:7b:4c:0d:d8:18:76:
ab:f6:6a:ba:b0:39:e2:9f:53:64:2a:b7:67:4f:1e:
88:6d:cb:f0:cb:53:1e:90:d3:ec:c2:7a:aa:e8:78:
3e:52:9b:4f:89:ef:6b:d7:59:f0:7a:e7:ec:c0:50:
37:81:60:33:eb:a6:5d:50:b1:28:d2:9b:b0:12:41:
40:0f:ff:3f:19:25:d6:12:63:3b:e8:6c:48:22:d5:
ba:05:e4:53:9e:01:15:dd:22:b5:58:bf:3b:6f:11:
9d:8f:bb:ea:7b:fc:1c:59:ea:f8:0f:9b:83:42:0a:
0f:e5:50:d8:b8:68:22:8a:50:b5:c6:3e:6b:7a:23:
6c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:34:01:6D:55:83:F9:E1:78:A2:5F:45:B6:DD:DD:7E:92:47:B4:8B
X509v3 Authority Key Identifier:
keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ff:7d:cf:0f:db:91:54:fd:b5:eb:b3:db:e9:a9:b9:27:4c:
2e:eb:5f:ef:6c:26:e0:c8:80:48:8f:e7:26:04:d1:5e:b6:11:
de:9e:c2:03:ab:a9:8f:93:92:fc:a0:f7:10:aa:b0:db:9a:f7:
ad:93:5a:17:a2:c9:1c:86:0a:55:7b:37:0d:b0:3b:88:62:9d:
bf:ca:a4:95:9a:3f:bb:9a:dd:dc:41:00:65:a9:61:b6:36:8b:
43:19:99:21:ce:44:3c:ac:06:04:67:74:73:58:b9:b0:da:91:
14:db:f3:a5:cf:45:3d:8a:d9:ef:39:5f:92:3a:73:98:34:55:
64:7b:f4:a8:34:5b:c4:9e:f5:9d:88:18:40:47:17:a2:95:d4:
63:73:b4:26:fa:39:f6:da:0c:a0:54:e3:fa:05:81:78:b3:d1:
ca:b5:1a:f3:61:77:0b:9c:c7:cd:e6:e2:51:da:2e:f2:a9:5f:
cd:85:29:cd:e0:1f:94:fc:91:a9:2c:c4:ab:f3:17:0b:4b:49:
ff:34:1b:5d:88:fe:9b:62:a5:35:ad:ab:4b:01:4e:14:b7:3f:
e1:76:c7:34:db:ec:7f:3e:f9:b2:e5:bb:91:10:38:d0:ed:11:
b6:bf:30:b4:7d:8c:5b:e3:44:2e:0b:94:01:81:6d:71:2f:88:
b9:e8:4d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:35 2025 by rpki-client