Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: SFhbQv1bhe95AmIfBXyPI6XdeZ82XQqn8Cmi1tVTnZ8=
Subject key identifier: B7:E1:3B:7C:D6:E3:F2:5F:EB:63:0C:E6:DF:57:A0:5E:1B:7B:ED:1D
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 0194BD85A99CBB4EC2C96961A0F5EC5F63DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: 9MhvY4KGQZ71xgXt8MUufo6HfhqKTrG+Tqrd4rQk1Xo=)
2: SYZlptmfwW05iDvw4BXOJL_fG8M.roa (hash: h6Di4p8kHK2EYyUSqyx3mMW/pVHzVV5hYvjCX+I4Wgk=)
3: upUlmeYdk5_sFXYFi0NBtTtEwO8.roa (hash: xuu1QVb2zW3SwdOeuq3QKp9w0IPCF0Qyp8OFF9tk1jc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a9:9c:bb:4e:c2:c9:69:61:a0:f5:ec:5f:63:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=b7e13b7cd6e3f25feb630ce6df57a05e1b7bed1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:d2:1f:12:b7:98:d1:54:cb:74:d5:ba:9f:
62:51:c2:c6:b4:e3:22:78:1e:34:ea:13:c6:a2:e4:
07:9d:7d:c4:64:18:97:6b:b7:cf:2a:64:e5:cc:d2:
85:cf:6b:1a:67:bc:d5:6d:fe:0c:74:d0:37:a8:28:
64:35:55:18:94:9f:c5:9e:20:a4:e9:e2:5a:c2:fe:
44:8d:ec:35:e8:6e:d2:f0:79:e5:27:72:3f:43:bc:
b6:80:18:18:12:9a:95:96:19:a0:ac:b9:6e:8e:b3:
b2:f5:07:54:db:4d:77:7d:0a:27:bc:4c:06:91:c1:
f3:ea:db:4d:c4:a6:26:3f:84:6d:bf:85:ad:27:d1:
2a:8f:02:bc:88:c0:09:c3:f5:f5:ce:00:81:46:ac:
23:3b:2f:32:6e:85:58:d2:b5:f0:2b:92:25:a0:f8:
4c:58:73:3b:6c:63:e7:92:3e:b1:26:3e:0c:dc:46:
77:dc:6e:ab:ea:07:2e:59:ee:93:d5:e6:f4:d0:d9:
74:da:1e:b8:ac:b7:8d:e6:b1:a9:9c:65:78:4e:24:
6d:9c:f8:a2:df:67:f3:e6:6a:f0:f3:2e:2d:34:26:
c3:c5:62:9b:08:78:28:d7:d8:8d:2c:da:f4:b7:7c:
23:79:59:af:36:78:36:3f:f6:ab:3d:f5:95:80:12:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E1:3B:7C:D6:E3:F2:5F:EB:63:0C:E6:DF:57:A0:5E:1B:7B:ED:1D
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0b:64:b9:a5:6f:d1:1e:48:58:b7:c3:4b:fa:67:2e:95:71:
f8:96:d9:00:70:dc:d3:0c:a5:a9:21:73:32:da:57:7a:3a:fb:
08:7b:b0:90:ce:32:6b:1d:b8:d8:3f:ac:43:ca:00:fa:7f:dc:
1d:09:bf:32:18:51:ba:db:54:b0:71:d9:49:f4:56:c1:d9:e2:
32:9c:42:fc:e1:a0:26:33:74:8d:af:b2:8e:28:f0:41:e8:3a:
1c:42:53:1d:7c:30:39:3a:89:ef:cb:05:c2:c4:d3:25:9b:35:
af:04:4f:58:e9:d2:12:c2:9f:95:d3:57:6d:fc:a9:33:ef:6f:
78:6f:5c:b1:36:8e:80:f2:b5:ce:67:f5:a7:b8:e1:dd:61:76:
fd:40:f3:87:0a:9d:e4:2a:bf:20:76:16:50:82:ca:a5:c8:34:
38:f7:52:65:3c:a2:d0:37:aa:d1:b6:28:fe:29:b5:40:bd:54:
cf:95:15:5e:53:f4:aa:d9:b0:ef:d6:22:fd:d0:2f:45:a7:83:
cb:ac:08:c6:17:2e:f9:bc:9d:78:48:b4:b9:f2:aa:7d:f3:5b:
68:86:b8:de:15:40:fe:66:51:a6:58:21:e0:53:73:aa:31:d6:
3a:cf:b3:a5:05:a0:3b:34:c0:91:4e:e4:8c:0c:a9:8d:01:4f:
98:1d:71:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:16 2025 by rpki-client