Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File: aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier: dODFoGpXzVuXgwBsKezNWYNkxw5X6EYgGci22Jffmxo=
Subject key identifier: 2E:8C:36:A8:62:F1:CC:07:72:81:32:3C:06:61:06:0F:62:9F:E7:23
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 0194BCE068C1508EC9E354E92F5183CBEF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number: 1226
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: CuhGowb4a4r8Uq7OUxWM1bYTF9CT+I3mit2gTqBJlLA=)
2: gQqJELq1-EV3FBRQEAYd71OCUP8.roa (hash: bKz/Il/boauhNtFoORiL2V0u7PFpV3gpz4FiQkcwVo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:68:c1:50:8e:c9:e3:54:e9:2f:51:83:cb:ef:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=2e8c36a862f1cc077281323c0661060f629fe723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:11:6f:c6:a4:a0:24:e4:4e:b6:31:91:6d:c9:
91:a6:33:ea:05:81:c1:7a:54:c9:0f:d9:a3:5a:31:
bb:0c:69:12:d2:c5:13:c5:45:b2:4f:4f:06:17:38:
5f:b7:c2:f6:30:64:eb:e5:24:b8:fb:3e:fa:d1:d9:
95:20:f2:ca:fc:10:e5:34:32:ec:be:f8:41:9f:d0:
85:76:b6:91:c3:2e:85:2e:78:3f:26:9f:2b:64:24:
84:32:7d:8c:8c:a2:54:bc:e6:c6:01:5f:20:37:05:
7d:0a:60:a8:7d:6e:08:25:61:36:be:12:fe:ae:0a:
e7:b6:68:03:8b:ca:47:41:1f:d1:11:b8:ed:0a:08:
1f:84:97:ce:f0:da:50:a0:a9:04:77:37:0f:f0:6e:
be:dc:7a:67:49:0a:20:ab:55:c3:11:d8:27:8f:38:
ca:c2:99:cb:9b:9d:1d:fc:26:f0:28:95:48:45:c5:
b2:75:64:98:af:6b:1d:dc:69:44:b6:fa:5d:77:6a:
f5:84:a2:14:67:3f:80:f5:22:f3:b5:21:7e:e2:e5:
52:ce:d0:f6:57:90:47:f8:91:5d:00:74:7e:f6:17:
dd:75:88:81:ca:5d:30:07:55:d5:58:8f:b7:c2:68:
be:ce:73:f8:14:f2:bb:fe:75:f0:bc:1c:73:05:59:
b4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8C:36:A8:62:F1:CC:07:72:81:32:3C:06:61:06:0F:62:9F:E7:23
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f6:e3:b8:b4:98:9f:ec:62:c9:cc:26:52:67:84:25:c6:1f:
00:1e:9f:f5:58:ab:8c:3d:82:9c:8a:ae:2b:95:d4:c8:57:36:
fd:25:b4:a1:0e:07:6c:85:12:f1:ee:65:cd:7a:4b:e4:91:4f:
e3:4c:6e:ba:14:1e:75:c7:7c:e0:db:a0:62:33:6e:7e:ca:0a:
77:c7:c2:c0:57:70:3f:b2:22:72:75:25:59:ee:2e:f4:83:63:
44:96:9c:91:e9:fc:9b:2e:d6:82:80:21:87:b4:f8:93:f4:0d:
53:63:d4:a4:f9:1c:be:e8:6b:43:76:a3:50:66:15:27:46:5d:
19:80:c7:cd:6e:7b:bd:51:9b:40:4f:37:4e:79:1c:32:7d:97:
49:eb:59:e8:66:a3:de:f9:0d:f9:cd:d1:b4:16:ba:ed:2f:f9:
bc:eb:1d:02:e2:9c:11:f9:2e:49:4e:5d:0e:21:38:25:c7:e6:
b4:ca:4d:3a:ab:73:17:50:4e:b2:bf:5f:f2:b8:4a:d8:a8:3e:
50:49:6e:1b:af:52:81:fc:5f:a1:7e:f0:4c:0c:9f:be:ac:24:
c4:55:ca:41:7c:12:33:0e:bd:4f:b3:ab:17:c7:46:32:7b:1e:
e6:35:ca:33:54:d6:ea:a0:19:69:30:67:a1:c4:f9:cc:7e:ef:
45:d6:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:43 2025 by rpki-client