Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
File: AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json)
Hash identifier: oCdTAc7zIpRxjPPla6AD6GMGohSeeQqmaLQFRibHr9U=
Subject key identifier: 2C:7B:D4:CE:CC:84:00:06:0C:BA:F8:B1:F3:0E:27:32:9E:31:27:D7
Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
Certificate issuer: /CN=03049604737c78bd24dbb25eb336f4a416e645f6
Certificate serial: 0194BC73216CE77858854EB0195CF75EE359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
Manifest number: 01E2
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: tcKWt4fbnUXGo4fRfsGPJNCyLQoW0kg5T4ep0FcYNAs=)
2: vKytNfbEF9joRT3eNK0fcMnnPsw.roa (hash: QRCmo7hQ15OJ3mq9udqpHVMqzKuvB7Gd74/Bu3ia9vI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:21:6c:e7:78:58:85:4e:b0:19:5c:f7:5e:e3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=2c7bd4cecc8400060cbaf8b1f30e27329e3127d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:08:6c:f1:aa:1a:31:8f:08:03:19:11:f8:
59:ef:14:ad:33:5a:f2:50:a5:ac:fe:9a:55:7e:c0:
e8:76:47:b1:5e:aa:9d:97:69:75:c7:96:db:59:20:
7c:89:5d:ba:fc:5d:a0:31:56:19:51:b1:c0:3e:2d:
b3:ae:85:7f:ba:2a:0f:99:eb:b5:81:74:3f:d4:6b:
57:f3:a9:18:8a:fe:84:df:64:29:ea:2f:db:f9:d9:
88:1d:9a:9a:92:47:56:1d:75:6d:65:c7:21:1b:93:
bc:e3:79:2b:b2:3f:87:01:48:4b:c5:12:3f:f3:46:
ad:2b:aa:a3:09:12:be:b6:fc:86:6f:16:ba:9d:f1:
59:58:3d:e5:43:6a:d7:8c:d7:5f:bd:25:28:29:cc:
d0:9e:00:21:f8:ca:b2:8b:41:27:9f:27:25:e7:b4:
44:b2:59:6a:3f:28:f0:1a:00:65:b8:ed:c2:20:11:
08:75:fc:1c:43:20:34:ac:a8:74:1c:8b:54:eb:23:
a7:04:83:ad:0e:32:67:9e:f3:a7:71:27:66:15:cf:
36:33:47:7d:bd:be:2f:22:f9:cf:8c:7a:9e:df:5e:
68:ab:ab:6c:a2:64:4b:6d:31:a8:67:05:0d:0d:b7:
61:02:4a:b4:68:cb:fc:ed:a8:52:65:3e:3b:07:40:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7B:D4:CE:CC:84:00:06:0C:BA:F8:B1:F3:0E:27:32:9E:31:27:D7
X509v3 Authority Key Identifier:
keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:14:b4:3f:b0:6c:38:a9:ca:a1:80:2a:9a:bf:ef:e7:d7:86:
2a:2b:b5:21:fd:8d:71:96:25:45:0d:76:1a:7c:59:f9:d3:9c:
e5:22:ac:f8:33:e3:4b:24:03:14:8d:a7:32:17:62:7f:aa:d9:
b6:01:e1:80:c6:12:b8:3f:31:d1:fb:63:f3:b6:49:c1:33:1f:
8e:7a:4d:64:7e:7e:bc:1a:f0:d3:ea:ad:41:13:44:75:26:00:
1d:34:7d:09:81:1c:9d:65:66:d9:58:90:19:39:e9:94:b6:fb:
07:66:dc:bf:87:4d:92:3a:d2:b2:36:d6:d9:37:e9:5e:c2:2f:
07:51:9a:6e:63:fb:e3:5c:ea:40:f1:88:69:b8:1c:cf:ae:d8:
2b:7c:9a:1a:3a:20:25:f5:b1:3b:a3:0a:48:14:ff:ad:a9:05:
f7:9d:4c:bb:b7:4f:4c:c6:2a:ee:e8:c3:74:eb:b8:e4:96:3d:
b7:4b:f4:f6:60:2e:bb:ae:93:07:f5:39:13:9e:8f:13:8c:63:
ca:80:54:8e:0a:bf:87:34:f5:89:12:0d:2f:5f:9e:b2:91:1f:
a1:09:fa:4d:af:d5:0c:73:04:82:d5:67:8f:97:1f:78:9a:b4:
37:30:9e:a1:64:66:1b:77:80:4f:3b:50:cf:22:02:ab:60:89:
ce:32:b6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:48 2025 by rpki-client