Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
File: ajqLdK1O1nN5ep9rd0nCI0VpedA.mft (raw, json)
Hash identifier: oLvmxe+vf2r3NnS53hCffj0TbPb0jWHaoiC8LjejYC4=
Subject key identifier: E2:40:FD:F3:3E:88:EB:B4:D4:AD:08:82:5F:8E:ED:6E:CF:8A:32:86
Authority key identifier: 6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
Certificate issuer: /CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Certificate serial: 0194BD853B4F27652CE56E800AF82D3BB168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
Manifest number: 12EE
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: ajqLdK1O1nN5ep9rd0nCI0VpedA.crl (hash: u9EDVAhXlCXwtMAY8xWWRYIL0UjUqSwY/iS33H47t3A=)
2: jkQdp6EX7jHh6f31YxZYZhR0C8U.roa (hash: FmayEZ/+k7yvcImZRXEurVZdNlGpk+kZM2DFLPiqTu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3b:4f:27:65:2c:e5:6e:80:0a:f8:2d:3b:b1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=e240fdf33e88ebb4d4ad08825f8eed6ecf8a3286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:66:a3:91:c5:56:56:a2:66:b6:0e:62:63:96:
dd:cb:b7:cb:5b:58:3b:e0:f3:34:93:d9:0d:c7:71:
e9:71:f8:f5:34:0b:7b:8a:6b:a3:06:aa:f0:33:10:
15:e5:19:7f:39:1e:4b:79:b8:ac:60:de:58:29:97:
ca:be:51:d5:93:46:c2:86:ea:cd:6e:75:3f:84:a8:
b5:da:8b:ae:b4:a6:a3:cf:ca:22:da:d2:b7:52:ba:
d0:59:ba:e5:1f:3a:26:69:9d:1a:19:a9:1f:d9:57:
f6:65:28:dc:d0:ee:dd:36:53:dc:e7:0f:d0:fe:78:
9d:c3:b0:16:64:56:21:e6:ad:fa:3d:cd:13:d7:13:
24:ec:ab:6d:c8:21:b8:25:07:21:5b:6d:c9:4d:de:
7a:06:95:fc:9a:0a:30:85:9d:4d:68:40:96:a8:d7:
e4:9d:f7:2c:35:57:2a:35:41:19:e3:72:c4:40:74:
25:14:73:d6:39:64:ab:85:91:29:62:a4:05:e8:de:
a2:6e:97:57:67:aa:37:6c:79:ae:5c:87:7e:6a:cc:
ee:db:d0:a4:48:e0:81:89:e4:81:a7:85:df:f3:ef:
a0:dd:2b:e3:6c:86:cd:d7:d4:94:c9:8d:cf:a9:17:
d6:ba:92:d3:a5:2d:7f:a4:5c:2b:b6:f1:04:d5:c3:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:40:FD:F3:3E:88:EB:B4:D4:AD:08:82:5F:8E:ED:6E:CF:8A:32:86
X509v3 Authority Key Identifier:
keyid:6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f8:a1:32:5c:33:85:07:12:c8:7d:4d:a4:62:5e:77:6b:fd:
d9:e3:86:6f:e2:4e:fd:c1:02:e1:7b:1c:be:44:a4:5a:85:32:
13:47:f5:0d:d8:80:a5:c5:7c:d7:6f:6a:f8:0b:cc:f6:24:35:
1c:a4:75:d0:08:71:93:bc:11:f5:58:9d:6f:d9:e9:f4:33:c6:
10:56:6c:4f:4c:bf:c1:ea:2f:36:cc:4b:9a:5f:b5:f6:c8:e0:
db:ab:33:25:52:19:ba:df:bb:1a:e2:77:25:ba:c8:7d:27:d6:
bc:e1:44:d1:e8:a6:fc:b0:19:d3:6e:a7:3b:77:16:34:ca:55:
6f:2c:51:31:ac:4d:f5:a6:6e:34:9d:5e:d5:1a:c6:49:b3:2d:
88:8a:52:f4:5f:ad:9a:e1:40:c5:7e:ef:47:12:b3:ff:db:08:
c1:04:fc:fa:90:7e:6a:ea:56:2c:60:e8:47:ac:c3:dc:40:49:
c5:7f:83:ee:db:8b:7c:9b:16:70:5b:90:5f:a1:a6:0b:43:9c:
81:71:84:3a:90:92:13:ca:c3:c7:30:cf:c5:7b:e0:eb:f3:89:
a7:fe:32:3c:b7:34:95:bc:25:40:84:c4:21:a5:82:b9:0e:11:
ad:0b:97:9c:7a:a2:93:89:57:9b:e2:9d:68:6d:ed:cd:01:2d:
bd:d5:7b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:34 2025 by rpki-client