Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier: 3NEP3e5sv6RSu5IZKYU4yUHTE2KCwV2r7AVHY2TysLo=
Subject key identifier: 88:5D:38:F9:93:F1:81:9D:F7:4F:77:82:71:88:67:71:06:41:C9:62
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 0194BC72D673E25D04598C53B22A923A7121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number: 144D
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: gVr56QQ7otQVT0EUpzu0ShaYdQKIsAVK70LqXBleGko=)
2: v-JLVzUeQuUcO68Dar1EDxEbp-Q.roa (hash: NLn149L4DdRbaEbvCsRst5D4kAzWBmCeuY2VmKeK9O4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d6:73:e2:5d:04:59:8c:53:b2:2a:92:3a:71:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=885d38f993f1819df74f7782718867710641c962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:98:20:0e:b8:a8:cf:6e:13:6a:dd:ac:ba:
54:21:75:d2:ff:a6:dc:f6:d2:23:0e:98:7d:28:c5:
62:67:6b:10:6a:a5:0e:f9:c6:5e:20:f4:84:a8:82:
d9:74:4d:68:3c:93:0f:bb:60:c7:ff:1a:3b:1b:92:
a4:05:fe:73:33:34:f2:d0:47:c3:de:31:77:43:02:
94:f3:a0:93:63:24:6e:89:da:f1:33:7a:3e:d8:b5:
3f:5f:6b:7f:84:c5:7a:48:be:b0:c4:f0:a1:3e:af:
16:c7:c3:8c:f1:23:a8:ce:74:f9:3a:47:be:59:b9:
67:2c:c1:f4:56:fa:d4:2d:d4:7c:b1:88:7e:07:a3:
d2:d9:35:04:0f:2b:c6:35:0b:ca:64:fa:b6:0b:3b:
37:c7:60:e9:fe:40:3e:73:fe:dc:53:82:24:63:e7:
eb:97:7d:cf:f8:bf:62:e0:58:2e:e1:d5:93:46:e1:
7b:5f:7b:d4:05:5f:71:63:31:5a:9d:92:cd:e8:de:
8d:7d:3b:7a:37:2c:fe:7b:65:64:ec:49:72:a0:56:
02:66:e5:0c:e8:db:87:22:59:17:96:89:43:1a:bb:
b1:a3:60:64:20:22:f1:f2:1e:67:bd:30:e0:b8:92:
e3:50:3f:8b:f1:c2:c6:1c:ac:a1:7b:99:8b:11:e1:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5D:38:F9:93:F1:81:9D:F7:4F:77:82:71:88:67:71:06:41:C9:62
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a2:9b:d9:bd:85:74:d4:5a:99:48:be:95:7e:c6:45:93:1b:
16:ac:a6:80:2b:b7:1d:ff:86:1f:16:63:2f:34:8d:7b:b9:18:
81:88:2e:0d:c6:d5:42:4e:90:32:10:9a:01:a1:3b:13:bf:fa:
46:12:7e:e7:11:7d:ed:c5:eb:d0:7e:1a:f4:d9:e5:08:58:73:
38:e0:3a:7c:fe:88:4f:54:fc:3d:22:8f:dd:06:f6:be:53:50:
31:13:2b:3e:ef:93:18:ae:7e:1c:eb:4f:06:6f:88:aa:d2:66:
28:4c:87:96:bb:d4:e3:06:bc:01:d1:fc:51:a5:4f:d5:9d:2f:
67:c2:c8:e0:03:ac:b1:21:d5:db:0f:f5:ab:2d:26:76:f8:0a:
c9:06:e0:53:7c:a6:f2:ac:ff:c0:09:51:46:d6:51:47:79:07:
01:ad:a5:cc:b2:19:0d:2f:d9:1b:03:32:30:b0:a4:26:ee:a8:
11:29:c2:ae:a1:24:c5:e7:8f:0c:3c:b9:41:8d:6c:9a:3f:15:
19:70:f9:5a:26:f9:90:5b:39:1d:62:f8:e6:de:ac:c7:2b:c3:
dc:f0:92:ca:7e:ba:43:b3:7d:50:00:39:71:d0:2d:b5:40:3e:
b5:95:98:0e:a1:b7:bf:d2:74:2f:58:29:f9:f0:57:4c:4d:2d:
35:20:83:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:18:47 2025 by rpki-client