
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: 07EBx2DgCcROFVIla8SaGhH71q10o5iar8L/iaj1qAE=
Subject key identifier: 1C:9D:D2:92:16:42:3F:86:86:6D:44:94:19:1D:74:7E:F9:BD:B5:14
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 0194BBCF067587AE6D3C8FCC0E5BED3CEE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 0508
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: hLZArNa/q4nc4fDDlZBN4oXKA9isFDNicIFPOunpfn4=)
2: lKpyDy3PB0VVOKumldUJ5R7DcrY.roa (hash: bAnBEKlnNSPWwWtu1bOB6beqo4iFn6Nt2CccoFRqSNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:06:75:87:ae:6d:3c:8f:cc:0e:5b:ed:3c:ee:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=1c9dd29216423f86866d4494191d747ef9bdb514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:49:3f:0d:f1:22:1d:9b:d2:eb:3b:1e:20:
a0:a0:81:5f:7f:00:a8:a3:e5:ef:a3:a5:5a:ec:f6:
7b:39:27:d1:03:28:cc:47:d9:10:0e:aa:62:57:f2:
af:64:ac:1f:8d:8b:02:39:05:99:e0:7f:62:45:6a:
cc:23:83:2d:6e:70:90:18:79:5c:89:52:74:45:15:
f0:ce:06:31:67:b2:48:6a:76:3d:e4:8f:67:87:d2:
51:39:56:67:4c:f7:cd:f1:56:82:dc:4e:14:54:63:
ea:b4:7d:49:df:ea:01:a1:49:2b:b6:8c:81:1d:a7:
a5:f1:e5:35:ea:73:6e:9b:df:ef:ee:eb:8c:f0:3a:
98:36:5a:87:7a:4b:0b:ca:c5:1c:7b:9a:9e:28:aa:
83:5f:fa:04:71:17:e6:b2:94:a3:c2:cb:9b:93:7b:
64:98:83:f2:8f:b1:d9:16:8f:17:43:6c:05:08:84:
ff:a8:87:98:f7:5c:a6:e3:78:0e:14:7a:2c:f4:f0:
4f:ad:a6:54:4c:e1:96:02:72:49:b4:58:76:17:07:
b7:ed:3c:b6:f9:08:ed:75:44:99:81:af:ac:10:e0:
f5:ea:3c:7c:47:ac:f4:e3:9a:62:6b:8c:0d:73:84:
42:f4:ed:89:3d:1a:d9:51:f4:b2:96:29:20:7f:86:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9D:D2:92:16:42:3F:86:86:6D:44:94:19:1D:74:7E:F9:BD:B5:14
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d9:c1:33:ea:97:17:a2:ec:20:52:3a:c4:3a:cd:b7:09:1e:
20:42:7b:62:81:d1:66:31:2b:42:bb:4a:1c:fe:8b:b4:94:ac:
74:86:a9:55:ae:f3:bd:5b:35:3e:fe:97:78:d9:76:05:c9:88:
5d:d5:cf:65:52:da:cc:b5:4b:55:06:68:85:5a:e7:e3:62:e8:
5d:86:8c:65:30:9e:f3:a0:47:7c:a3:b8:d7:3f:b7:04:b2:b6:
fb:d0:8b:41:9f:a7:9b:99:1e:88:20:99:8d:5a:5d:46:56:fa:
33:7f:fd:7d:a7:cd:2d:6b:f2:7f:4f:82:d1:32:0d:d7:78:7b:
2d:fe:22:6d:f0:79:04:34:aa:af:70:43:0d:19:c8:8e:94:73:
25:e9:b1:e5:16:ff:c4:8f:56:4e:b5:01:15:ea:c9:94:9d:13:
a9:24:12:0f:3c:35:01:cc:b8:d1:7d:31:74:c2:ed:f8:e1:9b:
14:db:cd:be:bc:13:2f:d9:ee:25:6f:00:7b:ee:dc:96:f0:ff:
b4:e7:bb:cb:69:ab:b8:a4:c3:71:48:0d:da:0f:59:93:fe:a0:
63:4c:73:48:22:ff:bc:88:ab:4a:cd:c8:5c:45:80:23:c7:d4:
af:4d:66:0f:0e:d3:62:eb:d2:f9:d7:6d:90:5b:09:1a:4b:f9:
94:50:5e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:06 2025 by rpki-client