Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/aOlYF0Bglex8tceyhrETM0l7lFE.mft
File: aOlYF0Bglex8tceyhrETM0l7lFE.mft (raw, json)
Hash identifier: eTYe7ZOwo+jtGirFhJy+wG7GXp8qs9lYo8bjrS4TEcE=
Subject key identifier: 7F:CB:EA:64:3A:A6:DC:DC:95:66:DE:CB:AA:2E:3B:ED:CB:C3:4A:F6
Authority key identifier: 68:E9:58:17:40:60:95:EC:7C:B5:C7:B2:86:B1:13:33:49:7B:94:51
Certificate issuer: /CN=68e95817406095ec7cb5c7b286b11333497b9451
Certificate serial: 0194BD4E828529ED2A6C56A43691FE37B95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOlYF0Bglex8tceyhrETM0l7lFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/aOlYF0Bglex8tceyhrETM0l7lFE.mft
Manifest number: 0636
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: ExEAGmrTaGZYkgcoaaGfFiacDZM.roa (hash: vfQhBpcBjSjG95UQaSsBC3edgr1xXnN4hhJBHCKa+Vc=)
2: aOlYF0Bglex8tceyhrETM0l7lFE.crl (hash: hnWlUckqHrJqmNE32Sek7mc13odTutkP6mXKKAfNlcg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:82:85:29:ed:2a:6c:56:a4:36:91:fe:37:b9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e95817406095ec7cb5c7b286b11333497b9451
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=7fcbea643aa6dcdc9566decbaa2e3bedcbc34af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:58:ff:e9:ba:f5:02:f3:1c:2a:02:00:0d:
16:f0:f7:83:6c:2c:24:c9:83:85:88:c2:d8:99:8d:
cd:ba:39:a4:71:69:8e:a4:0f:95:13:4f:2f:f0:dc:
1a:d1:59:3f:c9:8e:e4:1c:65:ce:bb:48:20:07:9f:
ce:50:e5:3e:45:ec:be:69:52:52:78:c5:f2:c1:2d:
7f:9f:fe:aa:2b:f1:67:bf:87:0c:ed:fb:6f:19:41:
bb:57:1d:92:5c:33:9b:4f:54:cf:20:c5:57:1e:ce:
9e:ff:5e:9f:ff:5a:7f:d9:10:cc:5a:82:62:2c:54:
10:7a:3d:7e:d7:28:68:d6:c4:e7:e8:33:e1:02:c4:
ca:db:63:a7:3a:11:3c:a9:cf:18:4e:52:b3:ce:9c:
60:5b:1e:82:c4:6e:f6:aa:72:4b:4f:4e:d1:5e:1a:
70:44:46:36:66:40:78:21:cb:84:ed:18:07:7c:4b:
9f:f5:22:15:ea:51:7c:8a:53:a3:79:c4:87:a3:19:
22:d4:65:22:bb:7c:73:c3:59:b2:9f:78:8b:c7:21:
3b:9c:69:c4:fc:6b:29:52:52:f4:13:78:75:3e:10:
8b:3a:55:4c:06:8b:21:56:31:73:7e:d1:d0:3e:f0:
61:a2:d0:74:50:df:7d:b7:1e:46:44:bb:4c:32:a2:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CB:EA:64:3A:A6:DC:DC:95:66:DE:CB:AA:2E:3B:ED:CB:C3:4A:F6
X509v3 Authority Key Identifier:
keyid:68:E9:58:17:40:60:95:EC:7C:B5:C7:B2:86:B1:13:33:49:7B:94:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOlYF0Bglex8tceyhrETM0l7lFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/aOlYF0Bglex8tceyhrETM0l7lFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/aOlYF0Bglex8tceyhrETM0l7lFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5d:d5:69:e4:61:95:42:62:43:30:c3:92:ea:86:53:ba:da:
61:d8:cb:9c:41:67:30:cc:05:a0:6f:51:6e:0b:c8:a1:0b:4c:
4b:b2:59:75:5e:5f:0a:18:e4:13:2a:64:74:4c:bf:40:84:31:
d2:09:fb:a2:43:e0:34:91:bf:23:2e:70:64:6d:49:1c:37:ee:
02:dc:f8:7c:29:e7:e1:1a:70:d8:da:83:50:5b:1e:c6:9e:92:
71:6d:86:5b:ff:38:a9:6d:f1:c4:cc:19:bf:ca:d9:c5:05:86:
e4:d1:d9:9c:11:8d:95:0f:65:5e:54:2a:f7:3e:cb:34:f0:c5:
8f:88:13:bd:bd:69:ef:a9:e9:f5:7f:bf:23:40:19:dc:86:b2:
fe:a5:83:86:86:4e:44:75:47:5a:2a:a2:19:cd:8a:dd:eb:da:
79:07:e0:c5:cf:c8:cc:3f:e0:e1:ce:91:c7:f1:6f:fd:c9:1a:
f3:36:0b:21:e1:02:e3:e8:b9:8c:80:2c:63:22:82:a6:70:33:
62:bb:24:fa:33:d7:1e:5c:73:9e:69:14:02:4d:f4:a3:52:51:
44:47:a2:fc:d1:e2:f5:eb:bb:04:02:6d:dc:83:79:07:84:4f:
6d:51:a1:93:cc:36:b3:2b:5e:0b:4c:f0:04:d3:e1:4d:1a:ec:
2f:b8:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:26:46 2025 by rpki-client