Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier: iMQEXyYWYmzyFik3U03o6nK8H+Et1V5bsF0AB/SVdnk=
Subject key identifier: 0A:E3:F5:82:5E:5E:13:63:FD:B3:BB:2D:79:8C:4A:2F:A4:8C:AF:B3
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial: 0194BC04ECCFC897CFF9C0A9C044B2762BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=)
2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: vZYeEtglUkg50MV4IN9/HWnYLO6NiAIgIi4InbcDXJ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ec:cf:c8:97:cf:f9:c0:a9:c0:44:b2:76:2b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=0ae3f5825e5e1363fdb3bb2d798c4a2fa48cafb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b4:78:31:57:3c:25:77:df:03:c4:26:aa:1b:
73:99:d6:1b:ac:04:8f:09:c1:68:1e:71:f4:61:21:
31:97:ba:6c:f5:4a:0c:22:22:5b:cb:56:00:66:3b:
a8:3d:ac:23:25:2e:59:e2:a9:68:cf:06:37:03:82:
ca:33:15:85:5c:12:b6:44:85:44:e5:f8:db:cd:fc:
47:46:ca:7a:8f:39:1a:d2:01:59:20:c5:4b:b5:2d:
30:37:d2:d2:5d:c3:20:b9:54:08:92:9a:fd:a0:b5:
ff:67:2c:e4:fb:01:ca:61:2a:62:fe:2a:e7:46:9e:
03:f1:15:53:5f:68:c6:5b:7a:16:c4:98:e5:24:d4:
dc:5c:d0:f0:46:d6:16:37:04:62:9e:1c:70:02:4b:
a3:3b:e8:4c:48:a7:0b:61:62:06:6d:b7:df:6e:a1:
e4:eb:00:41:a6:fa:de:c6:ea:e9:69:44:fe:dd:ee:
7e:4b:3b:1e:82:65:8f:4c:18:ab:1a:e9:0a:a1:30:
f9:20:0c:09:27:ef:99:2e:37:fe:41:05:bc:63:4d:
18:1c:fb:66:e8:23:57:31:1b:79:74:e2:0b:7b:bd:
bf:2c:87:4d:2d:b8:3b:6c:ab:38:51:9e:83:fb:9a:
e1:76:26:c8:bc:88:76:45:de:f0:27:ef:0e:34:4e:
06:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E3:F5:82:5E:5E:13:63:FD:B3:BB:2D:79:8C:4A:2F:A4:8C:AF:B3
X509v3 Authority Key Identifier:
keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0a:05:8d:19:38:e8:63:ad:b0:f3:33:a0:7d:1e:93:fd:f6:
b1:c6:df:34:46:10:f1:1a:63:14:f2:f1:b6:9a:9d:05:6a:a2:
ec:53:1c:8e:f3:63:59:71:25:84:6d:aa:e3:25:b8:a7:3a:bc:
e5:76:e9:64:45:e3:a2:22:cc:25:ae:45:0b:f1:a1:ba:ae:50:
bc:b8:46:aa:02:f7:be:66:88:6e:d8:c3:dd:a9:4c:38:6b:3c:
82:7d:5b:53:d3:fe:89:f3:d6:e5:19:40:16:ea:6f:35:b4:f8:
70:4b:c8:51:92:3f:3c:c0:2d:1e:7a:f5:d1:0c:f9:9a:79:92:
fb:90:3c:80:22:fb:98:b5:0e:b4:53:35:67:9a:ea:fc:85:fb:
8b:00:a7:a3:1e:3c:e0:2b:70:be:bb:1a:8c:76:46:ee:89:09:
af:7f:73:08:7c:ed:84:f1:f1:a1:44:2a:c1:fd:e1:c9:a1:09:
34:02:ba:47:ab:b3:e4:11:e3:c6:34:2e:04:8e:bb:c7:81:dc:
52:46:7f:20:c8:de:3b:90:78:d1:fd:f9:59:0f:5a:d8:5b:93:
70:85:0a:73:da:08:90:f6:11:f9:4e:19:32:27:e5:c7:e5:84:
fc:1c:03:60:f1:09:3b:7f:5d:65:ee:e2:6c:51:19:54:be:cf:
0f:84:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:54 2025 by rpki-client