Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File: are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier: YtG5TakHnCEiZZ253WcKIsDbB26B7HascU5mvvNnWaA=
Subject key identifier: 53:CE:C8:4F:97:0C:46:B7:97:67:FD:9B:E2:E2:08:AB:91:92:AC:7B
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 0194BD856E4DB4317CA8D710E1FC9DBEC6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: 4+1qxqFNbNQYrOJEPPd4rtGwue0i8JGojR8r3FynBVQ=)
2: c20FPXhmS4J60vXR5aQj59cGupE.roa (hash: qMroiKqOf/zNPKixTJENs6m6QOcCkRbkPfSaLRwNiK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6e:4d:b4:31:7c:a8:d7:10:e1:fc:9d:be:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=53cec84f970c46b79767fd9be2e208ab9192ac7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:bd:3c:c5:d6:4f:51:ec:3a:09:7f:61:8b:
4e:89:af:7f:ba:7e:ca:15:8c:45:ca:9b:1b:f6:82:
1a:c5:b1:38:c9:c5:e9:57:41:d7:39:25:a0:24:89:
f7:6b:96:b3:2c:e0:30:c9:d2:68:4c:f2:de:8d:95:
1d:5f:27:9b:46:1d:ab:2d:6d:28:0a:c9:c7:5e:dc:
92:1f:02:b1:50:45:8e:21:b9:a6:76:34:38:6b:3c:
f4:9f:e0:b3:fa:c3:ac:42:e6:9e:6f:dc:23:86:ea:
25:99:da:89:40:e5:25:ea:f2:18:21:c3:67:cd:da:
33:51:ff:4e:67:a2:10:e5:80:10:13:6d:f3:44:d4:
a3:f6:4f:59:70:39:15:d5:0f:7d:3a:9d:65:b5:b8:
fb:6d:e1:d5:a9:2a:27:e5:97:31:d5:fc:71:83:f9:
65:02:0b:cb:72:fd:31:cb:2e:c0:21:4e:bf:e0:c1:
3c:78:d1:34:92:6b:3d:e9:31:fb:ae:9a:b9:b6:07:
20:61:f1:ab:a9:4a:19:01:6d:b0:ff:2b:7d:fd:31:
3e:8a:36:ed:e0:30:b5:c7:4c:d3:c0:31:f3:69:6c:
48:92:dc:ca:4e:68:87:90:2e:ca:08:8d:e9:09:4c:
29:b7:23:20:4d:fe:aa:c8:3f:97:b9:a7:e7:98:5e:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CE:C8:4F:97:0C:46:B7:97:67:FD:9B:E2:E2:08:AB:91:92:AC:7B
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b5:87:b6:5a:47:6a:32:f9:a1:be:49:98:d4:b1:15:a0:39:
8a:00:fc:ec:d1:01:c6:95:1f:09:8f:a8:30:16:73:47:ef:03:
a9:44:0b:52:9d:e0:7f:cd:0d:ae:e2:78:6a:f1:e2:97:94:d3:
65:ba:78:27:e8:cc:be:ef:4b:27:ba:cb:13:fa:96:55:08:bc:
81:8e:12:02:36:80:7f:c5:d2:8f:88:97:9d:ad:42:40:fc:f5:
25:5e:d4:05:de:6c:24:75:af:03:7c:e5:6c:95:e2:5b:a9:f3:
b4:07:08:3b:b0:83:33:ad:0e:dc:10:11:87:04:b3:07:94:2d:
89:36:86:d3:01:06:fb:91:54:54:f2:43:c6:73:13:fa:35:58:
d5:8b:20:66:76:aa:e5:bb:2d:ba:94:3b:17:79:e8:15:1f:cb:
d7:e7:17:98:ef:61:02:18:ab:05:bc:73:7f:bb:9f:84:5b:aa:
90:78:3c:87:1c:d1:d1:06:ec:75:36:44:96:e6:6b:3a:18:b8:
27:07:97:e9:9d:85:d9:29:db:22:e7:48:df:c0:22:5d:72:a0:
e6:49:0d:a6:80:e4:93:f1:6b:fc:6b:16:fa:3c:f5:db:9d:db:
72:59:7e:07:2c:e3:45:94:e5:88:67:51:3f:e5:0c:d5:25:4a:
bf:66:56:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:08 2025 by rpki-client