Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
File: 0AL76fCkE2A-3vtzOlMfLiwOnAY.mft (raw, json)
Hash identifier: b6HmaG8l4MPWb2bbYrjz3xtlXBWNAuCiQdoHTVDHops=
Subject key identifier: 06:92:D8:43:A0:BB:A7:24:DF:65:97:56:94:52:BD:AE:9F:A9:82:30
Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Certificate serial: 0194BC7317B39A5E9E097D8214EAA63EC4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: 0AL76fCkE2A-3vtzOlMfLiwOnAY.crl (hash: ZTmNKuaUgGU3hNWHaUMw5649W5nIx3mjXAkpNuLMQGM=)
2: _XUidn5LGX4qhZ_75ajbeYWe1Ao.roa (hash: b/pfq31DckGw+o1qBs5ugJl7vAflaGA+vdef1tZYmPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:17:b3:9a:5e:9e:09:7d:82:14:ea:a6:3e:c4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=0692d843a0bba724df6597569452bdae9fa98230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:2b:88:a0:d3:58:a4:23:2f:68:10:31:a8:
12:ff:9c:5a:f1:ec:9c:ed:c4:02:5c:15:99:1a:0d:
67:ed:79:65:ff:6b:a5:46:fa:9b:13:78:9e:c0:10:
02:14:8d:25:67:f9:a2:ce:d2:7c:19:8c:14:35:7a:
62:59:d7:35:d9:ad:fd:1a:86:8a:45:fe:32:1c:b2:
36:2e:c0:b8:7d:f2:48:48:b4:64:03:d8:c6:8c:d0:
47:36:b6:b1:71:23:bf:e5:f7:ae:25:71:79:81:19:
2d:c6:d0:52:84:9d:44:74:f0:4d:b0:0a:84:e3:7e:
7e:5f:79:2a:7c:42:31:05:7e:30:9d:b0:cb:0c:40:
83:77:46:6e:de:42:3b:ab:8a:c6:a4:ff:8d:c0:3b:
c1:db:6f:90:42:db:fd:cd:b2:79:d0:4d:1c:9f:aa:
d1:66:9c:99:bc:6d:d1:1a:73:61:0a:ad:cd:d4:7b:
a1:b1:9b:2e:7c:fc:41:e0:40:ad:0b:26:05:73:ba:
05:29:19:85:32:46:03:41:50:83:08:32:d5:c1:ad:
e9:9a:e0:06:d8:86:b3:82:fd:3d:5b:b1:da:26:bf:
73:fe:83:cd:99:08:8b:b0:0b:ab:c2:9b:d7:41:4b:
32:78:37:b8:14:3a:1a:7b:16:63:3f:12:91:4f:aa:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:92:D8:43:A0:BB:A7:24:DF:65:97:56:94:52:BD:AE:9F:A9:82:30
X509v3 Authority Key Identifier:
keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:93:9a:b1:9f:fb:df:f8:a0:7f:b3:8e:0b:ab:db:2b:32:ab:
fc:4b:90:2d:c7:8f:2d:72:62:35:89:54:f8:13:fd:09:5d:68:
6c:60:21:5b:11:19:2f:f6:fc:28:13:01:29:f4:18:6f:d2:a3:
7e:b0:30:46:40:27:31:ce:77:8d:de:de:13:7e:0d:3f:a1:2b:
37:80:3f:2a:7c:a0:77:a1:4b:17:7f:41:22:4f:17:04:53:83:
29:ac:ae:38:92:4a:21:31:71:cf:3c:c0:bf:04:7f:43:50:b5:
b1:b9:58:29:7d:e3:90:18:a6:ce:57:e6:81:fb:b8:ae:9c:fb:
41:b7:86:ab:d6:50:d4:4d:9d:d0:58:e0:57:55:58:3e:dc:fe:
64:43:fe:80:4a:8b:2c:73:3f:0d:ed:9d:8b:33:41:a8:f8:63:
c0:3c:09:46:98:3f:97:53:0f:b9:79:85:70:b5:b9:17:5f:64:
2c:9f:c0:b4:d5:c7:1a:f2:0f:9c:55:a0:6c:ca:6c:21:da:e1:
3d:8c:22:6e:fd:5f:e4:b2:73:82:43:85:80:e2:35:85:5d:85:
5e:ab:a3:2f:8e:68:82:4f:9c:ab:45:bc:c1:ef:5c:89:e0:55:
6e:4c:8b:3b:63:d3:64:1a:d0:08:f0:ee:80:e2:6d:2c:28:e0:
45:40:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:48 2025 by rpki-client