Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
File: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft (raw, json)
Hash identifier: qBl3jSrePa/DQ18kDArPFTMqEasT/v25D4ojEGR7K4E=
Subject key identifier: 12:01:72:69:02:53:3B:BD:7F:F4:97:AF:17:93:14:D7:97:37:5F:53
Authority key identifier: 03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
Certificate issuer: /CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Certificate serial: 0194BCE0E58FDC2CF7184A4CD7D9A56B228F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
Manifest number: 03BB
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: 1ofY17NAwbyhAHFj_yBzaevRgc4.roa (hash: FPWNmGXZmy3JcSLxjIHQ6BJRP2baM9xmkXSCswGMYik=)
2: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl (hash: 4B8I7qhRvpwMB0dbGifmNX/5lDV8R2PfMCfaS0h5KAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e5:8f:dc:2c:f7:18:4a:4c:d7:d9:a5:6b:22:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=1201726902533bbd7ff497af179314d797375f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:16:2a:73:41:2f:6c:a7:f8:c4:e9:e5:98:
5d:41:5e:ce:9e:c7:6f:b7:6d:55:ad:9c:69:0c:1a:
56:7b:67:f5:59:60:0b:dd:41:6a:22:1a:b1:41:0a:
fd:0f:6f:28:3e:47:cd:b0:54:2f:0f:52:2d:63:f3:
99:7d:21:3b:8f:88:e7:e0:9a:fd:a0:f4:9d:60:56:
00:3e:81:4c:07:30:5b:50:5e:79:f6:91:23:65:b7:
85:4f:eb:50:eb:29:1f:af:83:15:33:9f:0e:b8:40:
c3:1b:89:24:de:35:77:47:24:04:e8:8e:b9:78:bc:
22:27:ff:c9:0b:87:fa:bd:94:63:3c:e8:75:92:e7:
2d:2c:60:65:ed:da:37:b2:a3:15:2c:7a:5b:9a:18:
e3:2b:3e:f1:5f:ba:50:83:ce:1e:a1:2d:84:c4:f7:
43:d9:e8:49:2e:7a:2a:63:21:28:d7:3e:e0:68:aa:
e6:18:38:56:bb:31:a3:ce:db:f3:55:e1:d5:fd:d4:
c6:5c:d0:13:f3:a0:ab:0c:eb:a7:b5:84:ea:0a:4e:
24:54:c1:a0:cf:aa:4d:db:5b:35:31:29:ad:4f:cf:
37:2b:2d:10:95:16:d3:0f:a6:29:2b:43:91:f0:00:
7f:2c:39:10:40:f2:53:1f:bb:cc:21:71:35:ae:f7:
6e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:01:72:69:02:53:3B:BD:7F:F4:97:AF:17:93:14:D7:97:37:5F:53
X509v3 Authority Key Identifier:
keyid:03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d7:d7:31:83:fe:c8:ea:10:16:62:06:29:cf:71:0a:8a:4c:
27:b2:c9:33:b1:bc:34:cb:b8:cb:ae:89:3a:25:25:21:fd:3e:
71:02:c5:63:69:be:3e:9d:57:73:8e:17:16:07:9c:04:37:6a:
28:9f:88:a4:87:05:13:94:c6:9d:01:1b:48:2c:3c:0a:83:37:
99:c2:ee:b0:d4:30:a0:c6:e6:f3:22:52:b8:61:ca:af:55:48:
15:f3:4d:91:b3:19:e9:dd:f9:46:64:5b:51:bc:4e:25:14:60:
5c:46:e5:a3:ce:a9:18:d4:be:72:6d:ba:b8:33:d9:7a:17:9b:
02:ae:a0:a5:4b:71:7e:c1:d6:0d:4a:94:89:3a:9a:1d:6c:89:
8c:bf:0a:45:75:0a:b1:ec:70:a4:b4:e7:b0:dd:93:38:76:a2:
e9:49:ac:3a:7c:1e:da:aa:69:a1:4d:66:71:cf:06:99:9b:e6:
c2:11:26:b6:a5:b4:8f:e6:4b:d8:4b:19:09:06:7a:2a:85:ac:
98:7e:0d:d7:48:e7:39:de:85:dd:dd:89:bf:af:c1:9f:72:3d:
fa:82:78:e5:b6:47:11:44:ba:84:8f:72:79:c8:48:a9:08:a0:
63:7f:5c:12:23:22:33:e4:03:df:8b:9b:7b:42:24:0e:36:d2:
9e:04:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:33 2025 by rpki-client