Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
File: aLf4F6tRQbXhOCgM32GQFmu5y4c.mft (raw, json)
Hash identifier: hWwEz3TYaCgIeXD3nQ+DGeyGt/+v3NU2MGtYmGms0Z4=
Subject key identifier: B4:E6:E1:E9:75:1E:0B:1D:ED:E0:6D:7F:B7:88:AF:D0:B2:FF:B7:AC
Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
Certificate issuer: /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Certificate serial: 0194BD17DAC0F0B7E786855FEF453795F350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: 1-wEZKS5ROln113VYj-rYIVv3HMw.roa (hash: zd3NK5lHmlo7IZCKvHCkj4ue/ewdTG041qEpUCwPhSg=)
2: aLf4F6tRQbXhOCgM32GQFmu5y4c.crl (hash: cqkH/bKFNl50FzUOhtZGrQeacqo7Ch6pPF3KELhp/lA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:da:c0:f0:b7:e7:86:85:5f:ef:45:37:95:f3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=b4e6e1e9751e0b1dede06d7fb788afd0b2ffb7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:bf:89:d5:ae:0b:a9:2d:c8:97:8b:74:24:
0c:4f:66:a1:e8:e2:75:7f:5d:24:61:92:b3:89:ea:
db:88:b4:90:14:9f:72:b7:7b:40:cd:e4:6d:a3:51:
b5:e9:6b:61:ba:cd:bb:4b:ea:e9:7c:d8:51:1e:f7:
ca:7d:70:4e:27:28:8f:5f:14:da:0c:33:46:99:da:
a5:c5:a2:64:03:04:95:37:d8:54:52:00:fd:ad:c3:
ce:27:89:68:e9:b0:2a:7d:3c:01:98:42:5e:41:d0:
4a:28:86:1d:7f:b3:ca:94:53:c4:25:0f:17:2c:d9:
85:70:29:ff:23:7b:00:ed:e0:ab:54:c0:3d:70:49:
99:55:30:37:d1:72:ee:1e:dd:63:f2:9e:df:8d:7e:
a5:e7:d2:46:60:20:75:33:0e:6c:92:0a:f1:5d:f2:
48:4d:f1:01:33:b5:26:27:e8:79:ed:0d:7b:e5:46:
a7:54:8c:ad:2c:d4:a3:26:31:1d:a3:14:c6:aa:1c:
03:35:ab:5e:13:95:7c:29:d7:5b:55:84:bd:b1:be:
e3:da:0f:d3:ec:60:6d:ad:99:a9:de:59:ae:5e:66:
f4:47:7c:79:b0:35:a8:01:ae:14:ba:90:3e:d5:fd:
89:9f:22:cb:b1:b9:7e:3f:10:55:56:b7:4b:14:4b:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E6:E1:E9:75:1E:0B:1D:ED:E0:6D:7F:B7:88:AF:D0:B2:FF:B7:AC
X509v3 Authority Key Identifier:
keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:91:21:33:85:b6:b4:57:20:fd:76:65:19:41:24:45:1e:e2:
8e:e7:d5:71:b1:46:1f:ba:df:f5:38:9a:6d:5b:13:57:a1:7e:
cd:69:d7:76:b8:3b:84:78:8b:f7:90:c9:43:c5:77:3c:e6:85:
bd:cd:5b:4d:53:e7:4c:35:c3:2c:63:ac:81:d7:44:a7:a2:1b:
f9:1c:a1:fd:52:c9:fe:7f:f7:39:be:09:24:6a:0d:8a:b6:f9:
dc:78:d4:5d:37:7c:97:a7:d0:ad:48:e7:a5:68:04:f7:ca:66:
80:35:ac:36:a6:cb:e9:2b:0f:df:16:fc:5b:ee:cf:d9:bb:c3:
6f:5a:80:cb:c4:12:b8:c2:fb:d1:dd:b4:bc:ac:be:50:72:e0:
24:9e:55:bc:f8:5c:f9:a8:c8:51:f7:0a:f7:b7:ad:a4:30:9e:
82:29:1a:59:fc:af:e6:94:dd:cb:6a:b3:e6:90:5c:68:27:ef:
86:48:a0:11:29:e1:21:70:a4:6d:fa:42:0d:39:30:6f:7b:96:
2b:cc:18:45:91:7f:02:95:4e:b0:d1:ab:e5:c6:07:bb:51:59:
1e:f7:0c:eb:4e:2c:c3:b5:ec:23:cf:8d:99:aa:b0:d8:96:9d:
c4:85:33:db:a3:f0:a0:dd:ce:83:0a:7a:e7:6c:86:42:0a:fb:
24:e7:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:26 2025 by rpki-client