Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
File: pX1M_mD4owpND_lLlOut_IjJrBE.mft (raw, json)
Hash identifier: OKT6cYEvZC6Pr6jGZfL5XQXKatrX8d0DpE38ku3IVO0=
Subject key identifier: F8:AE:37:9E:E2:9F:47:5C:71:AB:55:52:83:06:4A:33:4C:5D:DB:9F
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 0194BD4E3552ACD083590426F184AC21B9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
Manifest number: 0AFB
Signing time: Fri 31 Jan 2025 17:00:06 +0000
Manifest this update: Fri 31 Jan 2025 17:00:06 +0000
Manifest next update: Sat 01 Feb 2025 17:00:06 +0000
Files and hashes: 1: c2KmzgC2E8wnyMl3ET7bbXtsl28.roa (hash: iCu/CgeKq6j6xvBOhyPWL0bUM1p4HmortGMzXWFLmpc=)
2: pX1M_mD4owpND_lLlOut_IjJrBE.crl (hash: Tj4W5vtBeQiEmoJq1jIJRSS8anL0WfoveAYDbtDhkdc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:35:52:ac:d0:83:59:04:26:f1:84:ac:21:b9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: Jan 31 17:00:06 2025 GMT
Not After : Feb 1 17:00:06 2025 GMT
Subject: CN=f8ae379ee29f475c71ab555283064a334c5ddb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:4e:a7:9f:d3:ce:d1:0a:40:80:ba:88:a9:
9e:87:36:75:aa:89:cf:61:f4:9d:6e:c9:d2:5e:b2:
2f:c2:bf:df:2c:f0:b0:00:5e:44:74:43:32:8b:45:
76:ee:11:29:6f:f1:66:95:e5:31:1a:06:73:32:e0:
34:f1:29:0c:22:48:a1:33:79:91:d6:18:1b:b2:8a:
ec:86:d4:05:6a:25:f6:99:f0:09:ac:c2:62:98:f7:
b1:a1:14:47:11:8d:1f:e1:c6:a1:91:ea:a9:5a:89:
bc:46:a2:79:30:c9:fb:fe:52:e9:ee:f6:8b:d6:ed:
9e:d1:f5:38:25:99:c8:f8:12:6b:8c:6f:2e:7e:c9:
c8:b1:60:7b:7e:7e:b5:6d:bf:ad:58:e8:d7:7f:3b:
38:f8:14:29:96:dd:d2:bb:59:f6:11:37:39:f8:cc:
27:7d:d0:0a:7d:fd:40:6d:36:5e:ed:0e:91:46:f5:
77:02:d3:a0:4b:cf:86:0c:fb:8d:fa:8c:b9:f7:23:
0f:78:d8:94:1b:34:a2:d6:25:d0:c0:63:81:f1:26:
88:6f:1d:23:48:58:85:ec:c8:18:c9:40:d6:f0:12:
38:c6:be:40:8e:34:29:c2:ac:ef:a2:3d:fa:33:6a:
4e:26:ad:84:e3:1f:35:3f:8c:df:9e:75:14:63:d0:
34:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AE:37:9E:E2:9F:47:5C:71:AB:55:52:83:06:4A:33:4C:5D:DB:9F
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c7:f8:e9:3a:87:11:f8:16:32:74:d2:30:b6:24:d2:20:09:
e4:50:aa:fd:14:b2:07:ef:91:00:80:38:0a:2c:56:da:33:9b:
71:56:74:e7:e8:cc:ab:02:0a:c1:6f:d8:d6:6b:6d:13:90:eb:
44:11:62:de:46:24:a8:77:02:64:85:a0:7e:c1:97:0c:a7:ee:
60:cf:ce:86:58:04:f5:51:aa:23:95:c6:3f:d8:4b:35:54:90:
da:04:bf:8f:af:53:e8:7f:3e:14:fb:6b:03:99:8b:b6:3e:e8:
67:89:6f:4c:75:ae:c9:ad:f7:4f:be:b0:17:f2:c7:0e:e7:65:
67:f8:41:ab:d2:75:5b:cf:c2:00:a2:6d:40:31:91:6e:fc:59:
cc:83:6e:43:07:9c:51:25:7a:e1:28:fe:4a:b9:bf:bf:71:74:
50:00:9c:bd:8f:6c:4d:c1:56:b6:19:76:37:40:5b:7a:f0:75:
fc:28:90:70:02:cc:1d:74:80:da:c3:8d:c7:e6:66:85:09:47:
c4:9a:c4:0e:20:4a:10:bf:d8:33:60:b0:b8:22:27:f4:cf:74:
8c:78:68:21:26:b7:94:c1:6c:08:4f:f2:2c:08:13:b7:a1:8a:
fc:ec:a5:6d:cc:5e:5e:58:3e:a3:be:92:a3:e0:1c:58:f3:77:
e9:e4:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:42 2025 by rpki-client