Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier: TKfsy5pAsDPxB5he4wTjRchERIS+8BOu/qbg2N3ZbVY=
Subject key identifier: A3:C1:51:8C:49:42:2E:39:24:2A:E2:E2:C0:68:61:74:0C:F8:C8:51
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial: 0194BD4E39424528CADD79B6217E3DAC1F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: SMDBkcUfJXo+VtlTkhMaSD5uLK3ifWsfmLiZz+0B+6E=)
2: oyTiWJ913wVTjnCcw6Q4RBUZbq8.roa (hash: /NMMdoNH5sZWYkg6OnNqyz5087fDkPkdrRkbme1onLo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:39:42:45:28:ca:dd:79:b6:21:7e:3d:ac:1f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=a3c1518c49422e39242ae2e2c06861740cf8c851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:33:07:19:d1:9c:a9:cf:34:aa:f7:67:7f:82:
59:78:e0:2f:e4:57:db:61:f2:b8:d8:da:6a:4d:c8:
42:96:5a:03:16:6d:d2:24:d5:6f:42:63:53:93:9b:
2d:d7:10:a3:64:6e:79:3d:41:e9:b8:3e:9e:9e:0b:
ca:0c:6b:14:09:54:ed:41:39:f2:d9:be:ac:9e:da:
b3:46:81:ce:41:ff:7f:f1:a6:0e:db:c5:39:f6:a5:
67:60:86:83:53:ba:e8:de:e7:6e:a4:ab:9d:bf:a8:
4a:fe:6f:6f:7e:7f:10:d3:ca:6d:37:c5:61:49:d4:
a0:e4:40:16:6a:68:3d:5c:bc:2c:33:78:dd:f1:28:
8e:a6:aa:07:13:94:f8:ce:e5:eb:57:41:0c:e0:a9:
16:8e:e7:84:66:11:21:13:14:dd:a5:ef:d3:5a:6d:
08:53:e2:0e:67:fb:58:74:0b:29:14:f4:61:37:8e:
94:1b:0a:ea:ea:14:48:f3:be:1c:46:a9:62:5d:4a:
ce:c0:83:eb:ae:ba:92:36:3f:bc:61:75:10:37:bb:
90:0f:c6:20:26:8b:d4:51:88:99:ef:ad:71:70:26:
6b:f9:f4:1f:d1:da:49:9e:8a:89:53:0e:86:33:21:
12:5e:ae:21:37:61:63:b6:09:aa:ff:2c:32:52:ac:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C1:51:8C:49:42:2E:39:24:2A:E2:E2:C0:68:61:74:0C:F8:C8:51
X509v3 Authority Key Identifier:
keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3f:20:c9:e0:1a:c6:33:c0:cb:aa:85:2f:63:c9:c1:02:18:
6b:8a:df:1d:ed:31:8a:43:5e:2c:ef:ab:70:d0:cd:a2:10:0e:
42:cb:a3:e9:80:df:87:73:5c:ea:f9:6f:2b:7e:7b:45:e2:cd:
63:6e:7b:7f:a4:36:1f:4a:50:ba:c3:27:7c:1e:a2:6d:91:19:
3e:28:fd:a1:1d:b5:5a:ec:69:d8:d1:e7:8b:77:44:9b:8e:5b:
ca:98:31:d2:3c:68:88:64:86:f9:4a:37:3b:df:d4:ae:0e:ab:
11:1e:7b:87:96:08:60:0e:29:16:6f:d0:a6:b7:bd:4a:32:74:
15:40:38:e9:59:a0:8b:68:db:bc:d1:c9:26:2f:bc:2d:c3:12:
86:00:80:dc:c2:0f:3f:4d:75:28:3a:17:d7:d7:ad:fd:bd:b1:
69:ec:eb:1a:40:73:75:b5:bb:ff:4b:90:b3:ae:4f:b8:e6:c0:
fc:9c:01:c2:d0:4f:61:cd:ec:e9:8c:0c:4e:62:84:0d:80:fd:
d1:97:a8:41:16:d7:1c:28:11:12:4b:1a:51:86:12:47:9a:6e:
ff:91:fe:75:9a:80:5b:03:01:68:f9:04:f4:c1:2e:e0:77:fb:
e7:b1:f0:2a:fd:96:c9:42:ae:f4:1c:b4:33:45:96:35:21:a7:
7c:e7:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:53 2025 by rpki-client