Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: S8GDvwLgYQ0i658IgxI2S/uWGOe3C9A+Qd0V6UrKrk4=
Subject key identifier: 48:06:DF:28:39:42:50:4E:9F:8F:D5:9E:F4:14:36:DB:63:EC:59:B5
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 0194BD85B9ED2C03DD0EFE5BF73B5322485B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 1078
Signing time: Fri 31 Jan 2025 18:00:45 +0000
Manifest this update: Fri 31 Jan 2025 18:00:45 +0000
Manifest next update: Sat 01 Feb 2025 18:00:45 +0000
Files and hashes: 1: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: CH318HLdoyTinU2tN5R2VTGtgEyy9CI2OS0NpdEaJkg=)
2: PAFl-pG2JHaMz_7ipR6yMf63H8w.roa (hash: byy0wWUqy3xmET5bVuzwYGsa7Zk9Dk0kE6IQV8R/QgY=)
3: jZL5Xhdd_DQTPlseqK0seytctFM.roa (hash: iK3t86giIYaf8WbR2Oyl7XO/RS0ik8f6mwnnTPsecrY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b9:ed:2c:03:dd:0e:fe:5b:f7:3b:53:22:48:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Jan 31 18:00:45 2025 GMT
Not After : Feb 1 18:00:45 2025 GMT
Subject: CN=4806df283942504e9f8fd59ef41436db63ec59b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:b9:ac:72:da:e8:60:53:9f:50:1a:1c:72:
4c:15:28:b5:e0:64:c4:69:d5:bd:86:cc:c9:b9:6a:
00:80:d9:59:61:e0:54:8b:65:62:17:1d:d5:8f:5a:
9b:5c:be:59:73:4e:0d:19:e2:4b:74:3b:32:c6:67:
b8:64:39:9c:42:49:e3:0b:de:8d:c9:13:3b:b1:79:
d3:c4:6c:83:5c:77:22:47:92:6c:89:8b:ef:d2:88:
d0:0e:d6:47:61:ae:4b:d4:17:29:12:4f:1f:5c:43:
58:b6:6c:c3:d7:e2:99:10:aa:8c:c4:61:61:f4:9b:
7a:8d:90:56:a4:7c:d5:76:7f:e0:16:18:a3:56:ce:
bb:cb:e7:d7:1f:63:56:84:80:ec:3d:0c:2a:47:fa:
c8:ba:e9:6c:b5:24:5a:9d:33:01:42:c9:d8:57:94:
cd:6c:7e:7b:7d:a7:bd:83:30:6f:a6:a3:18:ea:58:
0e:d3:b4:cb:12:e8:4d:cf:cb:b8:45:14:93:58:0b:
d3:72:b5:bf:5b:18:fd:91:37:fa:bc:56:fa:69:2d:
7e:c7:39:52:5e:e0:4a:ac:f1:ae:99:2f:2a:e4:68:
21:95:6a:f5:f0:7e:33:b9:ef:a7:9f:2b:41:9a:48:
64:29:92:a1:db:f0:7a:7f:79:9d:ed:1a:44:ee:53:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:06:DF:28:39:42:50:4E:9F:8F:D5:9E:F4:14:36:DB:63:EC:59:B5
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1a:31:6f:93:30:dc:d1:34:c1:bb:9c:44:d3:41:6e:4d:f1:
f4:38:f2:5d:1d:f2:d3:61:4d:2a:66:e9:da:70:c5:01:ed:ed:
1f:2a:ac:99:35:6d:35:7f:2a:87:8f:4b:04:1a:10:ff:f1:07:
ca:9d:e3:c9:53:ac:3e:69:2a:5b:ab:8d:86:0c:a2:ba:c2:f3:
b5:41:05:70:de:d6:6d:a6:7f:2d:ac:01:bf:82:6e:7a:73:5d:
af:0c:71:a1:c5:9d:22:fb:06:62:64:35:62:cc:20:3f:de:3d:
1a:d3:14:19:f7:f3:90:c7:2f:c2:69:63:ea:93:f5:13:37:e7:
8c:75:e4:fd:9f:fe:3d:29:88:78:9b:c1:36:56:3d:fc:d3:9f:
e9:94:6a:a1:02:01:6d:2c:af:2d:79:30:68:73:0d:f5:87:da:
da:96:d8:d0:1a:ab:7a:12:7a:06:3a:a1:33:3a:17:f6:bb:38:
9b:f4:d6:14:91:30:f8:16:aa:41:bd:a4:87:77:04:b6:0d:52:
f7:27:70:d9:d8:dc:91:d6:9b:40:f3:e2:df:25:e5:f7:01:6a:
9b:ec:19:a7:25:a8:e3:ae:5e:02:f8:36:ce:c1:b9:fc:92:5e:
a8:ca:c0:43:52:ee:a1:09:be:d3:95:7d:ca:ae:31:96:a2:87:
13:c7:dd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:54:56 2025 by rpki-client