Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json)
Hash identifier: 41VzZsk9WbPUh/H0WZ6LbmfG0/ToFp9AmXNo596DJKk=
Subject key identifier: 78:C9:45:C7:A1:02:22:C0:29:28:54:CB:6A:AD:43:8C:47:A2:72:D1
Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Certificate serial: 0194BD4E5296DB186E52DD5117D395E84248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
Manifest number: 10F8
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: z4ovcxPohUQm+ZGAOMCy54EQ9bCuxZyR8DAwFVqwrA0=)
2: hqWXJdixoyBrN6tefJIPGEJ4XNw.roa (hash: jM1EQVCCuIqaZA8YHmIHlFvXnaAVW3MrjR0+9kCFwLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:52:96:db:18:6e:52:dd:51:17:d3:95:e8:42:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=78c945c7a10222c0292854cb6aad438c47a272d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:05:a8:41:af:7a:f5:13:65:d5:c6:92:83:
bd:e6:44:aa:9f:b2:08:d1:ba:47:fd:1e:0b:b7:1a:
03:50:e8:ee:99:f7:24:89:c2:55:7d:f9:e1:45:c2:
d9:0f:f6:01:da:fb:c4:59:84:ee:62:a4:4d:54:8b:
c7:22:18:d7:51:b8:35:38:d4:db:43:60:49:f5:02:
5a:11:27:16:7f:ca:b1:7b:02:f0:2a:43:8a:df:cb:
6f:1c:d0:30:2d:ab:fc:d0:ad:69:ec:2e:ab:1f:0d:
d6:e0:42:80:01:d9:9b:e4:1d:9c:9c:b6:f1:71:f0:
ed:cf:f3:51:54:65:f5:21:e6:4a:88:fc:87:7b:8f:
24:e1:57:55:b8:3f:44:67:7b:cc:18:fd:bc:75:93:
c9:4f:86:a6:aa:bb:42:ce:24:84:fc:c7:4a:68:29:
08:b4:62:07:ac:63:30:3c:e4:52:37:8a:ad:6a:f2:
52:ce:2f:51:56:a6:14:a3:79:79:92:6d:27:f3:8e:
6b:b5:48:2c:92:7b:a4:9c:b0:7d:95:d8:16:81:bc:
1c:a3:97:c3:3d:1e:15:d1:80:a4:4a:7c:93:8e:22:
c8:82:5b:76:e4:ac:19:ce:57:5b:8c:49:05:8d:28:
ee:1b:e3:e5:19:e2:7e:e4:15:eb:7a:04:38:2f:aa:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C9:45:C7:A1:02:22:C0:29:28:54:CB:6A:AD:43:8C:47:A2:72:D1
X509v3 Authority Key Identifier:
keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d6:84:68:72:9b:44:24:18:91:2b:fd:80:9a:b9:13:13:2c:
64:8b:4c:21:b1:55:38:64:36:1b:89:dc:82:e0:3e:63:ea:f6:
e2:8d:52:fe:ee:5b:a4:05:6f:61:91:9d:96:70:8d:1b:cb:e1:
be:6e:32:fb:00:3a:e5:e8:b9:07:9d:05:c0:96:71:19:55:fb:
93:61:5d:c4:56:24:a7:2b:38:9e:e3:27:2a:5b:58:35:09:43:
dc:9c:e1:3a:ea:19:56:52:ce:40:9d:ce:8c:9d:fa:6a:ff:50:
48:e3:17:b4:0c:0a:91:88:b7:a3:e6:e9:79:a0:dc:dd:a5:89:
8a:cc:e6:53:35:cf:03:8e:28:76:33:1a:f0:8c:b1:75:01:38:
af:2f:35:a7:73:18:2b:11:30:f9:f9:1b:08:4a:d1:9e:33:8f:
91:81:5c:14:68:50:ee:cf:8a:3b:0a:c0:a7:10:c0:19:82:59:
81:32:29:73:e3:b8:f9:a4:4f:f5:76:a4:20:b7:fa:5c:8e:e2:
82:cc:cf:cc:80:66:a8:76:a4:01:df:68:25:49:4c:48:99:24:
3d:b5:17:43:1b:54:e5:38:5c:e2:bf:32:28:8f:42:66:15:b7:
21:72:7e:3f:62:3d:a1:7b:8a:04:91:c9:50:65:e0:11:55:f7:
cd:c7:bd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:29 2025 by rpki-client