Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
File: aO_MqEmPXSbBIK802EbAKB_2Ka8.mft (raw, json)
Hash identifier: YBrjsuMJKsbalAiEyusucIRYWv4BlnV37y8iGgSYQTg=
Subject key identifier: 57:0A:9D:0F:EF:32:47:BE:BE:DD:AE:D8:4A:93:E3:43:30:C5:08:AF
Authority key identifier: 68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
Certificate issuer: /CN=68efcca8498f5d26c120af34d846c0281ff629af
Certificate serial: 0194BC728C9D18D21170258135C80B602B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
Manifest number: 0E98
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: GHqEL6JAVUmcta0ua1xiWmAJoGQ.roa (hash: 7O+NBZ+TuBJTJteP/UXJTx1xycSzV918lhjqSNEUyfU=)
2: aO_MqEmPXSbBIK802EbAKB_2Ka8.crl (hash: JHE00KJKDDygcTBALoo/01f/V1Ec32oasOxpGZ52Mk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8c:9d:18:d2:11:70:25:81:35:c8:0b:60:2b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68efcca8498f5d26c120af34d846c0281ff629af
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=570a9d0fef3247bebeddaed84a93e34330c508af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:8a:6a:86:d2:6a:33:d8:10:26:2e:2d:79:
46:ec:cc:16:92:7a:ba:e4:7f:74:cb:dc:63:e5:e2:
07:fe:58:6c:de:c6:4d:92:2c:77:29:db:7f:d1:9e:
43:59:38:12:47:5b:8d:fb:27:d9:f8:c8:fc:88:b9:
a2:7e:a2:0d:98:1a:5f:8d:ac:2c:3e:88:75:89:a5:
ce:1a:b8:e9:21:80:80:d7:c6:4e:75:db:0c:7c:b0:
df:d0:22:d5:cc:5b:00:94:1f:ce:96:bd:3c:77:7e:
d4:fa:11:df:7e:7b:42:a9:e2:01:3d:eb:3d:fd:58:
5b:10:c0:9c:52:82:9d:f4:7b:9b:27:49:59:f6:80:
e4:6b:67:ac:6c:fd:47:a2:a1:bf:83:f8:22:d1:48:
5b:24:45:ec:3d:2f:e0:36:bc:77:a3:11:ea:18:8b:
2e:19:36:c4:88:9d:22:84:36:7f:6d:24:21:55:a4:
12:f2:30:af:f2:d4:6c:f1:ab:fd:a3:08:87:32:de:
00:bb:ab:a5:61:57:e3:2a:c0:16:eb:26:35:9e:e1:
b3:bf:66:58:50:f7:32:66:82:c8:af:66:0a:a5:a0:
e1:bf:54:46:ba:31:16:c1:fc:c9:f1:8f:86:f5:53:
b7:69:f0:8c:dc:2b:fa:59:e7:78:5d:1c:79:c5:59:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0A:9D:0F:EF:32:47:BE:BE:DD:AE:D8:4A:93:E3:43:30:C5:08:AF
X509v3 Authority Key Identifier:
keyid:68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5f:bb:d9:bf:01:77:4e:0d:3d:68:42:7d:5c:86:07:5a:02:
b1:7c:fe:c1:a7:7c:f1:50:b3:4a:9d:f1:6d:a3:f9:89:39:38:
63:8d:e9:e8:6f:f8:40:62:43:1d:07:ce:d5:5c:43:e2:9f:2a:
e9:eb:4c:57:7c:94:1f:16:3d:c8:76:d4:5d:29:e3:87:04:be:
19:6c:06:27:a6:7b:bf:86:de:22:3b:d2:e2:51:da:33:01:9b:
85:a6:26:63:c4:80:d7:7c:06:73:22:2a:a5:59:15:d6:ab:d5:
e8:11:a4:1c:b3:82:70:6e:db:c5:06:49:73:c6:8b:38:e0:bf:
ca:44:46:6e:e4:93:73:f6:fc:a2:8e:e3:85:83:f7:f6:28:56:
45:9b:94:fa:88:96:23:80:ac:e0:04:85:a8:5a:2c:83:80:ba:
5f:23:06:99:15:a0:c9:34:4c:9f:66:28:3d:c5:24:af:d4:16:
c8:64:23:96:eb:8f:ba:1d:ce:6b:ec:70:8c:35:95:6e:25:61:
13:64:70:a0:95:56:d3:11:4e:20:cd:1a:19:41:c0:87:d6:20:
94:60:54:58:df:6d:96:8d:cd:79:6f:91:18:3d:c5:18:d3:e6:
84:b6:d4:4a:d1:6f:6c:fa:a5:b0:80:3d:8c:e2:80:60:04:1f:
32:3d:cf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:34 2025 by rpki-client