Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
File: aHyL8iKia_HJxmOMw1bSg1UC8tY.mft (raw, json)
Hash identifier: f2M3VcW7L1MggPjrsxMosQkp6tSlHzgwfUZj1Bk/qXc=
Subject key identifier: C4:79:0E:57:C9:CB:5C:35:0C:9C:DB:B1:CB:3B:97:38:89:1C:0F:B0
Authority key identifier: 68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
Certificate issuer: /CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Certificate serial: 0194BBCDE9318A935A9806CE72E0F8621F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
Manifest number: 056A
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: aHyL8iKia_HJxmOMw1bSg1UC8tY.crl (hash: NBPV+rzYCWtl3GXMRLCCnOR8xWeU03B0PPHDn1HYugk=)
2: szxe0DPYsGTMI_tgKM1yaWgLDtI.roa (hash: fjZgmmGMINi/iYDucRgC4NEVBx45QTUkAnBaw6M5XK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e9:31:8a:93:5a:98:06:ce:72:e0:f8:62:1f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=c4790e57c9cb5c350c9cdbb1cb3b9738891c0fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:95:dd:46:bb:cb:88:85:02:fa:c0:e3:41:
6b:4c:ba:2d:bc:d8:22:ac:e4:68:73:12:d6:bb:e6:
b9:04:9a:cd:47:d5:fb:73:61:9c:a2:93:83:6e:71:
e0:07:2b:7d:4b:f9:2b:46:66:54:18:d9:1f:96:d6:
f6:41:2c:47:93:95:64:e6:1d:63:e5:dd:35:51:9f:
00:c4:32:90:d2:cc:1f:b4:a6:b7:26:ca:3f:6f:e3:
3f:01:f6:f4:f3:9b:b4:d6:df:c6:50:c9:c3:54:1f:
d7:97:50:3c:ad:55:9d:a5:98:5c:85:8d:b8:15:c0:
b4:67:bc:0e:a7:02:81:af:af:d0:4f:41:22:8d:58:
ec:0b:7a:08:22:39:7a:14:e5:a3:0a:31:18:a7:4a:
75:65:41:4e:28:8a:f2:da:2c:7e:88:6d:5e:03:24:
43:a8:10:4d:ca:33:e7:70:b1:91:c4:fe:ad:30:9a:
27:75:4a:aa:0d:f9:b5:be:0d:d7:8d:a8:06:5c:d3:
1b:3d:39:28:43:eb:5c:73:d6:82:99:dc:93:af:28:
90:b0:7a:fa:57:48:78:1c:9b:43:46:67:d3:22:9b:
ca:e7:20:2a:ad:0e:5e:64:2b:b9:01:5b:d1:40:e4:
8d:73:b5:0a:96:26:b2:37:af:ad:b7:bf:fa:e0:f6:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:79:0E:57:C9:CB:5C:35:0C:9C:DB:B1:CB:3B:97:38:89:1C:0F:B0
X509v3 Authority Key Identifier:
keyid:68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:51:d6:c6:03:8e:3c:57:95:32:19:d7:1e:f7:b0:ac:6d:13:
9e:da:1c:1a:9b:11:ba:e3:ba:ea:04:29:a5:65:8e:c8:1e:71:
6b:6c:8f:28:e8:bd:67:a0:5f:3c:ec:fd:e9:6c:04:eb:4b:d4:
8e:90:fa:f5:17:09:2b:b1:9f:51:11:59:be:9a:21:3c:77:d5:
b1:b9:c9:ec:83:9d:65:12:28:e2:5c:2d:9c:9d:47:66:c6:d8:
bb:3d:7b:8b:3a:68:47:6a:f0:00:5e:61:35:c6:de:6f:37:aa:
a4:35:fc:bd:18:a0:6c:30:45:bc:ee:f1:ef:24:cf:26:3f:f0:
a2:a9:6f:e7:bc:e9:3d:1b:a1:2e:b6:83:41:a7:63:40:2b:2f:
f2:14:1e:69:2c:63:f3:4b:09:57:70:99:14:9e:4c:60:de:6f:
69:ec:98:dd:18:c0:7b:97:32:01:19:cd:a3:8a:c7:5a:fc:8a:
f5:e4:52:72:e7:9d:b2:85:82:e1:92:1b:35:b9:7d:02:b7:85:
e1:25:f3:3e:f5:5f:10:1f:20:54:32:52:d2:32:9c:11:79:78:
14:23:a8:f3:2a:ac:bb:a2:8c:79:39:cd:65:1a:94:56:98:a9:
29:d7:64:34:f5:3a:4b:c2:f0:7d:43:c4:77:46:be:0c:f1:52:
22:f6:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:00 2025 by rpki-client