Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: kUmwTI/oCIkP3kFx0hGm0V1KlNoYGXrUiOWIv3PmdRU=
Subject key identifier: 3E:FB:C7:E3:D9:ED:D5:6F:32:E7:C2:55:23:BF:F9:0B:84:1E:1F:18
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 0194BC3C865E273D69DE21736FFDA469668C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 1146
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: +K2nkgkjAZ/TzIIRMGU/qVM8XyJY5/O0jQ14Pog56dM=)
2: o2P4F8wGwS7Hu_Z9DavQWwnt9SU.roa (hash: vp0AJWW08FmlyogXHIG/NX7ZAqoKcGLBFnnNS6LdgqQ=)
3: w0akvhdXeVYTuAlZb0ebhYIQ-fc.roa (hash: wDr5pC8ALwDb+JSgX5rgKPXkUmbOaUgv+fsaXxbR3wA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:86:5e:27:3d:69:de:21:73:6f:fd:a4:69:66:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=3efbc7e3d9edd56f32e7c25523bff90b841e1f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:8d:9e:b7:94:0f:68:5c:8a:11:1a:49:a3:
1a:68:7a:47:ab:01:89:44:12:f9:a1:9c:fa:c1:85:
c0:72:bc:59:e8:d2:25:7e:42:a0:2b:de:d0:15:46:
4c:06:a0:fe:92:50:14:ce:dc:65:e2:73:a3:1c:b5:
46:c5:2f:be:c7:8e:28:c4:6e:10:b8:cf:02:9f:22:
37:ee:74:ac:b3:df:4c:d6:c0:2e:75:0b:e0:a2:14:
2d:de:c7:29:6f:60:1d:0b:7e:97:ff:3c:b1:b3:68:
97:20:92:dc:3f:35:11:93:66:9f:2c:5a:85:6b:f8:
a7:a4:c7:33:4e:e5:59:0a:da:f3:c2:28:1f:96:bc:
9a:1a:1c:f2:2b:46:39:64:1a:37:a2:49:74:35:65:
65:5c:28:8d:13:a5:ec:a1:26:78:a8:09:a4:84:cb:
15:cb:c6:ca:cc:4c:78:69:f3:35:bf:f7:61:43:b7:
4c:07:24:ef:84:c9:a9:26:14:d8:08:66:3a:09:44:
a5:a7:11:b1:2c:02:d7:07:7f:e0:84:df:eb:34:2b:
12:22:cb:d6:bb:05:10:44:2d:8d:5c:04:2f:d9:43:
85:93:2e:cd:a9:25:ee:15:fc:e9:ee:f8:22:cf:cd:
f9:18:df:d9:e0:62:b5:09:4a:86:40:4a:1a:57:f1:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FB:C7:E3:D9:ED:D5:6F:32:E7:C2:55:23:BF:F9:0B:84:1E:1F:18
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c7:47:8f:46:93:8c:84:97:ec:b2:d8:12:c3:12:d5:c4:a6:
35:95:7c:98:f1:90:e6:23:69:f0:30:ff:51:77:3e:f7:70:1a:
c4:43:46:b1:ec:62:e5:a1:2e:ba:de:46:74:ed:25:f3:12:45:
9c:84:19:ff:1c:5c:dd:0a:87:3d:04:48:c4:6f:0e:d7:60:42:
5d:ce:6a:9b:a2:99:78:19:40:c3:87:47:38:30:fb:8b:31:72:
7e:3f:42:82:58:3c:56:55:55:b5:5e:dd:68:85:75:ba:8e:60:
0c:98:1b:30:b9:ea:1b:6d:c2:89:f2:c3:9d:bb:0b:44:c8:f2:
e2:28:22:8d:b2:c6:d9:eb:7e:d5:3c:de:5c:ce:b1:dd:b3:bd:
98:7a:f1:cd:9b:67:e2:18:fe:1b:91:66:f7:02:5a:60:55:81:
72:4d:0f:61:3b:59:88:d2:49:22:6e:91:74:44:d3:1e:32:a4:
3c:06:6f:35:8b:72:64:44:ff:fd:82:7e:06:ec:a7:e3:29:1d:
32:96:d6:a0:a2:97:1f:99:7e:af:aa:98:68:f9:e4:64:f0:80:
56:38:c8:63:77:0b:ef:9a:52:84:95:a1:a7:39:19:3c:58:82:
85:66:e8:4f:ed:4c:f2:99:d3:ae:c7:44:26:88:41:69:42:43:
59:67:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:48:40 2025 by rpki-client