Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
File: aL0515MSXGhN_ycviGIrrEMhgPA.mft (raw, json)
Hash identifier: cMSPq9OZQpwf92CLvSKhlvkobuei5YDuIgYVwqVsNs8=
Subject key identifier: D8:6A:D2:B8:95:C4:97:9A:62:34:0F:31:89:73:44:BC:79:E1:40:F4
Authority key identifier: 68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
Certificate issuer: /CN=68bd39d793125c684dff272f88622bac432180f0
Certificate serial: 0194BD853CD765DAFA3FB9EEC17BEF5A5DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:13 +0000
Manifest this update: Fri 31 Jan 2025 18:00:13 +0000
Manifest next update: Sat 01 Feb 2025 18:00:13 +0000
Files and hashes: 1: UITBZGotoEJu7VXUeHnQEpzUh80.roa (hash: +4A8vS2ImMKHLoBNzMFALbXMy6VYqIeTofj/Zphvx9I=)
2: aL0515MSXGhN_ycviGIrrEMhgPA.crl (hash: hpoz6Y3H7QTCox6Ssuozj0xdy412ykYX42JKt59X4AI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3c:d7:65:da:fa:3f:b9:ee:c1:7b:ef:5a:5d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd39d793125c684dff272f88622bac432180f0
Validity
Not Before: Jan 31 18:00:13 2025 GMT
Not After : Feb 1 18:00:13 2025 GMT
Subject: CN=d86ad2b895c4979a62340f31897344bc79e140f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:b7:29:0e:a7:7c:9d:49:5f:38:b3:b6:2e:
d2:58:55:e7:80:e2:0f:b5:2e:cb:66:4d:cc:38:89:
06:af:ee:6c:b5:ba:25:30:0d:2f:33:cd:10:3f:f7:
38:40:d9:38:f8:e3:27:66:18:59:29:4a:9d:66:5e:
22:e2:d1:86:8c:34:e9:44:25:21:1c:43:8f:df:67:
54:65:b0:32:a0:8c:57:43:6c:df:64:9a:21:a1:dc:
28:db:73:92:84:ea:ed:99:f2:ae:13:73:c3:b4:dc:
f4:f5:1a:b4:30:73:c1:f4:e0:34:de:42:21:d1:6f:
44:ea:cc:89:61:39:de:c7:1a:1b:03:e9:e1:6b:89:
17:68:8e:22:01:70:db:63:dc:73:0b:fb:30:1e:6c:
1a:8f:92:29:9c:86:42:70:95:22:4d:5c:17:f1:26:
f3:c5:2f:a1:90:7e:7d:0b:4e:63:9d:2e:e9:6e:06:
bb:d5:56:36:90:23:a4:f4:39:62:95:b2:58:70:d4:
01:ae:08:c5:e2:00:2c:49:c0:ab:6a:b0:09:41:8a:
5d:f0:da:47:95:28:28:75:6d:3b:d8:35:2b:63:77:
b7:54:68:23:7b:f2:38:ae:04:25:45:29:85:6d:50:
62:41:74:df:a8:6f:d0:a9:c4:92:a6:f4:41:90:2d:
6d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6A:D2:B8:95:C4:97:9A:62:34:0F:31:89:73:44:BC:79:E1:40:F4
X509v3 Authority Key Identifier:
keyid:68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d3:b2:10:a7:56:bb:77:43:ad:0d:40:44:b7:5f:e3:22:8e:
22:cc:a8:1f:c4:9c:c6:1a:75:7e:0e:16:f8:97:90:72:60:d9:
7c:de:76:ee:30:c0:24:66:21:57:22:b1:60:0c:7a:90:a7:38:
e4:dc:75:a8:1e:3e:f7:d1:a8:4d:61:55:65:4a:ac:ee:e0:80:
a8:6e:47:4d:a4:94:fe:65:f5:81:ba:a2:3b:89:62:7d:7f:5b:
6f:5b:bd:a4:8a:44:33:c9:82:fa:95:28:a5:67:1f:75:a1:ae:
cd:4f:84:f1:fe:b5:98:0e:4f:45:aa:d8:55:6b:ff:ab:2c:a7:
47:bb:64:62:5b:fd:29:1c:48:2c:dc:f9:66:a2:91:ac:10:55:
99:bb:83:24:bc:1d:da:f7:a3:4c:33:5f:7b:4c:ca:53:e4:0a:
56:62:eb:40:1d:a0:ce:65:9a:60:7c:03:6e:44:82:ae:a6:03:
87:56:e2:de:87:d6:51:64:23:4f:28:24:da:8e:3c:de:36:dc:
01:0d:61:97:78:b3:d3:48:1b:60:de:48:a6:61:a3:d2:54:6f:
b0:c6:67:d9:5f:0f:b9:27:fb:af:c6:09:7f:c5:f2:fa:1e:32:
65:24:58:95:6c:52:a9:8d:4f:68:63:97:c8:53:70:ff:4b:77:
3e:80:82:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:11:17 2025 by rpki-client