Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File: AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier: GJ7OfGaalIeTNS+80ut/WIXtR+9NyIcWnt6N+bUemjQ=
Subject key identifier: 8D:71:69:30:CD:8C:12:89:AD:D6:39:EA:94:46:14:17:25:38:4C:7F
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial: 0194BBCF0045F62D01B90CBDFEC14C406908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number: 0522
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: dgx7cJ2xAz4Ze5fhpcv1rVThItwe2Cpb85ffLYIK3c4=)
2: ejcizS9O97cOz2tmfObTCZwdW-4.roa (hash: wllgRCbw1IesItOzWT+KT7KXRGHhzCz/LBiRwpHauW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:00:45:f6:2d:01:b9:0c:bd:fe:c1:4c:40:69:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=8d716930cd8c1289add639ea9446141725384c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:8e:56:36:12:71:ff:af:f4:5c:75:cb:8c:
84:03:16:59:74:a3:df:af:0a:22:ae:ff:c4:88:cd:
8e:97:c7:f4:03:81:c8:a3:fe:67:3a:43:8a:d4:e7:
99:00:0c:04:57:51:01:3b:11:69:e4:41:34:6c:fc:
82:1e:2a:ba:5b:47:b9:65:1c:55:d4:fe:55:bf:b4:
ff:93:59:48:83:d9:81:28:59:b8:40:2b:ef:2d:0c:
76:f9:c5:96:bc:08:ea:12:ca:3d:97:ad:5e:0d:78:
ba:be:b1:f9:e6:95:2e:b0:2e:2d:10:97:fa:96:f0:
cd:30:ea:38:4c:0f:7b:98:4e:1c:d4:c4:3a:f8:2d:
da:0d:ba:cb:de:bb:e5:27:3f:05:d7:8f:15:08:e6:
14:d0:b4:a4:07:ef:f7:b7:aa:44:f5:81:1a:97:6e:
ba:47:38:c2:cf:dc:72:21:bf:53:32:59:0a:aa:ae:
35:4c:9e:36:22:fb:9b:de:2b:4e:1c:bb:58:12:13:
f8:f1:60:f9:82:b8:1e:1c:40:4e:dd:ad:ec:1f:24:
53:92:1a:9f:f2:50:fe:97:74:f5:84:d6:c3:c3:7f:
2f:ec:ad:0b:d8:6e:36:23:69:0b:d4:1c:99:77:f6:
e0:eb:78:5d:ae:7c:dd:2c:4c:a5:ad:1a:cf:7c:b8:
f6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:71:69:30:CD:8C:12:89:AD:D6:39:EA:94:46:14:17:25:38:4C:7F
X509v3 Authority Key Identifier:
keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fc:f0:59:11:3d:98:23:32:7d:e7:2c:db:71:c3:a1:b3:49:
fe:d0:3a:0e:52:d8:93:7e:04:90:07:d5:1c:af:8c:56:2e:19:
d9:26:57:62:20:aa:f8:7c:60:fd:ca:e3:4d:95:44:60:41:c0:
ad:b7:63:16:c2:11:ff:71:03:f2:4a:99:f5:08:d5:be:d7:b4:
d9:15:d9:c6:1b:62:49:e4:db:5a:05:96:55:6c:d1:aa:76:fd:
48:27:ab:24:17:d1:2d:0e:32:1b:bd:a7:c6:e7:b7:c6:01:ab:
ff:75:fb:d9:0e:91:c2:fa:74:bf:dd:b6:da:4b:aa:ed:9b:b7:
d5:6c:8b:c7:5f:6e:10:89:7a:de:ac:43:dd:59:b3:69:4f:c4:
4c:ef:00:5c:11:c0:32:9d:37:5e:b1:26:d8:7d:ff:aa:25:08:
3b:af:01:5a:f5:e7:dd:4a:9d:c5:69:70:3b:59:95:84:b0:ac:
c0:e8:66:44:25:ae:17:e2:73:88:57:b7:22:5c:fa:ab:a0:8b:
c8:18:05:df:d6:e5:2d:80:ad:db:ec:6a:66:b7:60:41:5e:d2:
07:c6:65:f4:40:ad:e2:d3:97:83:c0:c6:ce:41:1e:6f:fd:5d:
62:f5:30:54:47:e1:44:da:97:79:65:08:f5:c3:0a:e4:d7:16:
4f:f2:72:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:32 2025 by rpki-client