Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
File: AmWtlOeXE1kGs-EahHyOr9CU50U.mft (raw, json)
Hash identifier: 3XBcLKvZyUExM4bWZIoBY3RTJ0ijMfnlnlT6kET2BSQ=
Subject key identifier: D1:77:56:A2:D2:C0:F3:8F:A2:DD:78:9D:77:A1:60:24:FC:B3:90:74
Authority key identifier: 02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
Certificate issuer: /CN=0265ad94e797135906b3e11a847c8eafd094e745
Certificate serial: 0194BCE0A088438AD2226E6A970B29E4E1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: AmWtlOeXE1kGs-EahHyOr9CU50U.crl (hash: WT8WuW6lN06Bnj2IBo8tFuBIb9tQZchKi/pgOeCTIbc=)
2: SZBAF2HXjdb03PkJpOVysksT_8k.roa (hash: Krg8gvZLzhIMGcL+cCXvbm4nAV3yJmkdyGbkdVJo2Lc=)
3: ubILPtIGLcaC5tdulnfQHq0BdoU.roa (hash: BJYBDA5/MNdL6MG7ef+wXgyzjJiGCTkzcJs87HpsXHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a0:88:43:8a:d2:22:6e:6a:97:0b:29:e4:e1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0265ad94e797135906b3e11a847c8eafd094e745
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=d17756a2d2c0f38fa2dd789d77a16024fcb39074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:fd:b2:a4:71:d3:3d:94:3d:71:b4:68:3c:
f5:07:bd:5e:0b:a5:42:37:10:27:af:b8:89:60:56:
86:a7:49:c0:28:47:e8:87:cf:68:8d:25:76:4a:2b:
24:e2:d8:99:06:3c:c2:2c:4d:71:de:cd:fc:ba:2a:
82:23:90:96:26:fb:9f:51:e5:03:ed:32:04:ff:3e:
3a:8e:dc:d6:6e:f4:d1:a5:53:c1:88:96:7a:29:87:
a7:a9:17:cd:1f:9f:bf:e9:6e:ec:a7:fd:b9:9a:d4:
46:3a:f2:1d:f9:9a:19:ee:06:0e:50:cd:03:b4:3a:
8d:a5:2b:01:6f:f8:d3:c4:a4:41:2f:a3:2f:90:75:
4c:c9:99:48:fe:12:e4:66:51:a9:d0:84:a2:cb:b5:
8e:47:92:96:06:2e:4a:1c:d1:c4:b4:8a:4d:d4:3b:
d3:ee:1e:39:fd:93:7e:fa:f9:69:1c:4c:2a:84:c7:
a1:76:45:d1:2d:d7:60:d7:65:5e:6f:51:49:26:fe:
2d:4f:ab:88:68:cd:2a:d0:f7:a7:ed:41:97:2f:28:
84:e9:98:a8:dc:9e:63:f7:ad:58:c8:98:8d:2e:cf:
e5:dc:e5:53:96:7d:2f:0b:68:fc:d7:0b:36:17:76:
ad:5b:c0:d2:e0:d5:ef:77:c6:00:f6:ef:83:a7:64:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:77:56:A2:D2:C0:F3:8F:A2:DD:78:9D:77:A1:60:24:FC:B3:90:74
X509v3 Authority Key Identifier:
keyid:02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c2:04:d6:89:4c:3d:51:6b:3e:48:51:41:9a:23:3a:58:85:
fe:4c:ff:26:dd:99:60:30:c1:64:0a:3c:22:c0:a8:d3:84:a1:
63:2a:16:48:80:de:84:9f:8e:d2:04:f0:53:8e:8b:ee:e9:f9:
cf:d4:ff:3a:d2:a4:d5:93:f7:46:09:28:20:1b:82:10:f7:e0:
33:be:82:99:73:31:3f:e6:bf:25:8b:14:34:d2:92:cd:09:e0:
71:68:dc:6f:27:1c:9b:b5:07:84:27:93:95:bd:71:f9:af:d1:
4b:72:f4:65:eb:93:c4:12:14:5c:e0:9d:af:ae:bb:d9:f7:0d:
34:ae:b4:09:c8:56:d0:82:e2:2a:c4:0d:ef:1b:86:bd:e5:5e:
d5:99:01:b3:26:97:88:46:44:f5:a4:f1:56:88:02:d9:8e:95:
b9:e0:0c:fa:27:17:9a:4b:38:1a:38:18:f4:31:1c:8f:7b:80:
6d:3d:78:af:25:13:2e:b9:97:cc:3a:44:b8:06:e1:11:65:a8:
e4:67:95:01:da:f7:60:d8:df:44:6a:80:5b:09:f2:7f:0b:79:
0c:db:cf:36:de:8c:4e:64:3c:0b:8f:e6:fe:87:a4:a4:46:0e:
c6:05:3f:58:50:58:70:86:f6:b2:38:bc:5f:15:e5:15:7d:de:
6b:ca:de:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:40 2025 by rpki-client