Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier: hcGHsn/px5rwwZsfykBIzw2RQesPCUaKDPXoK/k2R60=
Subject key identifier: 13:D2:82:C4:F1:12:75:91:0E:B8:84:A8:5B:4F:35:2D:11:31:3F:37
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial: 0194BC72C301EBACB7E53B244B7F02FFB8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number: 102F
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: Se+GREyFyJjst+2EaJM07XtrU1NaY/PxFDbM51IsQoQ=)
2: nMVNf2lQw6OBO1n2yk42KKveQrw.roa (hash: wyqNzIcUGswTCmLW0W5XZCdk6EXaGRyb1txoc0qPRcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c3:01:eb:ac:b7:e5:3b:24:4b:7f:02:ff:b8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=13d282c4f11275910eb884a85b4f352d11313f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:3a:ef:80:4f:38:ed:51:1c:0f:45:82:1b:
73:1f:18:53:2f:f9:1a:aa:af:52:70:25:e1:e0:3a:
97:ca:d5:6c:a3:81:5c:7f:78:44:30:c9:10:40:ea:
23:97:5c:7a:cb:87:1b:dd:8c:f8:e3:cb:62:1d:67:
83:0d:2c:4a:50:c2:96:4e:78:0f:e2:f5:8e:84:5d:
ed:4e:b1:b0:31:fb:99:c1:42:11:4b:04:3f:ef:80:
ff:5b:c9:03:07:26:d5:fd:19:f6:44:01:da:f5:47:
e5:c7:56:69:48:e1:2a:f0:07:27:46:6e:f8:61:f3:
63:f5:44:7f:89:b6:98:b1:54:26:c6:8a:e0:01:67:
a7:f8:86:47:b6:3f:d2:af:31:5b:71:4a:85:a2:56:
7c:b6:70:ce:48:0b:ca:61:a5:7a:ac:e5:e1:3d:cb:
8c:b0:79:65:7f:ec:1a:f2:cf:22:b6:5f:8e:f4:d8:
0d:e5:d4:f0:81:8a:ff:33:f1:d2:6a:b6:93:fe:2e:
dc:f5:82:e4:da:7e:1e:6e:42:f1:ca:d8:54:69:d6:
b3:4d:8c:f7:d4:ab:43:70:a2:31:2e:ac:b4:27:d2:
bd:b3:ce:2d:69:2e:9e:97:15:93:58:79:4d:f2:61:
45:bd:85:c3:89:87:d6:7c:5d:83:4d:83:79:0c:c1:
aa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D2:82:C4:F1:12:75:91:0E:B8:84:A8:5B:4F:35:2D:11:31:3F:37
X509v3 Authority Key Identifier:
keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:44:af:9a:d3:15:3f:a3:39:81:a9:f4:57:f5:8f:9e:dc:92:
c4:d9:20:95:21:49:9d:4e:97:d2:48:f3:56:c9:fe:97:ba:c2:
bc:3a:25:33:df:f3:4e:45:01:21:3b:ad:68:68:71:dc:19:38:
c2:8b:72:37:44:7e:df:5c:80:47:17:42:2a:f0:90:c5:b8:b0:
92:e5:22:c8:34:49:21:c0:27:48:9c:bd:45:05:34:5a:76:bc:
d2:59:65:c3:6a:0e:e6:22:c4:ad:08:67:e3:77:f7:d6:3a:e5:
54:a3:8f:6e:c8:0d:87:9d:15:8e:f9:58:b3:c9:5a:18:ff:4d:
86:2f:e9:ce:e4:bd:a2:59:9b:da:51:68:ae:a0:a9:7b:71:24:
24:b1:d0:34:fd:48:72:3c:7f:2c:7c:91:61:bf:0d:8b:39:22:
94:1a:06:ee:81:cf:d6:15:b0:13:4a:2a:d8:18:e2:c2:9d:7c:
99:29:52:bd:ee:e5:78:96:70:43:59:e6:91:cb:29:ec:ac:a8:
0e:72:ca:ec:e3:ac:16:05:92:f9:0d:57:d3:f4:67:eb:19:57:
65:7d:53:bc:b0:f1:41:bc:43:bf:cb:74:4b:13:d3:dd:45:29:
75:3a:ee:b1:38:8b:b5:dd:a1:f0:d3:c6:6e:78:1f:f5:a0:99:
70:b2:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:45:57 2025 by rpki-client