Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier: h/TZ3dwK/Ua1cEaZSCrnpXzBJt9TblVanKtAFg4CI/s=
Subject key identifier: F8:6D:81:D0:DE:0C:4E:06:95:62:02:29:09:F0:D9:3D:F8:C4:23:E7
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial: 0194BCAA1F3A438319AE92A8DB4C32216B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number: 0B63
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: JCtXDy0wbp2lk1T9gMAluDbkef50rE1MOB3h/PfY+DI=)
2: bdzpUxndz61zfLz7ajjz4tyOnrg.roa (hash: GGVEBdFUMRnBM929MvvBO/m7RzF/RhhQavvdN/BpLuc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1f:3a:43:83:19:ae:92:a8:db:4c:32:21:6b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=f86d81d0de0c4e069562022909f0d93df8c423e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:ba:37:77:21:69:33:e9:48:1f:01:4a:c4:
f7:e2:52:73:ff:38:72:4a:7a:9f:47:e4:f9:b8:c1:
0a:59:ba:55:e1:91:56:39:04:ee:a7:37:44:f5:6a:
f7:88:2f:c2:f2:e5:0f:56:4e:1a:2d:45:82:0e:93:
d2:34:cf:d3:30:46:f8:84:9a:dd:68:9e:9a:71:a9:
12:b3:c2:b4:bf:7a:bf:3d:f9:5e:e8:27:2f:3f:8c:
80:fb:e1:70:cc:0f:b8:99:fd:52:0a:1a:e6:90:b5:
5d:dd:27:d7:cb:dd:23:e3:e4:8c:a2:17:b6:6b:90:
3b:fe:7f:67:91:58:15:e0:e0:ae:83:ea:b7:5c:84:
77:cb:b6:39:c9:53:07:b7:00:7a:8b:6d:05:ae:a3:
63:d1:aa:d7:64:13:9b:67:36:eb:d1:c4:56:4e:23:
21:14:09:83:ac:a7:d4:64:06:cd:bf:2e:bf:84:6e:
78:7f:af:cb:c1:3a:1b:9e:70:28:68:64:bc:cf:ef:
e0:32:2a:46:14:5a:50:7b:8d:79:ee:01:8b:c2:a2:
b7:9a:77:f1:31:dc:1e:f8:a7:5c:8d:8f:91:88:23:
0e:cc:df:2a:ae:86:d2:fc:51:69:48:b1:6e:ba:44:
9d:da:2e:83:16:3f:05:37:5f:92:19:b8:cc:00:61:
13:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6D:81:D0:DE:0C:4E:06:95:62:02:29:09:F0:D9:3D:F8:C4:23:E7
X509v3 Authority Key Identifier:
keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2b:4a:60:9f:24:91:22:7d:1c:2d:7d:49:b6:22:74:2b:f9:
82:d0:51:c0:51:cc:48:0f:37:26:95:88:93:b5:96:e0:3d:9c:
80:80:16:6e:66:7d:e4:c5:75:f0:63:ed:6d:4b:a5:38:f0:70:
93:dd:1c:aa:21:a1:a2:83:ad:dd:34:0c:46:ed:c3:78:3c:2e:
0c:76:eb:04:6a:0c:03:6e:08:ea:6e:17:bb:cc:3a:aa:96:d5:
15:33:fb:7d:8d:63:ba:8a:ab:8a:2b:69:7e:2b:e4:b4:0f:e1:
0a:45:8a:e4:c2:3f:36:be:79:0a:40:5e:98:5e:18:f3:fb:68:
0e:79:bf:41:84:43:c8:82:bd:26:8f:62:15:ae:dd:d3:a8:91:
9a:8e:da:01:65:a8:62:1a:3b:d8:aa:fa:5f:16:83:80:f2:21:
25:16:3e:63:b0:9f:79:6b:00:0d:67:af:df:27:65:8e:af:9f:
75:ee:d5:68:bb:16:74:c5:e6:fc:25:10:73:8b:98:e6:34:52:
b2:d4:9c:03:c6:cc:44:5c:5b:54:41:86:dd:bf:e0:79:ef:3f:
b4:61:49:dc:1a:ea:bd:92:6b:58:f8:e6:f7:b7:c5:ac:95:ac:
5a:bc:6a:1d:b4:c7:37:0a:d9:79:45:01:0a:eb:ee:16:70:49:
16:ee:61:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:06 2025 by rpki-client