Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier: c96lc51HyBp+lyfVIcoQOknMDNgyGrlMqwUF/szgK94=
Subject key identifier: 17:FD:E8:C0:82:6F:28:05:1D:BE:A1:DF:52:A2:5C:0B:CB:32:54:38
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial: 0194BCA9FB7BA222B001B11AEFA9ED816048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number: 38
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: Bs6Y5z4IZ4rZi/Qe6EX6SF+yV1zmWmc/XfKlthrNTd8=)
2: jMIN8b0BVc9eEY8W0xUyZYn9gu0.roa (hash: T+38e+ztuuV+6KtpVMPU6c7/hBQtyKbXl9bJ797XzNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fb:7b:a2:22:b0:01:b1:1a:ef:a9:ed:81:60:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=17fde8c0826f28051dbea1df52a25c0bcb325438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:31:d8:04:d1:95:4c:e5:93:57:e4:4d:de:63:
84:a7:93:c0:1f:88:c3:79:42:1d:c6:2f:52:f8:2a:
65:73:c2:62:6d:1d:33:8c:68:2f:38:32:ef:c3:1e:
70:fa:32:0f:45:b8:59:cd:fe:fc:db:90:ee:61:61:
13:91:9c:f4:28:3e:14:51:78:37:14:b0:76:e4:68:
98:8c:5c:42:f3:7b:35:63:79:50:da:c0:26:1d:a7:
6c:34:c5:70:cf:ad:72:22:89:be:ac:73:09:60:6c:
c8:c2:c9:51:e1:99:52:4a:98:ec:64:cf:ac:fe:21:
62:42:a8:05:9a:4e:30:9b:79:f3:9d:8a:ab:60:80:
66:63:36:21:cf:de:0b:05:45:d1:be:80:af:25:cb:
e1:ab:fe:61:6a:55:10:b0:3b:28:e2:d3:ad:20:c1:
4f:71:c2:8d:57:d1:21:67:77:5c:9e:06:14:82:4d:
f3:18:56:74:6d:3d:b2:7e:28:a4:c2:b9:e4:73:38:
8a:25:84:0b:97:87:42:ba:ae:79:d4:52:d6:a2:a7:
c5:41:f8:ed:89:2d:ca:c2:d2:fd:cc:78:50:6c:22:
ec:38:f2:a3:85:ee:73:69:2c:f5:74:0e:bf:8d:8c:
68:66:e7:97:33:cf:26:be:de:7b:99:1b:98:b0:85:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FD:E8:C0:82:6F:28:05:1D:BE:A1:DF:52:A2:5C:0B:CB:32:54:38
X509v3 Authority Key Identifier:
keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3d:04:cf:e3:7e:0d:2d:2f:3f:53:ff:bf:19:67:d7:be:9a:
87:94:6f:39:64:76:5a:84:4e:dd:90:a3:f1:d0:be:e1:32:e1:
86:9f:55:7a:a4:13:13:8f:83:c2:6a:1f:22:56:a4:1c:a0:86:
67:0d:47:2d:1b:3b:73:4d:09:b7:21:de:0c:89:3c:02:a1:9e:
ce:46:d0:cf:06:18:60:10:3e:80:1c:cb:bc:73:d3:63:e2:3f:
9c:39:40:23:05:2b:1c:bd:cc:61:b1:0a:67:38:7e:58:3f:c0:
b6:95:f2:8e:2e:1c:32:45:da:75:41:70:91:8f:75:58:7c:6c:
29:6b:a9:0a:c6:b5:20:14:54:1e:ba:94:98:0c:25:71:82:e6:
5f:00:34:82:66:39:f5:66:53:05:71:3c:fc:98:63:ec:ea:d8:
20:33:ec:a2:aa:3e:92:91:67:a3:14:63:8f:36:c3:7e:09:c9:
0c:6a:dc:32:d3:ef:fa:78:08:f0:54:d7:07:c5:aa:c1:6d:16:
c8:b3:63:8e:03:80:4b:b7:10:80:19:1c:ba:02:82:2b:5d:ad:
c2:2d:05:c6:3d:48:ca:9a:eb:4c:eb:dc:4b:3b:ca:4d:b1:26:
3f:26:3e:f8:04:09:ce:c8:24:67:de:38:b1:5c:c3:d2:be:a9:
b9:11:76:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:19:14 2025 by rpki-client