Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: ouoQU0IGLoWGYS6VsWZelWtsW2y2JB0z07pTilYgPK8=
Subject key identifier: E3:FA:F6:32:91:6F:36:3C:6A:F9:9F:BE:29:99:69:54:96:3C:E1:4F
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 0194BC72AB3456B0AA2D4BCD2FE0B4347D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 0169
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: OpDNL05aTn8AKwbNpILYqnCdHivYQcgcMnHRYJt1G48=)
2: Gv4EnRb88MY5aVLEY17_OZ0Wl08.roa (hash: WkS34pHH/XzAUtEopuzXUXT2LtpQyPdLz2PYfITDjLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ab:34:56:b0:aa:2d:4b:cd:2f:e0:b4:34:7d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=e3faf632916f363c6af99fbe29996954963ce14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:d6:5d:af:78:a7:fd:2c:cd:3b:36:2e:a9:
4b:1f:41:ed:ab:8b:37:d8:3d:d5:41:4f:77:0e:16:
2e:fb:8a:be:4d:25:9b:c2:3b:a2:05:59:0b:9f:15:
6c:4f:bb:d1:ac:81:6d:0a:36:82:69:23:9a:e2:4c:
80:ce:8a:ff:64:1a:ba:3e:14:7c:e9:7f:4d:0d:19:
5f:d8:98:34:54:22:80:ab:dd:0a:06:a8:04:2c:f5:
54:14:ce:f7:1a:21:5d:28:7a:74:b0:e4:24:05:57:
57:48:b9:88:f6:c4:9e:62:40:cc:95:52:8d:6a:b4:
34:d5:a1:17:89:30:47:ac:af:d0:a9:55:a9:94:7f:
75:58:77:88:66:0b:84:d6:4d:c6:06:d2:91:ec:75:
07:1d:8c:80:a9:46:ad:90:ed:39:8c:7b:ea:e6:e0:
81:51:a5:de:85:41:82:4f:9a:46:92:3f:e0:1d:06:
9a:49:4f:7d:21:d2:3b:1e:d9:7d:89:58:a0:a8:cb:
c8:ee:6b:3b:64:04:15:ca:83:59:c4:b3:fb:f4:16:
47:2a:ad:20:84:6a:95:92:4c:07:08:e6:2b:d5:4c:
13:98:bf:0d:3e:b2:ce:d0:1c:b6:aa:bb:af:0b:ea:
73:47:71:fb:fe:58:48:ec:d1:a0:85:52:29:2c:d4:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FA:F6:32:91:6F:36:3C:6A:F9:9F:BE:29:99:69:54:96:3C:E1:4F
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:47:7a:e7:45:43:ab:f8:55:49:81:7f:17:f1:56:aa:bb:84:
c3:0e:3d:5d:60:e7:3a:ba:01:86:c0:39:97:46:6a:61:1b:35:
ab:46:86:10:e1:2f:75:d6:05:9c:74:9a:2f:59:ac:10:62:20:
3b:18:2e:34:63:33:12:2c:5e:49:78:14:5e:ed:b2:09:03:2b:
e8:73:61:6a:b6:d8:7c:bd:96:20:99:b2:61:5a:5b:25:02:c3:
11:9c:16:f4:ac:4f:ed:c0:0a:50:b3:4a:72:3c:2a:51:b4:e1:
af:20:b0:e8:a1:c2:24:91:31:87:01:be:77:3a:33:e2:9b:ec:
48:c5:e2:3b:e9:62:75:91:c5:21:98:96:f6:ed:c0:7a:0c:dd:
e5:e0:15:f7:af:e7:d1:4f:ca:5c:bf:51:0a:71:50:b9:5c:14:
e9:30:a1:8a:c1:a8:ce:ab:f9:bb:30:44:47:09:48:62:e8:84:
a5:54:85:49:c4:e5:5f:0b:ce:21:68:56:a2:78:70:e2:20:6c:
99:14:4a:3c:d1:02:66:d3:fd:8a:ad:c8:2c:13:f3:d6:57:23:
5d:fe:1e:cb:b4:d3:52:69:e3:38:d0:73:31:5c:89:96:6e:83:
30:a9:f8:70:68:d1:25:61:10:76:c5:ab:84:b8:1a:dd:48:a6:
72:11:b9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:32 2025 by rpki-client