Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
File: A9yMYjke_dTdGORoGeF3gAKpoYc.mft (raw, json)
Hash identifier: fWrekYQzCbk3ExW10pPbJL0/9E3xLsFSLUUBC7G29hc=
Subject key identifier: 30:0E:BC:F3:43:53:1F:32:F4:A5:FC:C0:CB:76:09:88:64:67:0D:EF
Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
Certificate issuer: /CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Certificate serial: 0194BCE05D040A82FB45690070F63F6DCD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
Manifest number: 01EA
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: A9yMYjke_dTdGORoGeF3gAKpoYc.crl (hash: h2izCEudOhMGLosaRcm1TMMC2r5eNCJjooWfZLaJwDE=)
2: KMKlBIWdbSLJxhG6mlrGw76dE8w.roa (hash: wMSY3OLmFX6U/ZLAS1pVuwf7520K0rZUrgx8A8ShiM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5d:04:0a:82:fb:45:69:00:70:f6:3f:6d:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=300ebcf343531f32f4a5fcc0cb76098864670def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:12:44:5b:cf:fc:cd:c5:17:33:22:61:b8:
9f:0d:21:b9:61:fb:e7:d9:ac:8e:c5:fa:2e:54:0c:
d5:23:35:91:a6:52:c4:3d:b3:fd:1a:b1:bf:56:24:
f6:d0:2b:85:ca:a2:33:2a:d2:da:9b:58:bf:73:65:
0b:2a:69:12:aa:1d:80:8a:26:29:de:8b:38:7f:03:
49:1f:4d:07:87:40:30:73:03:88:bd:55:27:82:8a:
95:41:b4:36:ca:5c:bd:48:33:2d:29:6b:86:5b:50:
3b:03:30:01:d7:8e:8c:35:0f:2c:97:ed:3a:cb:be:
4d:4a:e7:3d:48:13:23:e6:d0:1b:8f:e5:b5:be:f5:
58:bd:d7:1b:47:99:37:25:70:61:7c:53:ab:9b:f7:
6d:e1:8e:83:86:d0:1a:0d:13:6a:b5:3f:3d:6f:68:
b3:44:8d:bd:d8:0d:41:ee:5b:9a:60:66:71:90:a8:
e1:2b:16:43:9e:ac:d7:33:74:90:f0:85:22:10:e5:
5f:31:59:aa:36:b1:c0:97:3d:52:03:52:a3:2e:7b:
bc:40:e5:8a:bf:ec:2e:a9:31:39:58:6e:1b:b0:0c:
ee:0e:db:88:82:50:60:d8:86:6d:e2:b6:86:da:a4:
d8:10:c0:c8:96:c1:04:d7:1e:40:53:77:4b:b3:4a:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:BC:F3:43:53:1F:32:F4:A5:FC:C0:CB:76:09:88:64:67:0D:EF
X509v3 Authority Key Identifier:
keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:30:0f:6c:cd:3a:58:d6:30:ab:6d:93:a8:a4:10:02:a0:c9:
65:5c:bf:46:d7:8d:32:47:69:d9:a5:e5:c5:1f:a2:03:a3:82:
e1:69:5b:ad:0e:bb:93:9c:29:92:7d:2a:1f:61:63:27:c3:5c:
eb:88:b9:d3:f7:28:1b:90:77:02:79:97:f0:02:fa:1b:09:9b:
5b:30:ee:02:c5:7a:f9:90:d2:32:61:d6:42:42:38:eb:5a:99:
03:29:0b:30:e7:b6:ce:bf:ab:97:35:58:01:be:1f:26:88:40:
7f:8f:3d:51:42:97:16:36:a5:38:0c:49:a5:38:31:3a:52:d3:
27:76:11:d8:eb:ce:c5:ec:d2:de:86:79:67:9c:8d:b6:f5:c0:
f1:e3:79:c0:e5:60:48:ea:dd:db:b7:42:6f:36:f6:f0:58:43:
83:0f:ac:3d:c0:4a:e1:d6:66:6d:31:9a:8c:df:17:70:d8:01:
fd:8f:ff:07:02:b3:b6:de:3a:4c:2d:d6:22:ee:17:92:62:18:
4c:72:b1:c9:ae:c7:e4:c1:14:3c:f3:8b:6e:ea:ad:40:9a:17:
d7:d8:e0:19:77:cf:90:d1:af:e8:8c:fa:79:df:3e:07:7d:dd:
65:72:46:0d:8d:77:0e:ac:fb:65:74:6e:15:26:f9:4c:60:48:
1b:36:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:56 2025 by rpki-client