Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: 7TlfZxuzBtLWCEgV2kNSp66pLgi9CVVbDhZIcASaBPU=
Subject key identifier: 2E:48:31:47:3A:CE:1A:7C:34:1A:7E:FA:C7:AB:DE:DC:6D:AD:CA:F4
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 0194BC73197B53B5E5DFAF47C6AA4A5DF158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 1143
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: lMS+PMxgt1ltwRZ6Ha3zuK5QuCb3GrWdpyaO55ME/DI=)
2: FLCT51ZJwMwx0vO_c1Crc2b8m68.roa (hash: QKUzT6JzZRll2THVZgHHi9WC7xvGZyFj5/BsNgA/xuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:19:7b:53:b5:e5:df:af:47:c6:aa:4a:5d:f1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=2e4831473ace1a7c341a7efac7abdedc6dadcaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:48:76:b7:19:0f:db:a9:6f:63:44:f9:00:
40:f8:39:27:ae:6e:df:3e:f2:30:e2:7d:61:a7:7b:
2b:ec:6b:2f:f0:24:7f:bb:51:fa:75:28:dc:a0:16:
e3:8a:81:62:4e:52:59:a9:c3:fa:aa:0d:0d:cd:76:
7f:5f:59:23:de:78:c3:0c:4e:60:9d:1e:9d:15:b9:
b5:29:23:d8:fa:4a:1c:08:4b:5e:9a:32:92:cc:6a:
20:a4:ff:32:f0:8a:d0:f3:0d:81:10:2b:22:7b:e5:
3f:41:f8:bf:54:46:a9:86:3c:2f:3a:95:f6:0e:d9:
fd:68:d0:ac:7d:9d:42:2d:15:a7:6e:a9:48:70:87:
4a:60:8c:b8:be:cf:de:d2:93:02:67:75:0e:e5:cb:
21:7c:5e:7e:96:12:7a:a5:f4:06:61:88:72:17:7f:
34:c4:8a:fc:22:8b:82:ce:cf:9c:55:4d:99:53:df:
ef:07:50:a5:ac:b9:51:7b:87:b8:9f:fd:c1:3f:ad:
4a:d4:91:c6:60:e4:7b:92:99:d0:f3:f8:65:0e:98:
6c:30:ec:a8:63:11:b6:d7:83:7c:8d:c0:1c:f2:3c:
85:75:45:d8:61:6c:18:b1:67:2a:5f:1c:97:2c:ae:
ef:ab:79:f4:27:08:33:b4:a8:1e:3b:46:d5:64:4e:
1d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:48:31:47:3A:CE:1A:7C:34:1A:7E:FA:C7:AB:DE:DC:6D:AD:CA:F4
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e4:c2:38:64:8c:96:48:18:3e:0b:2e:85:df:61:83:d2:c9:
32:1f:eb:04:45:01:4f:9f:20:b4:11:b9:ea:88:04:9c:40:bb:
cd:ec:5f:ab:e2:4a:df:ef:a9:44:f7:b0:79:ec:06:a7:6e:56:
6d:e1:45:b0:05:ce:f8:43:f5:51:9f:80:dd:a0:fa:1c:9c:4f:
d7:8a:d4:fd:fb:13:b8:54:5b:99:34:83:3d:76:dc:de:9d:f4:
55:97:64:e6:c1:a1:2c:e4:a3:3d:7d:16:cf:c3:59:51:ff:7d:
3c:fb:1a:7e:52:5f:56:52:c5:8b:17:d6:2a:ac:31:45:ad:97:
75:6f:38:34:92:67:5d:60:15:6d:a0:c1:35:67:76:8b:b1:59:
4f:64:15:91:c0:c5:6a:95:a0:25:da:7c:83:69:dc:a0:37:b2:
8e:ec:b6:66:1b:22:5f:46:94:65:57:52:5d:de:46:20:e2:2a:
59:7a:c8:37:e4:b0:c9:24:4c:79:ee:da:91:2f:7c:42:1a:93:
72:b6:57:65:3b:98:51:59:06:33:f0:a0:50:c5:86:9c:b8:08:
41:4d:23:d9:68:7c:44:db:f9:07:34:d5:cd:c1:3c:9f:09:60:
8c:92:4c:16:90:1b:6f:8f:81:d2:b4:8d:eb:82:bb:d3:e9:b5:
23:37:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:16 2025 by rpki-client