Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
File: AxGHu2TIff3S-gLy2F1HnsJoPlc.mft (raw, json)
Hash identifier: QO3D2PWp/6JVIm8Onu4j+JbqdEopOJ24EP0PWtCo4s8=
Subject key identifier: 72:2A:07:E8:0E:3C:EE:C2:F2:7F:F4:17:69:19:BA:9C:00:60:4C:75
Authority key identifier: 03:11:87:BB:64:C8:7D:FD:D2:FA:02:F2:D8:5D:47:9E:C2:68:3E:57
Certificate issuer: /CN=031187bb64c87dfdd2fa02f2d85d479ec2683e57
Certificate serial: 0194BC728CE9553796DC0F713AD12A347A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxGHu2TIff3S-gLy2F1HnsJoPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
Manifest number: 0DA5
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: AxGHu2TIff3S-gLy2F1HnsJoPlc.crl (hash: IrgJ6HQJbHVGvpGuzKpGdTLXIF1LDWIXEPf4F5Ur4g4=)
2: RBL9KvJn4Z6LF6Lv_aNjS2HVR-U.roa (hash: NP4KRCGo3Ljqg4Eze3XSBXZxYUwfkkvdN2sm3o+jER4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8c:e9:55:37:96:dc:0f:71:3a:d1:2a:34:7a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031187bb64c87dfdd2fa02f2d85d479ec2683e57
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=722a07e80e3ceec2f27ff4176919ba9c00604c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:23:db:b7:ae:73:07:a0:88:ff:3c:39:cf:
b5:2d:9d:e9:39:1b:73:75:5b:61:6d:ed:8b:77:9c:
fc:93:53:43:92:31:9c:57:f8:1e:96:bc:20:9e:49:
95:ed:35:a0:40:a4:f9:9a:b6:70:40:b0:02:af:b4:
87:f9:2d:cc:5f:19:5f:9d:26:a8:33:78:f4:44:10:
12:33:9d:97:92:c9:95:f4:7c:bb:86:eb:90:49:ca:
90:72:76:34:02:0e:8f:0a:aa:b8:af:0f:d8:b9:97:
02:f8:35:52:20:40:48:48:dd:47:a6:ad:dd:33:a3:
69:01:bc:5f:67:7b:b0:7a:ce:20:33:3c:5d:20:61:
9a:11:0d:dc:87:c0:4b:19:2d:28:44:6a:c9:48:e7:
7f:cc:8c:3b:d0:cc:4c:0d:58:49:ba:7b:df:16:d1:
a1:1f:16:12:84:79:b3:67:a4:54:87:8a:14:ef:60:
74:ef:32:c6:ea:0e:14:ed:69:bc:a7:c9:14:6d:61:
e7:4e:6c:5d:52:f7:45:60:3a:22:0f:b3:4e:e4:87:
9d:6c:82:e2:5f:95:d8:7c:f7:b4:64:22:86:d0:ce:
da:b1:1a:4a:bb:b6:1e:dd:73:25:3c:23:5e:ce:d9:
c2:f8:78:21:71:8e:ee:a9:f8:48:de:a4:49:f0:9e:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2A:07:E8:0E:3C:EE:C2:F2:7F:F4:17:69:19:BA:9C:00:60:4C:75
X509v3 Authority Key Identifier:
keyid:03:11:87:BB:64:C8:7D:FD:D2:FA:02:F2:D8:5D:47:9E:C2:68:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxGHu2TIff3S-gLy2F1HnsJoPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6c:3b:3f:92:58:47:0f:fe:54:b3:b5:2c:0f:ab:3f:68:bb:
cb:07:c2:0b:d6:d9:50:de:7b:ff:c3:40:ea:10:2c:21:18:60:
de:4e:0d:7c:4b:51:1d:9e:45:28:ae:0c:1c:8e:35:30:d3:5a:
a0:95:46:bb:cb:d3:aa:45:7e:18:50:9d:01:39:85:10:f5:37:
89:cb:3b:43:c3:45:80:62:cf:e2:d0:1d:b0:79:3a:13:18:47:
6d:d4:77:82:8d:5b:bb:2b:76:e3:6e:44:9f:b2:f9:22:2a:60:
7f:4b:a0:d2:0a:06:2e:53:78:51:9d:fc:36:13:6c:7c:0e:da:
a9:86:1b:3e:9d:b7:1a:9b:84:3a:06:74:65:4f:48:9f:63:8f:
11:fc:fc:c8:df:0e:20:57:ab:c8:0b:0b:a5:92:85:1c:5b:0b:
2c:74:86:e5:b4:82:bb:74:dc:53:aa:82:c2:1a:07:17:e0:df:
73:d3:2d:cb:d0:63:20:40:3c:45:0a:19:c0:5e:a7:8a:e7:7f:
2f:9b:f2:f9:19:2c:36:3e:5c:96:4f:40:00:ad:e1:30:68:03:
d4:c5:c5:51:3c:10:5a:0b:be:13:e8:43:c8:5d:78:e0:8d:91:
02:9b:74:97:98:11:45:09:89:ca:fd:22:5a:40:b1:f4:41:36:
57:d5:b6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:03 2025 by rpki-client