Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier: CIhcfwUFzZX4RQQM7cTqBXAlZVdEVsh7/jPaSkKOcAY=
Subject key identifier: FE:15:9E:3B:29:A0:C9:E6:D2:3C:CE:EA:1A:DC:08:93:AC:F1:62:11
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 0194BC3BDFB242F75C6F3084A781D3565650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number: 0E46
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: VCf04wxIT7ZS+y86+l9JvAeZSFe2gr5VwOGSYZq3M90=)
2: QQdNezXcd1-hIhXGU4Qn8ucBV9Q.roa (hash: WaSlkfe1MwojG0zscntSp+2Lok4NRbwf50hshXXL8jg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:df:b2:42:f7:5c:6f:30:84:a7:81:d3:56:56:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=fe159e3b29a0c9e6d23cceea1adc0893acf16211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:d6:8a:ef:a9:82:9f:cb:c3:d6:d2:6b:55:
c9:17:15:53:75:3b:bf:94:29:c3:da:59:ab:ba:0a:
8b:66:10:ad:70:41:b8:e0:73:fe:e9:dd:76:e7:31:
cb:67:49:3e:1a:a9:b6:ad:12:d1:a1:db:14:8c:1d:
7b:05:11:e5:8e:73:f4:f6:ca:2a:59:b5:e5:55:08:
ce:d1:b5:21:83:72:98:b2:01:91:04:b6:b3:0b:bb:
19:fa:6a:68:66:a8:3e:a2:34:bb:17:a3:0b:40:b0:
3e:79:93:8f:bf:32:ce:c7:60:bf:0b:b3:f7:e3:47:
5b:c0:e9:85:da:dd:0e:9d:ba:7a:84:d0:86:4a:75:
39:a1:69:d0:ae:41:9e:a5:78:05:5f:27:55:d7:65:
50:09:83:af:5c:de:ee:00:b1:75:a8:a3:0a:73:0a:
a2:88:0d:f5:09:e7:09:ed:91:6a:cd:b4:a0:0a:a6:
1c:18:e7:f9:3e:2b:62:b4:02:64:28:4b:44:1a:6a:
84:af:11:4e:a3:c6:ac:15:02:c7:da:20:fa:49:e9:
d1:49:ec:1a:58:08:83:69:59:2b:0a:3b:91:ca:3c:
31:b4:54:bd:1c:3f:f9:91:70:59:43:1e:1a:ff:9d:
98:46:c1:e1:a8:21:25:58:ad:c9:95:0a:70:29:87:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:15:9E:3B:29:A0:C9:E6:D2:3C:CE:EA:1A:DC:08:93:AC:F1:62:11
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fd:4f:3b:f8:25:5a:b3:57:16:3c:c8:c3:76:0d:9f:9d:96:
eb:02:1f:b2:79:7b:f7:57:2d:3a:ad:57:d8:44:2f:94:ae:37:
0a:03:09:d5:3e:b7:69:42:49:b3:e9:af:77:2f:9d:be:5b:70:
d5:61:18:91:b2:b6:1a:c0:da:b5:39:18:28:5b:a9:42:2e:f4:
8e:b8:7a:67:52:db:28:c2:a0:2a:54:3c:6a:b6:fe:12:10:64:
c2:d4:61:62:d5:ae:d7:c6:95:27:f4:b2:44:37:1a:aa:00:85:
0a:50:93:9d:71:4a:87:af:a5:a3:35:64:3e:1a:29:64:ab:be:
39:7f:ed:a1:a8:c1:bb:ab:08:a8:dc:21:a4:f9:97:f8:cc:0b:
20:27:57:e4:cd:89:c4:ea:8d:ea:6e:99:e5:c9:d7:2c:36:4b:
91:07:f6:47:0c:56:84:31:de:ce:d9:f6:33:58:24:00:e6:57:
96:b9:1e:75:d5:d1:7b:ee:52:29:43:cb:97:ec:c2:15:c5:6a:
26:2c:35:35:c1:69:91:07:f3:f7:2f:e3:c2:53:3f:6a:e8:45:
a4:01:b2:6f:e6:73:04:b3:53:59:06:b3:e0:5a:fd:79:47:4c:
31:a8:e4:8f:b5:a3:03:ac:84:03:c7:82:86:cc:7c:12:cb:81:
2d:37:99:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:55:14 2025 by rpki-client