Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier: 3LiMegcAheJzIRhfIfOw7oeoPD0Xyyy+AnQT1RNn0rg=
Subject key identifier: DC:96:38:3A:91:48:83:BF:D9:41:C2:CB:5A:54:DC:68:60:73:A8:F4
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 0194BC3C53014154BBCCF73CB92B46422600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: DYJYj+Q4+vB86eh1KdtxdIdHG8OjpijgBSBWhnlsfIE=)
2: MgGDvxLOtMPwXMbYQuh7K6Nu5E0.roa (hash: R8z9BxbXd7Dke2ejYNt/dzLTxcDWFrg7+4k/8QPKV/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:53:01:41:54:bb:cc:f7:3c:b9:2b:46:42:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=dc96383a914883bfd941c2cb5a54dc686073a8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:0a:bf:5a:50:74:3a:58:cb:33:00:8b:0d:
3f:14:ee:03:42:21:19:6e:f4:8e:c0:78:3d:1c:f0:
1e:25:3e:07:23:e1:56:05:46:36:e4:92:9b:eb:1d:
97:73:90:02:6a:2b:24:b9:fc:7a:33:d7:e4:49:98:
10:be:7e:62:05:b8:b2:7f:5d:b0:d4:54:e7:46:d4:
d3:3b:1c:ca:20:30:4d:d5:9c:30:5d:b7:c4:ad:6b:
45:30:32:ac:69:38:8e:50:cc:91:a0:ae:b5:fa:43:
2e:ba:34:b9:e9:22:f3:13:5b:02:ca:86:51:7a:54:
7c:dd:06:fd:06:a3:d2:9a:70:60:a3:c6:cb:be:32:
a5:d0:28:63:31:4d:9a:30:34:fb:2e:2f:70:0f:85:
7e:68:5c:cd:b0:5c:61:28:3d:18:15:d4:20:ab:34:
88:d5:65:3d:b2:f3:c0:be:0c:0f:e4:e4:25:ad:ec:
e0:95:1a:a0:1d:ff:67:e7:d0:56:6f:28:b1:11:35:
42:42:85:6f:83:1a:b6:f5:d4:25:d8:96:d0:82:a0:
7c:98:20:a1:ac:a0:9d:63:d4:47:1f:67:bf:c1:ae:
d5:55:82:85:dc:33:7c:ad:3d:62:ca:76:d0:f4:de:
0b:af:43:a5:70:c8:5e:9c:08:1c:be:1e:fa:bc:e8:
00:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:96:38:3A:91:48:83:BF:D9:41:C2:CB:5A:54:DC:68:60:73:A8:F4
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:0e:a5:05:58:14:d6:f0:cd:07:94:98:0f:68:44:0a:99:99:
2b:d7:d4:b5:b2:31:7f:11:da:7d:62:c8:3e:5c:44:c3:5f:47:
36:71:6b:3a:1c:21:ce:e6:81:a4:35:6f:c1:09:e6:83:6a:84:
75:da:a2:5e:3a:41:b9:b0:ac:f3:da:a9:99:72:ca:08:09:9c:
7b:b1:57:08:54:57:49:e0:07:d1:94:15:44:9c:7e:df:5e:04:
60:30:c4:f5:1b:26:62:3d:18:4d:49:1d:4e:d2:c8:86:54:0e:
5e:77:b6:de:ff:c1:2d:9a:52:29:b0:fb:ac:b9:9b:f9:3f:f1:
79:12:58:38:7e:62:77:42:e0:7f:c7:fd:ce:62:4d:79:5e:de:
e2:fb:75:cf:b9:7d:24:c1:27:8c:62:d0:b5:04:4e:9d:14:90:
48:a6:fb:cd:3f:8c:7e:77:8a:2f:f9:49:b0:d3:bf:90:96:05:
95:14:a9:ad:8f:04:5b:fc:ce:f2:d0:9b:68:7d:2c:9b:45:d2:
20:6f:a7:e7:69:d2:2a:dd:11:3c:22:e0:dd:f7:a2:58:a1:bb:
39:25:03:a2:5a:74:c9:4d:c2:ff:50:96:bf:6f:ef:41:a2:5b:
7d:12:a9:eb:d9:b1:7a:0a:4f:25:e5:f2:3c:d3:8a:05:5e:28:
17:d8:d6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:54 2025 by rpki-client