Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: uJ+JgP+MMHwkLUjhfE6q4tL8PQlccN5LUxRqIwW/5Es=
Subject key identifier: 57:B9:E1:F1:05:B5:90:BF:B0:49:F8:BC:CC:14:72:66:16:EB:52:74
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 0194BBCE4C389DA074F7102AD55B1F4936F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 02ED
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: ExGaGMHRMHV6Wwq7HUUBGaTmIOs.roa (hash: GrRPycpKBiqBeJAl7ze1jROyMQik0DJu7nFgEpAVFB8=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: yZMLLugNSuaC/jT6Fy1kWQQ4DZUztn+9qjAvlmPUX/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4c:38:9d:a0:74:f7:10:2a:d5:5b:1f:49:36:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=57b9e1f105b590bfb049f8bccc14726616eb5274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:c2:7b:4f:f1:c8:92:25:ed:03:c4:d2:dc:
c0:57:90:57:bb:42:25:1c:ed:ac:b4:3c:4b:4d:9b:
04:f8:c8:6e:50:c0:b2:a9:61:ec:5c:14:fa:41:28:
0d:5d:a7:a8:b8:a4:00:16:5a:97:a3:77:2d:3c:5e:
03:18:15:3b:ed:2c:fc:d9:8e:45:db:85:68:38:0a:
77:58:b9:a0:c7:48:81:3f:9d:0f:23:0a:69:c5:65:
fe:5e:83:42:c0:4f:ac:3f:ae:e9:6b:9b:85:40:3c:
c4:c2:97:31:86:b9:47:3e:c8:c0:d5:d6:13:78:06:
0c:92:a4:ca:33:4e:91:e1:1b:2a:19:56:df:31:ed:
81:8c:f1:62:a4:87:5d:c6:ba:31:a5:71:2e:fe:5b:
76:fa:58:ee:04:0f:02:72:b5:9d:c1:91:98:5f:52:
d2:10:9c:61:35:f4:5f:b7:d8:78:33:06:7c:f7:44:
e7:ef:51:b1:a9:20:a5:46:cb:f6:cd:dc:a8:9b:f0:
10:82:87:ff:d5:d9:a4:85:3f:46:4a:54:50:6d:3b:
00:46:17:d6:44:62:5b:f1:be:0a:fc:62:a3:7b:65:
85:4b:27:4e:ff:ea:f0:5c:ff:85:db:36:14:64:80:
26:6f:d2:2c:8b:1f:5d:a4:f9:2e:c9:00:41:33:14:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B9:E1:F1:05:B5:90:BF:B0:49:F8:BC:CC:14:72:66:16:EB:52:74
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:68:b8:e4:0f:a8:a8:f2:5c:3d:b9:97:83:8f:92:20:17:5a:
f0:8a:ca:78:e2:5c:18:15:1d:d8:31:4c:84:5e:23:56:b9:61:
9b:60:a6:89:17:49:42:bc:56:40:5a:4f:1f:29:5a:bd:70:b9:
4e:49:2c:21:e8:2d:e2:f9:d6:e9:6c:83:04:11:6f:de:24:5b:
35:92:59:7d:eb:57:cb:00:60:fe:44:36:01:e7:08:a8:dc:f1:
95:28:d6:70:96:c8:79:5b:73:3b:84:52:9d:91:53:a7:84:35:
f4:b3:45:90:32:f4:4f:3a:6b:11:57:c8:c9:57:59:99:b8:36:
51:a2:29:f1:60:f5:26:7e:05:a6:d9:9a:62:08:56:45:a8:c2:
9c:34:d0:15:e5:6b:7a:4f:25:09:30:0b:d6:1d:58:d7:a8:00:
c0:9c:4f:04:a2:d6:4d:09:d8:56:ea:f6:f1:12:09:68:b9:bf:
37:ee:8c:e4:b5:ba:0e:98:53:4a:4f:38:71:d2:b3:c8:3e:1f:
67:36:8d:b8:d0:74:29:16:df:5d:68:8f:a6:2f:89:2e:7c:2b:
cd:76:98:a0:b0:b8:3b:e6:bb:fb:9e:f2:a2:ea:49:9c:f2:26:
8c:49:72:d1:eb:92:34:44:12:ec:ce:20:aa:3d:fb:4f:dd:af:
4b:6a:44:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:33:06 2025 by rpki-client