Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
File: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft (raw, json)
Hash identifier: IEdAPY+YYFMAsfsF16AYTZzxU3U27U53G9V+u+GTSkQ=
Subject key identifier: 1A:BA:38:EA:F7:C3:5A:BF:63:64:64:5F:3A:06:2B:AC:51:6A:16:1E
Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
Certificate issuer: /CN=ac08da139b56f998be24665db14ad1e156768fc3
Certificate serial: 0194BCA9CC8B46862B193C0327F59916B9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
Manifest number: 0118
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: YtEd8YCCc2z1I29jS88Pyzvdbak.roa (hash: evRpvoMqfORfl1HiyuiXKz+wbjxY32bzO48vEqf95co=)
2: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl (hash: BFbPpDPWMw4U3bpNulhzZ5XIUh3d3jz0zG0tb5Yl4VE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cc:8b:46:86:2b:19:3c:03:27:f5:99:16:b9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=1aba38eaf7c35abf6364645f3a062bac516a161e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:c6:4a:f6:e0:70:0d:d5:0f:a3:87:15:08:
82:90:4e:37:dd:f4:66:f3:d8:10:c3:b6:fc:09:87:
c1:cc:cb:a3:bb:3b:98:29:93:f6:3e:8c:49:ce:18:
f7:e5:38:56:b6:51:39:99:3d:61:3a:03:2f:fc:27:
6c:30:df:40:0b:2c:35:45:ef:3e:db:06:a5:79:de:
53:dd:14:21:38:c3:85:19:2b:5b:13:f0:dc:32:91:
03:cb:29:ca:98:e4:1f:ac:65:1f:9d:97:62:13:d3:
95:07:aa:0f:ca:17:ff:33:50:90:16:16:be:2e:45:
87:59:16:42:ac:32:8a:9d:c1:44:97:93:5a:b6:a0:
7c:7e:80:06:fc:7f:d3:31:1f:7e:2b:15:70:76:8a:
f3:5d:70:3c:71:47:c1:5b:f2:9e:c8:13:28:92:a5:
e2:46:a0:8b:2b:10:55:5f:83:48:09:3f:06:dd:68:
2f:69:23:7e:e7:88:37:9a:c3:8e:6a:52:4f:0d:a3:
54:f4:1b:bd:0e:86:ea:48:69:b5:af:0d:a0:7e:65:
2c:39:4e:1a:f7:f1:cd:f2:0d:b4:23:b5:5f:22:ba:
63:f9:9d:6f:ae:5d:c0:83:ee:51:8d:ae:e0:49:c5:
bf:ed:e6:34:63:59:a0:91:2a:49:d5:f3:63:3e:ce:
1a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BA:38:EA:F7:C3:5A:BF:63:64:64:5F:3A:06:2B:AC:51:6A:16:1E
X509v3 Authority Key Identifier:
keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:79:cd:a4:46:a6:48:a1:98:8b:60:4b:48:11:44:4e:58:a7:
46:c2:19:89:33:b6:2f:8e:e1:fa:39:7f:ef:f3:e0:8a:9c:cc:
61:d7:5b:b7:04:aa:dd:30:49:73:61:f1:db:ec:4f:41:8a:9f:
4a:60:6d:17:a9:27:9a:4d:ee:7c:92:3b:fc:75:20:13:98:4d:
52:d2:b7:b6:e5:79:61:cf:6c:04:58:6b:12:f9:f1:00:3a:5d:
ca:bd:96:d9:d5:d4:b1:e4:d3:17:31:35:43:a1:47:8d:66:6d:
b9:82:4f:de:45:08:6a:55:b4:53:e1:d6:cd:67:93:a8:cf:3d:
40:fb:19:1f:38:1e:a1:d0:72:ba:a9:8a:b4:de:1a:6a:0e:75:
59:6c:36:b1:e4:12:e1:55:b9:20:59:b9:4e:f8:bc:22:02:db:
44:63:b8:0c:0d:57:35:ea:06:59:12:1a:4b:a6:e6:21:a2:d2:
3b:d0:db:9a:0b:4c:ec:8e:e6:34:51:b4:56:32:2d:0d:01:3c:
97:20:28:e6:1d:c5:f3:ca:ae:07:9f:d8:d2:4c:c4:0c:7c:83:
11:9c:5b:a6:cc:1c:8d:2c:4d:84:20:2b:00:d7:d1:89:68:8f:
48:14:89:03:8e:54:a1:ce:25:1e:3e:f5:69:b7:94:fe:8d:94:
58:ef:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:50 2025 by rpki-client