Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: xGwpy5Hg35QP5ORTIAMX/UuwLV6OiWzHzaLFMx9DK50=
Subject key identifier: 9C:F6:AF:41:03:28:57:0B:A1:9A:37:BE:FA:23:A6:83:7D:08:64:FE
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 0194BD854685034FBEF5050C6D5470131509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: 7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa (hash: A/dQyVGugZPPzzKbUernmnmEYkigB1EDFhlRwxZgoK0=)
2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: 12D5/rOdVfU7fW+EsrcdbXtbwUQ88qQmYwv9vrFAwLc=)
3: TqDzXylobmv5YZZYBBs97jYKvU0.roa (hash: NHV6Fswg/e8zrywVYBxwjK/JaW1VOFVPHkfR6/mh8w8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:46:85:03:4f:be:f5:05:0c:6d:54:70:13:15:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=9cf6af410328570ba19a37befa23a6837d0864fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:38:dd:c9:c0:71:e5:29:ab:f2:d2:a6:12:
b4:02:86:82:e5:d5:f8:08:7e:5e:60:fa:11:01:4e:
c8:f6:1b:ff:49:bd:13:ec:d7:3c:50:81:c0:a8:14:
44:46:3d:05:83:c5:b9:90:83:fb:e9:5c:ce:dd:ac:
77:93:a2:0f:b5:85:fb:e6:df:6e:1b:b6:6e:2f:35:
2f:c0:62:3f:52:dd:bf:92:da:74:20:25:a2:26:7c:
7b:45:5f:e0:f1:a0:4c:2a:05:5a:fb:60:95:41:71:
b9:cf:9a:6a:97:0d:53:78:bb:ac:b1:f9:9b:3d:fb:
1a:77:37:76:ac:32:ba:9b:f8:98:6c:1f:a2:5a:af:
05:54:6c:f4:58:a1:2c:53:e3:9f:d6:df:f3:a7:13:
39:57:b4:a7:3d:25:42:38:ed:5b:c7:f1:0b:18:fe:
18:f7:87:bf:27:21:48:5d:4d:48:19:da:00:36:b0:
34:d6:7a:bf:02:4d:5a:00:20:88:0a:6b:cd:72:26:
ba:02:41:48:c9:b4:34:4e:81:ab:2b:21:38:8c:22:
cc:7b:da:06:f7:9f:c6:11:85:83:cf:79:b6:32:86:
62:dc:45:8f:07:bc:36:1c:da:82:81:cb:53:20:16:
a8:1a:fb:5e:3e:52:26:1c:39:4b:0d:26:b6:88:b4:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F6:AF:41:03:28:57:0B:A1:9A:37:BE:FA:23:A6:83:7D:08:64:FE
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:20:4a:c7:5e:5c:11:78:b6:83:22:f4:61:32:ab:99:9c:42:
38:d5:2a:75:30:79:63:07:46:05:b3:44:b4:75:60:0b:ea:20:
dd:6d:05:18:fe:6c:c1:45:15:0f:dd:eb:9c:c5:68:bf:6a:f4:
bb:d6:d9:1b:bc:aa:f1:09:59:37:87:17:92:23:ca:c6:0f:ce:
9f:3e:4d:3e:cb:33:63:92:42:66:8c:3f:98:d7:5c:b1:bb:03:
55:80:ee:f1:a1:fd:2d:39:ed:a6:1b:53:71:de:40:56:3e:2d:
75:f8:50:e9:7e:77:0c:2c:f7:c5:d7:f7:8c:c3:1a:89:b9:69:
5e:f4:5a:58:40:ed:0e:b4:1f:2d:de:39:f3:da:49:76:4d:a2:
b6:43:64:7e:4c:1b:96:a8:fd:94:15:ad:cf:99:e4:e8:92:cb:
f6:27:6d:a9:0e:d7:df:a4:90:e5:75:08:a2:f2:b9:35:ea:21:
3c:6a:fb:38:0f:3e:ab:09:22:2c:de:54:04:8b:b4:88:b9:38:
31:c6:34:ee:c1:fb:bf:67:61:fd:4c:03:9f:f9:e6:5d:f2:ef:
25:70:c9:28:02:3e:bf:00:0b:60:b9:21:b3:fc:40:8d:fe:16:
cd:1f:97:f6:1e:fb:6c:e3:02:55:cc:1e:3e:3f:77:66:8e:39:
3a:c9:5d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:31 2025 by rpki-client