Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
File: aTHX56mXSaOF6usn-FCridqPLuA.mft (raw, json)
Hash identifier: 0N8XiwCwe845EXgItsO1gJqbOLVEBfzLfBOOy29gFGQ=
Subject key identifier: 14:CB:3B:1B:74:30:7B:C1:64:28:B6:6A:EC:98:ED:A8:23:1C:BE:93
Authority key identifier: 69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0
Certificate issuer: /CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
Certificate serial: 0194BC3C0868A130F167DB8E78A151DD2E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
Manifest number: 0367
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: NluQuRsgOiFaIXTWt3y3rez6Bh4.roa (hash: JKkT06F430W2THw9Cv6TXAFRcJ7i7LHFoCLoKhmOqSc=)
2: aTHX56mXSaOF6usn-FCridqPLuA.crl (hash: i5EHbRzuarr8g1ZRO+on1mEVCIGdDae2rmiFi3BiEro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:08:68:a1:30:f1:67:db:8e:78:a1:51:dd:2e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=14cb3b1b74307bc16428b66aec98eda8231cbe93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a8:64:c9:11:bc:bb:b4:e2:74:d9:3f:5c:25:
65:e8:97:85:fd:41:f7:84:5e:3f:ef:8c:6c:f5:3a:
14:38:5d:78:fd:22:41:f2:f6:16:91:aa:c1:18:21:
b5:36:a5:0f:a0:d9:d5:06:15:a8:f4:e3:77:b8:82:
e8:23:e4:9c:ae:58:1c:55:8b:01:53:9a:0e:40:f2:
ea:15:2f:7c:9c:1b:e5:a5:ff:cd:76:99:9b:67:d9:
e4:d7:e0:5c:da:cc:1a:c9:bd:34:72:84:54:2b:90:
2f:ca:ed:86:60:be:03:b8:e8:b8:45:c8:81:55:65:
93:47:f9:f1:6e:62:6c:cf:10:1c:81:4a:38:0f:cc:
6a:0b:93:a1:12:1b:ac:c7:8d:83:6c:ca:9f:05:70:
07:58:82:ad:a9:93:e8:a6:0d:7e:79:cc:7a:a1:d9:
d4:17:6c:9c:32:8c:a5:96:68:16:56:7e:90:56:3e:
47:38:58:ed:3f:ae:8d:dc:e9:2b:13:b7:f4:7e:cc:
af:2f:2f:c3:61:c4:2a:3f:54:3f:f9:b3:3b:66:6b:
b6:68:26:e7:fd:50:81:03:01:15:e4:83:df:3e:32:
f6:c3:06:d5:af:c7:90:64:d2:1b:47:c9:db:fe:dc:
a3:41:53:84:78:8b:85:83:93:3f:46:29:92:c8:ae:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CB:3B:1B:74:30:7B:C1:64:28:B6:6A:EC:98:ED:A8:23:1C:BE:93
X509v3 Authority Key Identifier:
keyid:69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b8:b5:e0:17:fc:dc:dd:9b:40:60:29:0a:e9:23:bc:30:59:
de:66:f1:68:a9:0f:66:c9:14:e6:22:d6:1e:09:13:19:50:37:
f6:bb:c1:7c:4b:1f:d0:db:1c:bf:1c:04:e5:a0:1f:53:8c:f1:
a3:dc:97:20:10:1c:2f:10:67:0b:99:eb:bf:bf:df:71:39:e2:
91:c5:b7:19:9c:17:b6:d1:36:6f:28:ae:e3:15:08:cf:ac:09:
3b:f2:d7:0c:be:e3:1e:85:9b:65:37:83:b3:84:5a:ae:e5:9c:
3c:2e:8a:ad:a8:a9:2a:67:9e:d9:06:9e:9d:8c:5d:fd:b4:a0:
6f:09:18:cc:eb:f9:7b:66:ae:f0:45:18:5d:d0:aa:a0:f6:df:
01:e5:96:cb:2e:43:e9:a5:09:97:66:b9:0c:5d:28:13:23:5a:
70:81:49:e5:08:b1:0f:43:22:08:3d:94:3b:6e:15:ca:8d:a2:
d6:7d:19:c6:fe:3c:20:73:65:36:41:83:81:77:7f:a2:9c:6f:
6e:b9:d5:54:26:da:8d:d8:44:53:97:fa:f6:4e:d0:4b:d0:5b:
94:c8:e0:cc:e8:a5:d9:5a:3c:e8:1f:3d:ab:9c:6d:cb:3e:bb:
5c:09:45:a7:c7:12:b8:82:53:50:b8:85:5a:35:3e:ad:cc:3e:
f2:c6:3b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:21:10 2025 by rpki-client