Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
File: Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json)
Hash identifier: wtiYs+5SZ7SanLS9q4DZMLndvpNPmlq7aw0hVgZhxiw=
Subject key identifier: F6:11:12:3D:B3:60:84:FF:68:3F:69:0A:10:79:72:BA:BD:C6:8B:A4
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Certificate issuer: /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial: 0194BCE0ACEC62D0B66CF53D72AD75CC6026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: jEYjAl35CkRe12f0cNYdESGemw8TL3E7yB/3FvrI/JA=)
2: LN7aifIzYDnimx72-UKqFTWRmAM.roa (hash: ssQWu4dDicm87ZI1Oes6JMFyXJqqDjzCfBrrBA8gp00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ac:ec:62:d0:b6:6c:f5:3d:72:ad:75:cc:60:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=f611123db36084ff683f690a107972babdc68ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:7e:23:b2:1c:7b:9a:06:e3:73:81:ae:f3:
a9:05:1e:83:91:07:09:37:1c:c7:2c:d8:8c:12:e2:
cf:3e:86:a1:a1:5e:61:7f:d7:14:5b:b3:17:b9:f5:
c8:f1:5d:0d:83:54:80:d3:17:a6:ca:1e:20:d0:e0:
45:8b:2e:5e:4b:2e:1a:7e:c7:15:37:55:0b:fa:4a:
cd:06:4d:da:67:f5:da:ca:09:e8:c3:08:8b:e7:12:
5f:a5:5b:e4:68:0a:78:3e:eb:64:ed:8e:27:58:fb:
03:86:7c:79:98:e1:7a:17:b8:0a:5d:2f:6b:e2:75:
ae:56:07:cd:6f:fc:a5:35:f0:66:b8:00:4d:d6:92:
a8:f2:d5:f3:f8:e4:6a:1a:1d:74:8f:f6:f1:ac:2d:
67:d4:aa:19:f3:f6:a4:c3:24:10:47:f2:8d:64:99:
b5:03:51:ba:ec:32:0c:0a:19:94:6a:87:b4:16:88:
96:ba:ea:83:06:02:1d:5a:7a:09:87:73:ac:9a:04:
19:5c:fa:69:5a:0c:5c:78:75:89:97:6c:45:f3:8f:
5b:c4:4b:00:86:82:20:79:b6:b5:f3:60:a7:f0:a8:
ca:3f:e9:a7:da:d6:6c:28:96:ee:9c:18:19:8e:bf:
87:47:08:be:6c:af:22:64:b4:c1:16:63:ff:57:06:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:11:12:3D:B3:60:84:FF:68:3F:69:0A:10:79:72:BA:BD:C6:8B:A4
X509v3 Authority Key Identifier:
keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ea:51:7d:d2:6b:4b:19:f5:fe:4b:95:d1:5c:be:4f:d9:70:
05:af:3c:ac:f1:be:d7:e0:29:ac:54:d9:a2:71:6d:9d:12:f1:
75:fe:93:2c:8b:de:a1:b9:66:b6:e1:16:e1:98:e5:dd:49:b0:
f0:8b:ae:c7:78:14:b6:a1:0a:d9:7f:ff:25:ce:19:83:c3:ea:
8b:07:00:13:80:c3:0d:a4:fc:2f:5d:d9:ac:a3:d1:b9:82:9a:
1e:cf:20:f2:0b:c8:f6:00:86:cc:b5:12:76:b6:67:8a:17:f0:
99:9e:78:40:60:dc:5e:64:ca:13:0f:2a:6c:4a:e9:b1:54:f2:
f1:62:15:9e:38:9b:6a:c7:aa:09:4d:9b:ad:82:0f:e9:4e:7a:
6e:64:26:90:25:33:55:ef:2d:39:31:47:d2:67:e8:0f:c1:ff:
ea:2c:9e:ed:9a:ef:fa:75:ce:34:a8:ad:48:1f:ca:e7:cd:28:
1e:d7:64:14:52:1d:6e:97:2a:fc:18:56:25:6f:7f:71:7b:66:
5f:44:31:ee:f2:fd:59:1f:5a:6f:64:a4:fe:b9:89:70:06:55:
fa:02:f9:5c:81:e0:0f:85:58:b0:00:23:b7:9d:8a:cf:56:61:
65:50:a3:d4:0b:b0:33:4b:33:ec:d0:2e:b8:e2:1d:bc:6c:f6:
09:d9:3a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:44 2025 by rpki-client