Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
File: aP4jOevgl_9pirMOW2PswhoqI6s.mft (raw, json)
Hash identifier: AWYDLwonCS5wysX05jV+1WwHH4og4hGI8rLqFVRKorU=
Subject key identifier: EC:FF:5F:CB:4D:63:4C:C2:CC:18:42:CB:86:2D:D7:A5:63:3C:2C:52
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Certificate issuer: /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial: 0194BBCDF058C6414AE61C8FF46AE46615B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
Manifest number: 02F2
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: 9V1tND3zl52dvTGUP5zkoYgjSzk.roa (hash: ZFwBT8PQBALn0UQygkKFbmysfnKpnWDyHSFsXkqI3os=)
2: aP4jOevgl_9pirMOW2PswhoqI6s.crl (hash: mWMUd9C8DKXRyFd9QVdyiWD7QLHwcsoyfwQbq/DjYYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f0:58:c6:41:4a:e6:1c:8f:f4:6a:e4:66:15:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=ecff5fcb4d634cc2cc1842cb862dd7a5633c2c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:72:e6:bc:0f:9c:77:67:fa:c1:85:29:43:
9e:86:f7:c1:f6:69:5c:bc:ff:8a:3f:03:a9:fa:09:
71:e1:f4:27:d3:31:0d:ef:41:18:ac:d3:f2:bd:ad:
00:36:e9:92:a1:2c:3d:20:dd:af:a7:73:d3:01:4e:
ea:8a:50:18:3d:8b:53:e6:de:d4:39:b0:12:b4:79:
f4:78:ff:47:2b:ca:32:20:07:0f:a4:33:6f:4a:c2:
0e:77:70:3c:7c:c8:2c:10:9c:ca:9e:3d:88:0a:65:
b5:aa:86:7f:f6:97:27:8a:09:ee:4f:2a:e0:b5:87:
df:f4:57:90:de:a6:31:c7:c0:b5:9a:1c:8f:7c:85:
33:fd:9a:91:a7:46:03:b6:85:17:74:72:f5:b1:db:
c7:39:85:fd:af:f6:a4:69:66:a1:9f:73:08:b9:14:
3a:3f:e9:ae:2e:a4:00:b5:09:8c:77:8b:c0:da:30:
66:96:41:7b:26:b1:19:b0:55:a3:84:79:9b:9a:b3:
25:fd:d2:78:55:69:9b:00:c6:5f:45:84:6b:46:84:
78:1d:25:fd:7f:53:a7:e9:9d:35:e4:c1:ac:f1:14:
4a:81:2f:7e:ea:a5:e2:b2:b2:48:c5:b3:bb:f6:c2:
c7:f8:87:dd:35:59:04:ac:ad:94:39:81:fc:0c:08:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FF:5F:CB:4D:63:4C:C2:CC:18:42:CB:86:2D:D7:A5:63:3C:2C:52
X509v3 Authority Key Identifier:
keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:03:08:ba:f4:ef:c9:61:6a:b9:eb:78:65:4d:68:4e:05:99:
10:62:2e:7c:a3:87:22:6e:76:30:cc:ee:65:50:f1:83:62:7f:
20:65:1c:d0:63:b4:a8:a6:cf:0f:6f:ff:0c:9d:6a:39:60:0e:
e9:80:24:a6:28:04:b7:4b:dd:48:9e:d5:50:ac:eb:b1:b0:b9:
4e:d0:6a:e7:13:35:b7:b4:a1:ab:ef:b1:5b:c4:77:31:0e:81:
78:c3:9f:b6:b0:99:7c:f7:51:b6:cc:85:cc:5f:31:61:7e:7d:
15:52:da:9e:dc:00:6b:a6:8e:05:1d:e1:ac:1b:3b:81:4e:a0:
47:12:b6:60:d2:77:27:a6:25:14:ed:87:cd:84:5b:65:a9:f0:
62:71:5f:e9:fb:25:50:01:61:fd:82:a2:20:2f:89:66:1c:c8:
58:41:da:e0:40:34:6d:42:3b:4f:fa:b2:38:b8:69:0c:ef:7a:
8b:22:8a:1e:c9:cd:13:0d:53:5b:2a:48:fc:03:1c:1f:f8:8d:
ea:aa:ef:99:e4:e8:35:fd:f3:62:9c:17:92:c1:a9:16:19:f7:
42:c6:25:a8:d8:7f:24:c8:24:e1:2b:a2:51:f2:b3:59:57:f3:
ab:b6:25:e6:94:98:6b:6d:1f:76:f2:e8:96:ea:cf:c6:13:36:
c7:1e:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:21 2025 by rpki-client