Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
File: aNogbIPVBeJUs-88dlD5-5NFNDU.mft (raw, json)
Hash identifier: wnO2PQ5hgbpVpw3HntdrMVtt7/bBl4PE6+ofckcnK7s=
Subject key identifier: 4A:5F:75:0C:EC:0D:AC:63:52:44:2A:73:89:09:EA:1C:3B:FC:94:53
Authority key identifier: 68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35
Certificate issuer: /CN=68da206c83d505e254b3ef3c7650f9fb93453435
Certificate serial: 0194BC3C338728A48A2A35C24100592FE409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
Manifest number: 0719
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: 9yjOyCjaNQvZmslgCNfY4UdjDvM.roa (hash: BLcuMbjq4mGuK5Vn41A+M+OAou14cd2H96ukojI5mmM=)
2: aNogbIPVBeJUs-88dlD5-5NFNDU.crl (hash: nm7pj/xVReRooP2D7UyyX+gch6FPDetnExX1wnyvzrY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:33:87:28:a4:8a:2a:35:c2:41:00:59:2f:e4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da206c83d505e254b3ef3c7650f9fb93453435
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=4a5f750cec0dac6352442a738909ea1c3bfc9453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:70:71:47:1a:7f:96:80:0b:21:99:18:2d:
27:66:fc:92:1b:ed:80:ef:8c:e4:75:68:e0:94:22:
01:f4:18:75:98:52:33:07:ff:3c:3f:b3:10:69:a9:
ae:34:78:79:90:4f:9e:23:a1:a4:d3:2f:6a:a9:db:
47:37:86:67:8d:6b:23:62:64:8a:3e:b5:18:a1:93:
0b:8e:26:7b:75:3c:d0:8f:b5:39:cc:eb:a6:4c:e8:
21:05:bc:d2:f1:e3:2f:e5:18:99:05:70:e7:d5:e5:
a9:f4:2b:7b:a8:b6:64:22:87:98:48:81:a1:61:91:
8e:28:6c:cc:35:b8:91:62:af:b5:d3:cc:04:98:f9:
83:4e:52:28:cd:ff:74:b9:66:cc:e6:15:ee:4f:54:
4a:7f:30:c1:b9:b5:df:98:4b:36:19:27:4c:dd:da:
6e:18:96:ca:d0:1b:5f:88:7b:45:9d:c1:cc:22:f4:
32:f3:94:25:f1:a3:27:69:9e:d8:63:50:5e:8e:c8:
37:53:4d:74:55:89:1b:d5:44:75:aa:66:1b:17:2c:
6b:a0:79:6b:f7:18:c1:d7:85:01:32:e1:9d:b4:da:
d3:e7:1e:e7:64:b2:a4:18:5b:ec:5b:16:50:25:f7:
be:2d:55:7e:1e:67:c6:cb:48:d8:6f:4f:79:b0:fa:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5F:75:0C:EC:0D:AC:63:52:44:2A:73:89:09:EA:1C:3B:FC:94:53
X509v3 Authority Key Identifier:
keyid:68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:79:00:b8:78:d6:e4:b8:ea:f6:bc:b5:35:af:44:30:1a:44:
95:e8:6b:f6:ce:de:d5:d1:77:62:bf:2f:cf:73:7c:2d:dc:a4:
51:34:b1:56:6c:f8:f0:41:a5:8b:b9:cf:83:31:4c:85:52:2c:
bf:61:62:a3:56:b5:10:07:09:36:da:77:04:b4:84:44:ab:b7:
da:11:49:76:20:9d:3c:f6:ed:a3:be:9e:bc:32:1a:a0:d9:cf:
d3:6f:d1:5f:80:27:33:96:94:ea:73:02:5a:78:94:fa:f0:57:
09:a9:bd:00:01:b3:6a:97:11:eb:83:ef:aa:ba:a0:ef:16:2e:
d2:fe:49:72:48:d1:fa:35:69:e1:cd:68:26:05:bf:6e:39:38:
ba:d6:65:ba:71:bb:1a:f8:4b:5a:cd:30:7f:e4:61:57:65:c7:
5d:96:9c:da:ba:24:f9:40:ac:6a:74:70:ed:84:11:e8:ce:8a:
2b:66:f5:79:c9:ac:90:dd:45:30:e3:da:80:74:5b:66:ea:65:
64:01:6c:80:4f:6d:90:a3:95:a1:fd:2c:6d:a3:48:ad:81:63:
ef:91:35:aa:7b:b1:65:3e:bc:b8:32:da:8c:9d:a2:81:fd:03:
3c:6b:22:bb:be:58:ab:fa:00:cc:05:db:6b:2d:a6:b7:20:b1:
74:0f:48:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:09 2025 by rpki-client