Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
File: 0aiWnX4yy_knZkstxDa5bnFJpis.mft (raw, json)
Hash identifier: vdZE8fZ1LwgWNaD/SohB7wVuVjjPEe+88z/vtpUP9Aw=
Subject key identifier: C4:E2:AF:39:08:15:3C:9B:53:09:88:45:FE:23:C1:CE:86:D4:AB:2C
Authority key identifier: D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
Certificate issuer: /CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Certificate serial: 0194BCA9A178CF378641B6186A4595141C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
Manifest number: 0D61
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: 0aiWnX4yy_knZkstxDa5bnFJpis.crl (hash: fN9buMIakEJkR/DL1s77zgG35TUGs2s8YYwAB+pQ1Ro=)
2: p1fyn5poKGi3v6udklaZLK6DaPs.roa (hash: ksuBLRSUua1zFmd4JmcnhcAsP8MWyD8OR/dcK6d/pkM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a1:78:cf:37:86:41:b6:18:6a:45:95:14:1c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=c4e2af3908153c9b53098845fe23c1ce86d4ab2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:8b:42:dd:b5:1c:30:7f:9d:9f:6c:e1:89:
e9:e6:5e:ad:66:aa:b8:3f:1c:df:25:0e:ca:3c:b9:
e8:f3:45:f5:35:ae:c6:26:6d:04:0f:28:bd:bf:44:
e3:7a:6f:98:5e:ec:87:4b:fc:b7:de:09:67:ac:a9:
46:41:36:3f:7b:78:59:7f:38:3f:74:3d:1b:9b:29:
41:c4:10:ec:64:f6:4e:bf:48:c9:50:df:00:f5:c3:
11:cb:dd:2c:35:62:5d:db:93:e1:f9:db:3d:35:da:
df:13:1f:ee:07:bc:ec:7d:cc:3f:1a:a3:35:1a:6f:
d6:48:e3:6c:ec:78:07:c8:a9:94:17:e6:20:f4:63:
90:ee:af:60:2f:ce:df:3d:9e:47:96:63:c2:4e:74:
3c:84:9e:09:cd:19:50:13:0c:a7:3c:df:e4:5a:45:
c4:24:70:3a:d3:c3:32:97:34:eb:ec:cb:20:24:72:
c5:cc:4e:95:f4:a2:50:6e:9a:ac:b8:15:de:04:d5:
08:7d:66:6f:c7:d3:27:13:13:8b:15:00:8d:89:eb:
fb:45:17:41:e1:4b:7f:9b:84:ac:c5:67:ee:4b:69:
85:52:f5:f5:e4:d2:f5:d1:33:9a:5b:4f:0a:a0:20:
18:af:33:2e:f0:17:1d:a2:00:f6:fe:14:3b:05:ab:
de:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E2:AF:39:08:15:3C:9B:53:09:88:45:FE:23:C1:CE:86:D4:AB:2C
X509v3 Authority Key Identifier:
keyid:D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4f:93:86:21:78:e3:b7:dd:cc:2b:9c:39:7a:78:64:fe:f9:
aa:f3:ca:d2:84:ed:79:db:d4:15:2f:09:a0:42:c6:9e:95:df:
89:0e:fe:21:65:7d:c8:af:ee:1e:fa:dd:ba:5f:17:54:ad:7e:
ed:0c:16:0b:eb:6f:0a:7f:77:5b:54:f1:cd:da:9f:0b:21:6e:
67:ce:9b:bb:65:06:f8:3a:c5:32:00:4f:5d:63:fc:82:a5:d2:
56:c6:f5:6d:30:b8:89:70:92:54:51:c2:0f:b4:41:07:a2:54:
e4:3a:0c:b0:b8:67:f3:f4:de:8f:62:bb:13:c3:94:fd:5f:7b:
8d:1e:9a:44:fb:94:11:4c:8b:86:f9:c5:2a:29:08:e8:81:8a:
2f:57:10:15:b9:d6:04:48:e4:b5:9f:35:05:fd:73:74:7a:42:
20:17:00:b1:87:d0:bd:d9:f7:2a:cb:ff:15:9b:cd:d8:f1:f1:
b9:28:01:e5:02:3b:e7:ae:82:03:64:89:27:bb:5a:98:d8:cf:
d5:a5:23:73:e2:1d:be:9e:6b:05:5d:56:fb:d3:b2:e7:49:fb:
11:33:e8:29:2e:b9:d3:ee:19:e8:57:87:4b:76:01:d0:6f:16:
7f:d2:e3:4f:10:3b:a6:ba:32:da:7f:c8:e2:69:1e:58:51:b5:
f3:9f:77:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:28 2025 by rpki-client