Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File: Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier: 2/URccQB+kkDMiqbqUJmWME0I7CjUzSCAUZnU3T+01M=
Subject key identifier: 91:2E:D1:36:D9:E9:E6:B7:7F:B2:15:0E:1E:9F:5A:80:63:FD:1B:B8
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 0194BCE09FA8C130547000C0D88BD9A656DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: G7E/kAh5NGzsTTYT7Hsij4C3rTFNdFQJ2gJm++4oDf4=)
2: rnVgQnSvZayWReSkh23-vQQTXhc.roa (hash: hebKWON0JMZ90AbYifXQ2mjTupBoFKWh8ulvnxLBZ8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9f:a8:c1:30:54:70:00:c0:d8:8b:d9:a6:56:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=912ed136d9e9e6b77fb2150e1e9f5a8063fd1bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:88:f5:c7:33:d7:ef:96:fe:dd:65:e4:84:
10:ee:d2:70:dd:0a:4b:f8:a5:25:51:2e:9d:a0:da:
72:37:5f:48:a6:37:b3:c5:13:4c:97:bd:f8:91:d7:
8b:4a:2a:30:70:c1:da:94:93:23:08:4b:28:3a:63:
3e:f5:a5:88:85:0b:77:3b:60:f9:73:6a:03:61:15:
9e:1b:34:08:33:73:7d:be:dc:67:20:2e:ea:75:67:
1c:45:11:8f:7c:ab:fe:d0:f5:19:80:d0:38:57:f3:
2d:65:75:13:09:49:4b:65:9e:c4:1e:13:ed:05:85:
17:33:4e:6b:e9:04:81:5d:28:34:70:3c:6d:26:68:
ad:c5:f9:5a:a3:d7:2a:3d:a3:20:a0:f3:d5:0c:c8:
92:b3:51:0d:4f:41:7f:2f:eb:64:c9:58:46:bd:6a:
5c:08:ff:f0:85:a9:89:fc:72:8d:69:4e:d0:63:63:
d9:37:11:b4:28:4d:bf:de:21:de:b0:69:f8:c5:fc:
f2:d9:23:54:00:1e:a8:7a:2a:0d:df:07:32:e9:c9:
61:84:68:f2:44:29:b7:af:63:10:af:2f:4b:da:25:
a2:b0:ac:66:6b:db:ac:5b:e0:12:a2:23:fc:7a:46:
b9:a0:31:34:67:29:ff:14:37:d0:cd:55:64:92:38:
47:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2E:D1:36:D9:E9:E6:B7:7F:B2:15:0E:1E:9F:5A:80:63:FD:1B:B8
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8a:62:a0:82:28:cb:10:ed:47:38:bb:8a:5c:0e:92:0f:dc:
32:65:b4:69:73:9c:05:1f:59:c2:ab:f9:2e:02:d7:58:1d:db:
c2:7d:10:68:6e:86:82:00:13:5a:65:ed:8b:9b:83:da:b1:58:
44:5d:cc:f1:bd:ff:29:57:d9:96:24:fc:a3:20:db:5a:15:41:
f7:87:69:49:05:a6:f3:c7:b8:0f:61:69:fa:76:ca:80:89:4b:
f7:9b:d5:c3:31:88:f5:9e:b1:41:1f:37:3b:81:15:25:61:c2:
31:ce:87:d7:f0:48:06:2a:17:8c:61:90:4f:f0:a3:bb:da:2b:
bb:29:f2:47:1c:72:9a:1d:53:c6:de:3a:e7:2f:7c:a1:e8:94:
e4:5e:1a:e9:98:ed:72:4c:c0:44:c5:f4:06:39:58:4e:68:2e:
41:7e:f8:00:b4:8b:18:06:65:5d:cc:5a:3b:8d:74:2f:d3:f2:
b6:a7:8b:dd:e1:10:84:b9:bc:da:fb:52:aa:7c:90:ad:d7:5a:
6a:2b:c5:0c:19:a2:90:63:0d:c7:ef:47:41:6a:bb:8e:a8:81:
d3:24:a9:85:1e:20:3d:b3:ea:34:b0:f2:87:5d:c0:4d:eb:8c:
c4:a1:4c:95:35:ff:08:d9:68:b9:33:ed:e0:2a:28:56:dd:35:
4f:89:f3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:51 2025 by rpki-client