Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
File: pTi7DCtB76jDsCBk68UvupLCNiY.mft (raw, json)
Hash identifier: AO9IIWPN1ZrAeX+beZCaPjK5MnXCWye8K3Kr85DzHw0=
Subject key identifier: 90:09:B6:EA:19:9B:EA:CF:CE:22:F7:3F:E7:E5:D3:4F:B4:39:E6:CB
Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Certificate serial: 0194BC051D9BB23631700747E979683CA929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
Manifest number: 1011
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: ldlRi9PG7yaWe_OISm5PxetZ-fs.roa (hash: zAtX/bKzY97x7lzgIkaYD8HV9V6BCkypXN+jO7OstUg=)
2: pTi7DCtB76jDsCBk68UvupLCNiY.crl (hash: 2Idtzg7q62o28PcfWBezV5wD+VoWDkzYg018ClAR3Js=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1d:9b:b2:36:31:70:07:47:e9:79:68:3c:a9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=9009b6ea199beacfce22f73fe7e5d34fb439e6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:b2:c5:96:35:a0:55:35:41:00:5a:2f:11:
ef:59:f1:cf:ff:45:3a:e4:3a:4f:70:88:db:a4:0d:
60:68:e4:1b:0e:8f:32:6f:e2:50:4b:e4:b4:f1:d8:
21:ce:9c:c1:24:cb:29:d8:23:5d:34:39:ad:66:04:
84:47:8f:18:ef:98:3f:d9:86:28:ad:8d:aa:d8:b0:
f6:fb:23:97:4b:4a:02:8c:f2:cb:c5:0e:c1:1c:55:
93:e8:6d:2c:1e:5b:d1:b0:9a:a3:19:42:69:9c:ab:
0b:72:6c:84:bd:a2:f5:fe:3c:f5:9e:1f:4e:76:a3:
bf:cc:df:c4:d5:a0:7f:d1:38:27:1d:cd:29:d5:87:
9a:ea:4b:c9:8d:66:7c:f8:12:81:d2:fa:ad:82:38:
f3:ac:92:66:3d:fa:54:19:42:5d:9b:0e:75:02:0b:
8a:b7:55:19:6d:8b:bc:0c:cc:51:fe:8e:9e:0a:e3:
cd:5c:c6:f2:14:99:d9:65:02:6c:80:a2:90:d5:0e:
ea:a0:98:5a:0c:b6:25:92:7e:df:5a:95:9e:bf:a2:
69:0c:b1:80:de:3b:5d:8d:83:5a:a6:33:af:b7:c3:
e7:77:e3:fb:d8:dc:b8:39:6d:2f:f9:2a:1e:de:9c:
45:60:8d:35:31:57:4e:6e:b9:62:eb:d2:f6:45:78:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:09:B6:EA:19:9B:EA:CF:CE:22:F7:3F:E7:E5:D3:4F:B4:39:E6:CB
X509v3 Authority Key Identifier:
keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d1:a7:64:1a:f1:51:11:51:5e:ad:46:4a:74:fe:39:c9:bd:
07:af:c2:a5:1c:f7:12:59:a6:fa:79:87:1e:2c:7c:7f:e9:3a:
69:fc:27:0c:78:8f:32:bd:04:18:5c:c6:cf:c1:a4:fe:a1:7f:
31:68:ba:ee:dd:4a:65:31:fb:22:77:d0:90:96:b3:04:f8:4b:
47:c4:ba:15:cf:77:5d:82:f8:cf:26:11:45:08:0a:f9:74:54:
e0:d6:91:0e:66:b9:9b:42:dd:0d:ac:af:35:08:78:d6:db:69:
ea:eb:40:58:1d:b3:9c:4f:e4:28:b9:f6:e5:d9:90:9f:6c:8b:
3e:00:b0:ce:92:d1:29:d6:96:55:52:7f:45:c1:48:ea:2e:f5:
d6:7d:84:ca:e2:93:e2:d0:df:df:0d:9e:94:1f:a1:db:e9:93:
66:92:8c:d4:48:da:f2:0c:5f:59:92:aa:94:b2:76:40:43:f0:
c2:54:d8:fb:77:2e:1a:f2:7c:06:15:5b:9f:20:d9:98:8d:51:
ad:70:bf:f9:3a:58:f5:04:0b:80:6d:17:b5:69:1c:bf:44:00:
57:89:c7:c1:a4:34:97:1a:51:69:8c:92:da:a0:1a:31:fb:68:
40:26:29:d1:68:f6:c6:4a:e3:61:a8:d4:1f:18:0d:94:3c:29:
73:69:6c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:14 2025 by rpki-client