Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: G0fPOx/PhdRKwA2F6UluTbuug/Lj3xUhVsNW7i5HuRo=
Subject key identifier: EB:DA:09:07:88:33:1C:73:A4:4A:52:2B:EE:93:0E:A1:B2:EB:E4:EF
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 0194BD85AE8450EAE2B71044DC94F2A4147B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 07EA
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: 1-Oc-5i1yyq11robM4onOto0qtew.roa (hash: k/9TNuFsVCQ/WuYJYH9Qe3QLWgW1naRjiSPb+eOEI+0=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: P9TIf0FvHyspbCSg8HQp07lNF+bYxQBU4zU7YZ57Ofg=)
3: C1SZKKCkY7SbLFevNwXtaHd2whI.roa (hash: qLK2DqN3/ycXpzvuQLbdz4SdUDAqvfLR7qE4BXoJD04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ae:84:50:ea:e2:b7:10:44:dc:94:f2:a4:14:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=ebda090788331c73a44a522bee930ea1b2ebe4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:8a:54:59:0e:cb:d4:07:e1:3f:1b:ba:8f:
26:27:ef:0d:a6:40:ee:c0:38:72:fe:74:c8:8f:93:
54:85:46:90:ce:34:fd:c9:2c:37:6f:42:01:2b:fd:
9f:9b:81:13:da:02:ed:13:a8:15:8d:4f:f2:c0:80:
f2:86:71:bf:84:9a:45:69:38:54:e7:a9:87:5a:5e:
28:d5:42:05:6d:13:1a:c9:5b:0d:78:e5:dd:2a:cd:
3a:eb:73:26:83:5a:9b:30:6b:82:80:87:7d:61:e7:
44:39:a2:7a:51:c9:33:65:fa:cc:c1:11:04:02:23:
bb:1d:b4:32:8a:01:b1:c9:e2:b5:d3:07:5f:eb:ef:
ba:2c:d1:bb:87:0b:39:8e:d5:bb:de:06:7e:fc:ac:
65:63:14:c7:d8:39:61:81:d9:cc:80:e3:8e:ca:c4:
52:d7:e5:51:cb:ff:72:52:33:47:52:95:fd:d6:77:
94:4c:82:18:d2:83:26:a4:a6:4f:82:c3:1f:42:5b:
1f:31:6a:45:7b:5a:44:14:ca:b0:e7:f2:9c:c9:a5:
93:21:5b:38:82:05:67:1d:ed:31:40:31:f6:dc:8a:
90:eb:b1:89:65:d1:da:85:11:02:5f:9f:82:8a:f4:
29:6f:be:a8:ff:0d:90:f1:9a:0c:c0:1d:f2:c2:65:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DA:09:07:88:33:1C:73:A4:4A:52:2B:EE:93:0E:A1:B2:EB:E4:EF
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:16:b2:29:06:c1:9e:21:ec:3f:6a:a1:68:40:7e:53:14:7f:
29:15:0a:cb:31:0f:60:e2:f4:f5:17:a9:d9:33:ef:5f:6b:d8:
d5:9e:74:e7:45:71:48:5e:33:5a:9c:f9:5c:f5:49:58:eb:c7:
79:a2:fb:84:b1:dc:ff:cb:77:58:33:28:b8:2a:40:be:d3:a7:
8c:af:cf:61:9b:c7:8a:e2:5d:e4:8f:56:86:f3:d4:e4:80:21:
65:71:07:c5:cf:ea:5a:8e:fa:04:c2:b1:fc:fd:8d:7c:21:ef:
d8:9e:c0:c4:80:c0:8e:64:20:a9:9b:de:bb:9f:3e:19:ca:1d:
dc:fd:15:cc:30:cf:a6:26:9f:68:4e:4d:c0:a0:b9:de:06:eb:
b1:63:e4:66:15:49:d2:a1:7a:08:5c:0f:1a:36:54:38:1c:9f:
b8:60:6c:29:0e:d6:37:44:cb:40:50:38:a4:2e:4e:36:cd:98:
e9:54:de:5b:cf:09:20:1e:a4:68:4c:c5:b1:1f:70:24:3e:a9:
4a:88:3f:0c:e1:81:cb:42:63:9d:f9:d7:6f:f8:71:6a:3c:5e:
be:30:f1:f5:be:c5:1f:96:0a:a8:c9:1e:06:e8:1b:81:e0:8b:
d8:84:88:ba:3a:ea:3f:67:30:0c:58:52:3d:00:44:ae:5d:f4:
05:0a:0c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:11 2025 by rpki-client