Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
File: AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json)
Hash identifier: ti9v/gno7Zw5Wxv/5NjU0K/4wgMFP5a4fsyCj464w8c=
Subject key identifier: 21:4B:41:E7:05:6C:71:D8:2E:F5:28:62:EC:4B:48:53:CA:71:2B:3A
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial: 0194BCAA18160688BC010FA24E8AFA2F3D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
Manifest number: 13E5
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: ReX9A3cmbtgWFLFuyLxS9PlSVD/ibqV5vaj6jFUHPhA=)
2: MOCwLZlblZQoo_YoYCbZ92anb2M.roa (hash: jgAeaLjB49XZgaBhwkQWDfGLFnhl3KHjjoTO22L98Wk=)
3: XMzMrB_8MPuaKVcXQLSpfY45uHg.roa (hash: Kg28zSoDTugIChfPSBvRhPy84bB18/D8eH/rgKbNXTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:18:16:06:88:bc:01:0f:a2:4e:8a:fa:2f:3d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=214b41e7056c71d82ef52862ec4b4853ca712b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:ba:00:b4:61:0a:40:c8:09:64:23:8f:6f:
34:e0:b2:53:2f:1b:66:02:ab:29:10:80:c3:ad:09:
84:c2:b1:21:0f:42:1f:49:90:f7:b0:66:0c:ce:49:
c2:33:b3:b2:e2:ea:6f:c6:a6:3a:59:61:86:3c:09:
1d:1a:6d:98:5b:b7:1b:cf:f6:9a:85:a1:30:e8:c6:
21:5f:5a:2a:de:4b:22:ec:74:fd:23:54:bf:d9:7c:
f8:1d:76:5d:43:8a:c8:45:36:f7:b7:77:e3:c7:11:
15:0d:3c:9a:92:ca:27:5d:1b:7b:52:b8:f4:13:75:
27:8e:10:71:e4:96:be:c5:78:1b:88:8c:43:d0:33:
64:7d:38:cb:59:6e:98:b8:40:99:89:40:05:49:48:
75:bb:f9:e6:62:ce:ba:06:78:90:71:2e:5b:f7:84:
a4:07:f4:23:89:c8:24:ec:cc:5b:8d:a0:9d:64:27:
db:f5:36:39:e1:e2:58:8f:40:ba:87:4f:43:b2:93:
4f:3c:25:68:3a:e9:a1:7a:da:a9:d6:6c:8d:1e:f5:
aa:18:71:aa:55:af:27:ab:11:10:22:a9:a3:c3:37:
44:f0:62:e0:9f:0d:d3:a7:d9:be:6b:b9:f7:77:19:
68:14:53:00:dc:39:13:13:2e:73:e9:31:e3:28:7e:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4B:41:E7:05:6C:71:D8:2E:F5:28:62:EC:4B:48:53:CA:71:2B:3A
X509v3 Authority Key Identifier:
keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:63:e5:be:85:cc:14:cb:45:ed:0e:7d:4a:57:1b:2a:72:ab:
5d:b8:90:65:1d:4e:ea:e3:68:17:c7:ce:0e:05:f7:7d:62:19:
01:a9:71:2a:9c:f6:45:4a:60:be:92:f2:2f:33:69:a8:95:86:
2e:94:13:68:2e:e4:da:02:7f:e5:75:95:da:4e:22:61:19:2d:
02:51:33:0f:d2:ce:86:87:64:71:7a:7b:37:d7:f5:01:1b:b4:
d6:68:e8:d6:a8:65:63:08:c8:ac:7c:02:2b:1f:b3:4f:c8:8a:
03:a7:71:08:f2:aa:8c:f3:4b:36:fe:d9:45:c9:2a:82:59:a1:
11:7c:f3:45:de:3c:7b:03:80:2d:db:30:b3:2b:c5:56:4f:f5:
6f:e1:eb:3f:d3:64:7d:e0:9e:e8:ea:5b:2e:6a:39:14:19:9f:
39:3b:90:62:09:37:ab:82:e5:ef:0a:cb:62:06:aa:39:21:6d:
a6:2c:09:b9:08:dc:dd:12:7d:14:f1:0d:e1:d4:d4:7b:ef:1c:
2a:09:27:ea:c9:f9:68:88:94:bc:f5:0d:e8:49:2f:e3:c0:7e:
c7:d0:a6:06:2c:6c:51:17:5f:cb:de:8a:65:7b:17:8b:1e:ef:
e4:29:5b:b2:d4:d6:05:a9:ac:47:24:d9:3a:f9:d8:f6:7c:bc:
f2:36:bf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:43 2025 by rpki-client