Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
File: _AY2gjog5gJjQv6MiOpyqPj3p0k.mft (raw, json)
Hash identifier: F1x5XaUBWOZarkSgOIatUvNc3fJHZ6pZfoMhnmCAvIw=
Subject key identifier: 5F:11:7D:FC:E0:33:99:FD:28:A9:BD:1C:36:D8:07:1C:F5:4E:45:62
Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Certificate serial: 0194BC04C1813384FA91BBC0472940248F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
Manifest number: 104D
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: _AY2gjog5gJjQv6MiOpyqPj3p0k.crl (hash: HuuXnfKIkmn+5Lg1hoVDw+PhGloqNDN+BLPmmeBPQsw=)
2: hIlU1ledlK0WoRmp-tL_K_qi2N0.roa (hash: ZI6M6O4nwpCFukoO/yVoA24rabSe9nnOSdxH4aDpFEY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c1:81:33:84:fa:91:bb:c0:47:29:40:24:8f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=5f117dfce03399fd28a9bd1c36d8071cf54e4562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:c7:52:44:d4:1f:a4:86:3e:36:2a:47:67:
1d:4c:89:70:f7:bc:d1:40:98:e7:73:8e:53:40:b7:
a1:28:b2:f1:9d:67:4d:1b:d1:90:45:30:4f:c6:8f:
f3:73:0f:2c:2a:92:aa:25:e0:07:7e:3c:a5:30:d0:
fa:3b:d9:11:37:a5:8b:df:6b:bb:42:ca:59:da:60:
eb:b8:b9:eb:df:ad:88:9e:97:5e:e6:74:d7:e2:73:
59:28:2d:bd:86:da:3e:5a:2c:6d:3d:45:63:b7:96:
0e:b8:b8:2b:c7:62:35:a4:ee:b9:31:c2:65:fd:43:
c5:a7:42:aa:85:7e:db:39:87:63:0d:42:f2:71:ca:
ec:10:b9:3f:b7:89:23:13:5c:1b:f8:84:42:56:f5:
e5:a2:a7:5a:63:c1:be:e3:60:f5:76:e3:ee:d6:c6:
f9:98:2d:ef:18:d7:da:fe:52:6f:09:f1:77:93:19:
30:c5:1d:c5:a6:00:e8:f8:6c:5c:b6:9e:4f:3f:d1:
5e:f6:ed:d4:fd:1a:45:e1:a0:c5:73:11:15:7a:cb:
94:f0:4a:e0:f5:63:74:01:5d:1c:97:b5:03:51:e9:
4d:65:55:08:c7:89:00:10:c6:10:48:dc:ba:27:22:
88:ac:13:21:1b:35:ca:85:a9:17:20:b8:06:1a:89:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:11:7D:FC:E0:33:99:FD:28:A9:BD:1C:36:D8:07:1C:F5:4E:45:62
X509v3 Authority Key Identifier:
keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:62:e2:1c:8a:16:b8:96:2e:1e:c1:b2:7a:1d:25:66:a9:fd:
20:39:cb:9d:8d:de:9a:09:91:4a:be:29:b5:c4:a7:06:67:dd:
fe:6b:02:86:1b:97:01:ef:2a:cb:0d:fb:d0:89:d8:f4:ac:eb:
fa:84:1a:43:e8:09:9e:8b:e8:39:ec:cb:41:98:34:79:01:67:
a8:25:c0:b1:ac:2a:42:a1:f3:da:a3:32:a1:46:86:5b:33:1a:
cd:91:a8:5f:b8:65:93:a8:42:2e:ee:f6:89:36:45:a5:fb:bc:
b7:92:fb:da:d9:06:a2:bc:00:15:fd:a9:8e:70:b9:0f:fd:1c:
85:be:ab:c3:29:4f:78:ed:1b:81:30:50:36:a4:2c:df:3d:db:
15:a7:a8:d6:30:06:84:c6:c4:36:99:62:93:1d:bc:1a:84:51:
bc:70:46:72:a8:a6:fc:24:25:d1:a8:0e:26:71:e3:dd:14:6a:
7f:86:d5:78:6a:73:3a:83:6d:e7:2e:57:38:60:78:3c:85:ae:
41:ec:61:30:a5:48:2a:4f:5e:ae:7d:9a:bd:90:f0:3e:b4:19:
59:ae:cb:1a:30:79:22:e6:93:28:04:f3:9c:2e:b6:f4:a1:23:
95:12:42:10:df:55:f0:be:8c:d8:ae:a6:f1:aa:5b:ba:5b:05:
a8:bc:b4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:53 2025 by rpki-client