Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
File: aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft (raw, json)
Hash identifier: 82RScXfMPIxdQmBlVrL/HPQH0Q3f73yclUmzhsdi8vI=
Subject key identifier: B1:16:4E:64:EB:01:99:FF:F1:B9:F4:6B:1D:A7:3E:3B:FA:04:B7:05
Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Certificate issuer: /CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Certificate serial: 0194BC050C6570D4AE9559E285C5ED0C0B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
Manifest number: 130C
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: VuecASVmjUcKvyphdlmWhBLtzCY.roa (hash: 9pywbAdYpVLPp0+Qv028vFSYWXiOfuf7WbI6OQxi+GI=)
2: aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl (hash: xMPPidzXJBnHGI1y+6A0DUCWQCd12vSffDpnMeINQu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0c:65:70:d4:ae:95:59:e2:85:c5:ed:0c:0b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=b1164e64eb0199fff1b9f46b1da73e3bfa04b705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:b6:c8:bd:8c:44:24:39:53:8f:c2:81:61:
a0:5f:80:01:fe:b8:c8:8d:f3:f2:73:40:15:a7:08:
0d:ab:15:97:74:95:5e:65:4d:50:07:4c:8d:10:82:
25:a9:b0:e5:74:bf:6d:9a:a6:17:02:db:ae:57:b4:
cb:a7:ec:be:c2:38:71:89:88:88:c6:78:2f:4f:35:
15:bf:b3:83:d1:d0:eb:88:87:73:09:06:15:e0:4e:
fa:c7:72:8d:1a:86:0b:56:88:89:25:79:e3:a5:9d:
11:d8:a7:02:5d:f0:b6:00:d4:a2:0e:25:2a:d4:e9:
41:e2:4f:2c:6b:0a:a1:ca:ea:06:77:63:6c:86:2a:
2c:d4:0e:21:a0:86:3c:b2:8a:0b:d2:c8:b1:30:f9:
0d:79:e3:d8:90:04:2c:fb:07:e1:70:8d:8b:3e:7a:
68:05:a7:f9:c6:16:c0:f9:33:c9:44:22:cf:33:a6:
61:f4:9d:db:e0:f1:2f:2e:31:8e:42:98:bd:99:3d:
a0:bc:fd:1f:97:04:e5:cb:4c:09:bd:1b:58:46:40:
b1:b7:04:98:f9:b9:77:95:69:01:5d:df:07:32:f0:
b2:18:b8:75:5a:f7:0f:ce:42:62:5f:bb:dd:a8:44:
1b:c3:2a:f4:33:76:bb:d5:67:ab:c5:1a:ea:5a:4d:
ec:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:16:4E:64:EB:01:99:FF:F1:B9:F4:6B:1D:A7:3E:3B:FA:04:B7:05
X509v3 Authority Key Identifier:
keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b0:f1:71:c3:f5:58:62:8b:18:f6:2c:34:a0:d5:8c:58:61:
e3:a7:b0:22:84:b4:25:d6:24:2f:36:df:b5:8c:cb:23:96:90:
99:e7:e8:29:22:45:b5:a1:1a:23:26:5e:a6:f1:8e:40:69:cc:
09:7a:a3:75:6b:ba:31:5f:c6:70:a9:3f:5c:0b:a1:85:78:a3:
4d:8a:f6:4a:73:bb:7a:b6:bc:74:fd:22:36:9c:ce:38:ad:71:
f5:bb:3a:89:50:b2:dc:a2:c7:e4:04:e3:50:cd:b6:a0:40:8c:
f1:c7:5d:0a:6e:28:6d:6e:da:98:08:13:95:98:f8:a0:91:39:
5e:39:28:ed:43:8c:40:70:b7:7d:5f:0e:98:23:8e:39:17:f0:
2e:af:2d:c1:df:00:af:19:09:09:03:cd:af:81:cb:dc:53:17:
5f:52:61:86:cf:51:4d:be:6c:36:73:35:4d:36:69:05:aa:f3:
c0:f0:b6:64:90:d4:25:9f:54:a8:16:52:4e:cf:27:21:23:94:
35:bd:fd:dc:f6:43:eb:21:7b:09:b9:cb:30:01:72:64:51:e9:
7a:db:37:98:58:0b:b0:ac:02:ce:c5:4f:76:b5:0a:9d:3a:fc:
3b:d8:2a:6b:a9:91:16:18:34:4f:fe:d5:9d:ba:8c:dc:21:93:
10:5f:4c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:27 2025 by rpki-client