Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: 7Q91DYcPqqzmEognn9kFp8zKe7XtxDHES3YosYOyOjw=
Subject key identifier: DC:8D:AA:B9:A9:82:4B:CC:32:95:A6:F8:91:12:C5:D0:24:53:1E:94
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 0194BD4E52F0D42DF61F8987C7549E58B39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 08C0
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: 0avBUZc0fRe5pdYzvDk9HgX1ajQ.roa (hash: vHaXs0oLz+thOA7Ry4E1jwe2sP/zqNcNu+NOGxEA+rM=)
2: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: Ji+oxQc27OAgs+0CmepmzjLMk/aXzxiYlkWfaachORQ=)
3: EZwtw6Pq_G1qcUHbmI7-gXnu9Jc.roa (hash: vmy1JQIAxBf7tCsU1XK4dYqZEdqdyJHgDm3eJn2Yp94=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:52:f0:d4:2d:f6:1f:89:87:c7:54:9e:58:b3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=dc8daab9a9824bcc3295a6f89112c5d024531e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5a:4e:17:13:cd:c6:bc:83:87:fe:13:82:2c:
f6:2d:fd:1e:25:b5:ed:56:f0:0b:ad:26:2f:12:e2:
06:1b:8b:2b:80:db:fd:b1:c2:3d:d6:ef:cd:5b:ed:
df:23:c5:ae:9f:93:55:c4:4f:3d:aa:71:93:36:8b:
2c:f5:08:c4:82:92:59:ed:93:8e:48:8d:c5:7f:fa:
70:eb:45:77:c9:2c:61:d1:ed:4a:7b:71:d2:07:95:
d0:a8:1c:f3:3d:1e:0c:cd:eb:ef:d6:7c:0c:e4:5e:
96:a2:c8:8b:4b:3b:2d:6d:24:e8:b3:49:0e:81:a3:
08:16:cd:71:80:78:52:89:42:78:5f:7e:1d:a9:42:
da:73:c2:be:54:83:d6:ca:02:5f:56:fe:7f:14:cf:
77:8c:de:a9:ca:5c:14:3e:03:81:17:d5:f0:05:c6:
c4:ba:16:bd:58:e0:90:0e:9a:71:63:5b:47:35:23:
0a:55:cc:58:96:cf:df:08:49:b1:8e:03:39:0b:63:
ac:d8:0a:94:43:af:a4:5a:d1:a4:8f:27:99:38:42:
a2:9b:33:6f:90:f0:2d:d3:d4:c5:c7:60:26:e5:51:
7c:9f:ff:00:bb:c0:cf:70:af:36:3a:33:f0:11:3a:
20:17:eb:c9:1e:ce:01:a6:af:c2:8e:e9:46:f0:79:
ce:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8D:AA:B9:A9:82:4B:CC:32:95:A6:F8:91:12:C5:D0:24:53:1E:94
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:39:b4:52:2d:db:07:50:b0:8d:b9:26:57:08:78:fb:f6:0e:
3e:96:70:96:5c:ec:54:a5:bb:48:c4:a4:78:4d:62:d1:3f:28:
30:32:67:59:f3:72:77:6f:06:83:1b:9f:c1:3c:aa:75:77:6e:
13:d2:de:e0:56:32:57:fd:46:89:39:a4:58:6f:82:90:84:ed:
78:45:36:e2:65:38:96:59:ae:c8:88:33:99:76:b1:14:63:a2:
35:0a:46:f6:e6:07:47:57:a8:1d:f2:73:36:34:d8:2d:38:c4:
ff:a1:cb:40:28:09:86:3a:68:69:da:65:a0:37:c6:6e:2f:5e:
20:97:c2:fb:ee:ed:38:ea:d1:2d:33:7e:ce:c1:97:f6:7c:92:
91:1e:c3:23:7e:26:65:da:09:f8:32:75:13:45:10:f1:39:c1:
cc:5f:6e:eb:a5:32:78:f9:0f:f3:22:4a:ba:61:67:6f:7c:f8:
54:59:82:39:8e:79:0d:0b:a4:4c:f5:d8:1e:d2:ad:6c:ce:eb:
9d:0c:69:70:0f:68:0a:5a:e8:30:cd:ff:f4:b5:16:b1:fe:df:
65:88:33:94:6f:cd:e4:ea:27:65:11:3a:b2:d2:76:39:a1:96:
03:ee:26:8a:ea:8d:e5:f6:8e:3d:03:bb:99:3b:2a:1a:5f:64:
33:ec:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:45:20 2025 by rpki-client