Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
File: AdULmAcVDaOWMiudTc_A0vsrZSA.mft (raw, json)
Hash identifier: FXN/xnUzMfgPeHNi1vmbC/I1WRAx5a7y+qxWvUw1PZQ=
Subject key identifier: 1E:6F:09:5B:A9:D6:40:53:A6:27:7C:D0:F7:94:85:63:D0:DB:71:C7
Authority key identifier: 01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
Certificate issuer: /CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Certificate serial: 0194BD17BE8E48CEA0C7B61AC8DEF8A3D9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
Manifest number: 047D
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: AdULmAcVDaOWMiudTc_A0vsrZSA.crl (hash: BV3JOJgos5p5hc2Gd6YwCF4CvzU9lra+DgJ+bpGuHgw=)
2: jZ1RAfRznKvoOB1_jnvU1p9lvXk.roa (hash: HIn2EZR8FCBtV+D1WmQeFC+W9f4d6g/d5Kn+DYMnwWM=)
3: s9CrfLdwyz1HofYuhgTm-G0XcWY.roa (hash: 5D2dFiucRImYcNfGCDutgF5vRQIcWGUYkXV/9xTSSbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:be:8e:48:ce:a0:c7:b6:1a:c8:de:f8:a3:d9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=1e6f095ba9d64053a6277cd0f7948563d0db71c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:eb:cd:c3:1e:5f:e0:e6:9e:30:88:c5:d9:
b4:32:bc:c6:9f:9c:7a:87:d9:04:0a:73:89:a0:fd:
ff:fb:f0:9c:21:8c:8e:a2:71:d6:da:4d:83:75:94:
a7:cf:81:58:5d:30:ca:16:9d:6c:49:8f:21:9d:bc:
63:9e:55:4a:54:51:c5:92:9e:97:fc:b7:0f:13:18:
c3:c3:98:65:30:09:34:f8:20:05:90:6a:d4:63:d4:
77:b7:ba:59:ca:3d:bd:ef:f4:73:74:9a:73:dd:1c:
eb:72:e1:3e:90:ce:61:aa:f3:e3:07:1c:c6:1d:b1:
00:4d:42:97:b7:73:cc:85:ef:a7:16:0a:ee:af:a4:
a2:dc:59:d8:3a:72:d7:3d:85:17:df:40:15:ec:8f:
e6:99:10:b0:fe:ba:fe:fa:b5:67:25:fc:1c:1d:1a:
31:27:66:f0:ee:d2:fb:ab:87:f6:07:62:e4:8f:02:
51:e4:77:d6:a2:ca:ca:12:87:3e:8f:a6:99:88:a1:
7b:82:77:b2:77:9d:30:c1:b6:a1:ea:90:5b:2d:e4:
fb:1c:bc:41:0d:24:a1:43:5f:f8:41:09:54:62:c4:
be:ff:00:81:c5:b4:48:79:57:64:9c:5f:94:9d:2d:
a0:16:c8:90:a7:ab:40:d2:41:e9:bc:a1:a9:c3:13:
da:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:09:5B:A9:D6:40:53:A6:27:7C:D0:F7:94:85:63:D0:DB:71:C7
X509v3 Authority Key Identifier:
keyid:01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6e:86:65:48:8c:0b:9d:07:03:48:f1:95:5f:bd:44:a7:7c:
94:bd:65:97:e1:22:8b:76:43:f6:7e:9c:44:14:5d:98:dd:98:
a5:76:04:7a:06:74:94:81:f9:3f:e6:32:5d:e7:ac:e1:83:c8:
0e:56:2a:3b:99:e9:1f:0f:49:8a:bd:f2:81:f6:4d:c7:d9:50:
5e:97:21:fb:32:ff:ef:f7:73:63:02:fb:9c:26:96:bc:d1:af:
0f:6b:bc:8d:6e:dc:62:2d:3f:41:9e:64:6e:c8:3f:12:83:42:
7b:1a:63:6d:95:5e:23:37:7b:09:0c:78:03:45:02:c0:fd:cf:
68:62:4e:89:3d:b0:02:ad:af:30:84:c1:c6:95:75:a0:d2:1c:
b1:02:40:70:9d:0a:07:52:de:40:c6:d5:de:77:54:b1:5f:76:
66:29:4a:cc:6f:bb:28:fc:22:36:00:ca:2e:a9:f6:d6:d8:9d:
fe:1d:b7:98:4e:f2:c3:c6:1a:c7:e4:a4:85:04:9c:be:56:a4:
3e:31:08:c0:c3:fe:31:5c:b5:9a:d6:05:3f:ce:3b:ed:06:13:
d9:1f:e1:45:a0:4f:33:5a:52:b9:99:79:22:ab:ed:37:b0:52:
e1:56:9c:4f:9d:9c:2a:da:c4:54:27:ac:51:45:45:81:94:98:
dd:68:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:53 2025 by rpki-client