Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
File: ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft (raw, json)
Hash identifier: z4+8vt9roboFjkM7GtQgndn29XOCRv1h98vogMoRQdQ=
Subject key identifier: 07:D3:E4:78:0A:44:BB:8E:CC:F4:33:28:51:FD:50:B6:89:C1:6D:42
Authority key identifier: 6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
Certificate issuer: /CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Certificate serial: 0194BC72FADAC14EA817E4CEEEDB8E4E7645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl (hash: NxsUT3dCIuXpXkaAKDYT2Hektjii94TNbw7++/9BwAs=)
2: o_9E0nw7QGxoWCZk4QqgNmZyf9E.roa (hash: 1PmMo5WtlImsrpdUj9rWhTyVCZubOTGK5D/YW7g4Mss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fa:da:c1:4e:a8:17:e4:ce:ee:db:8e:4e:76:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=07d3e4780a44bb8eccf4332851fd50b689c16d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:09:41:9a:c7:75:25:b4:5c:f4:7c:89:29:
e5:13:5e:28:04:53:be:18:87:81:5a:ec:bc:a9:a6:
ae:4b:39:bb:b0:f2:3e:34:3f:af:44:b5:cd:bb:e6:
8d:88:77:40:4c:55:ec:22:ba:30:85:ec:f2:e1:cc:
bb:8d:d7:a8:69:1f:e7:50:b4:f4:1c:21:3c:24:59:
54:fd:ab:47:95:48:8f:10:02:2f:6c:52:02:e2:b0:
ff:3f:a9:2a:a3:cb:50:07:09:66:5b:c5:64:4d:7e:
c6:74:f6:f1:84:b2:b3:e8:45:67:1b:91:81:4b:b9:
ab:2b:67:f3:5f:1e:ac:b3:58:f2:66:2d:2d:3f:f6:
9c:45:ec:cf:23:e2:cd:90:88:10:9a:ce:c4:4c:0e:
24:52:6c:19:f2:94:08:07:5d:67:3a:5b:ef:d0:42:
02:10:02:c7:d8:fa:d4:47:9e:cf:a5:99:7f:28:30:
e4:03:34:0d:d6:ae:c1:23:53:a1:42:f8:01:74:8c:
03:5f:06:1e:c6:c5:b7:56:5c:79:08:ad:4f:cb:c1:
2f:8b:34:df:57:16:1b:49:e3:46:14:67:62:0b:67:
c2:bd:e8:f1:b5:9e:60:45:f1:c9:65:19:5d:8d:48:
6f:25:0d:81:44:2f:1e:0e:5b:d8:2c:f0:ce:09:a6:
82:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D3:E4:78:0A:44:BB:8E:CC:F4:33:28:51:FD:50:B6:89:C1:6D:42
X509v3 Authority Key Identifier:
keyid:6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4f:37:85:df:37:3b:ec:69:b6:31:83:71:da:28:84:c3:81:
a5:3e:5c:09:91:02:ef:fa:e1:53:0f:34:bf:38:bb:2c:32:d8:
fa:f4:52:f5:d9:66:d3:4e:be:4a:61:ce:38:d8:8d:67:87:3a:
07:fd:60:d1:45:11:34:cb:64:76:97:34:50:3e:f3:9c:8d:fd:
b5:a3:13:28:9f:b4:2a:a2:24:d1:56:a0:b7:aa:96:cd:9c:e5:
3a:7e:78:4d:f3:12:45:4c:33:c8:23:54:b4:60:1e:12:67:3f:
34:99:b6:4e:03:2f:17:45:e2:1a:fb:05:22:70:ba:f2:41:61:
02:6c:39:7d:d0:b7:30:f5:97:ff:a8:3a:b1:0b:cf:f0:2c:0f:
5c:d0:57:13:13:b7:c4:8a:03:3d:f7:31:bf:fa:94:d2:1f:0d:
59:8b:af:e8:68:28:61:0d:b7:dc:af:4e:83:e8:38:18:c4:5f:
c3:2b:4f:7a:fa:52:3f:0c:76:7a:7e:ef:26:42:86:41:e8:59:
ab:81:5e:e9:12:92:92:a4:24:5f:5c:ba:48:3b:44:0f:07:75:
84:52:a6:59:06:39:80:9c:93:2b:77:6b:41:a2:88:32:28:17:
d0:7d:11:5c:62:74:c5:24:68:37:39:af:e4:46:72:32:04:21:
f5:bc:21:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:21 2025 by rpki-client