Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
File: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft (raw, json)
Hash identifier: gRG2EPxZBo60gkysDSfdtfrSQRhGqO69KGpDnMY036I=
Subject key identifier: 85:6A:3C:21:B5:7C:C7:2B:9F:12:3E:1C:83:4C:B8:0A:F7:82:17:36
Authority key identifier: 01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
Certificate issuer: /CN=01538851167b4e3d6f64d53797b08cb41371870f
Certificate serial: 0194BCAA3BE126E75EE1A93F298204D9AEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl (hash: S/PClkYuiDXPD4FDebQWa4G69hxRDXVhetB3IppcqMM=)
2: voTBQK08ae5dJLLPC_WLTf299J4.roa (hash: IJFytwQyok533gq1H2eNYMHcRnLoiQur1Z7mEoU5py4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3b:e1:26:e7:5e:e1:a9:3f:29:82:04:d9:ae:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01538851167b4e3d6f64d53797b08cb41371870f
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=856a3c21b57cc72b9f123e1c834cb80af7821736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:29:8b:c5:f8:89:17:6b:26:0e:dd:a4:63:
db:2e:47:6d:17:a9:35:63:04:da:ea:67:78:6a:d4:
7a:d9:97:ba:ca:94:a7:33:6d:9d:26:1a:3b:d6:9c:
3f:fe:4f:76:66:06:60:77:50:25:b7:f4:b4:bc:d9:
16:1a:c7:84:be:b5:0b:67:9f:6e:9d:6f:6d:f6:43:
07:14:14:36:3e:e2:10:26:4e:25:7f:26:24:57:a1:
19:ac:50:50:7e:f1:96:7d:e4:53:ce:f0:05:a9:8e:
40:ab:00:f8:f2:2c:05:b2:4c:d9:72:63:98:99:22:
d1:52:75:14:d6:8c:d6:ba:74:db:c9:d6:8c:e7:6e:
e7:0d:08:a8:45:16:54:6c:10:ff:41:5f:6d:3a:2d:
14:1e:c4:a5:6c:a9:ab:95:89:14:dc:66:ea:b0:59:
64:c7:54:1d:0c:2c:2d:78:90:c5:0a:00:83:13:ce:
d0:63:45:a1:f4:ad:d9:42:d8:1c:19:e7:f6:49:8c:
83:5c:4a:d2:fa:96:5d:7b:61:d9:04:f6:af:24:70:
9c:57:ac:1e:3a:dd:74:91:c5:91:c4:74:4c:f9:16:
ea:41:eb:46:3e:4b:36:a5:3d:b1:b9:d3:dd:f4:b4:
e9:73:2e:dd:57:5f:4a:e0:9f:05:7b:a8:0f:df:06:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6A:3C:21:B5:7C:C7:2B:9F:12:3E:1C:83:4C:B8:0A:F7:82:17:36
X509v3 Authority Key Identifier:
keyid:01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:65:7b:0d:97:a1:28:c3:b4:45:f5:71:57:3e:b6:71:6c:f2:
3e:53:6b:b5:08:fc:50:02:9b:c5:0c:82:d2:ff:60:14:96:52:
14:4c:6f:6c:4e:22:0a:3b:ad:0c:76:7f:3f:b0:9f:a6:c3:8b:
c2:75:ae:f9:75:a3:2e:12:e9:96:6a:d9:51:c3:73:a6:10:d6:
37:3f:1d:cc:0f:a2:74:dc:e1:c4:fc:54:b1:19:d5:73:e0:4b:
6c:8f:fb:f8:28:a8:64:a4:d5:39:32:ee:bd:11:05:71:ab:ed:
da:9f:5a:a0:42:a3:f3:4d:18:90:92:e3:b6:3e:d5:d9:e6:e3:
9c:29:fa:0c:a4:4f:f2:a8:b1:93:e7:49:cf:a1:81:06:e0:ce:
b7:85:4a:14:fd:4a:f3:a8:35:c7:b9:dc:32:9e:24:92:a4:0c:
59:04:73:8a:ef:43:85:06:87:ee:89:81:32:c9:84:db:81:f8:
a6:cf:3e:88:85:7b:ce:d5:0c:f5:00:33:15:5d:2c:11:47:9c:
d8:7c:cd:53:7b:16:99:d2:4b:82:99:91:8f:ba:c1:20:44:84:
32:52:d6:c9:25:9b:ba:e7:ac:aa:36:ee:dd:7e:04:75:6f:d2:
66:02:43:15:fa:18:de:d9:7b:44:51:25:22:f8:9c:e0:45:ef:
44:87:0a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:16 2025 by rpki-client