Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
File: AdGZIUQMLysip3d4ApO8J_pH81o.mft (raw, json)
Hash identifier: YdXCcMNGrmcpvkVZTuXALaLUyxZUfl22vKGB3pbqWsY=
Subject key identifier: 6C:15:5A:87:00:B0:B9:3E:C8:44:B6:3F:B3:39:FE:DB:3F:19:7C:DE
Authority key identifier: 01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
Certificate issuer: /CN=01d19921440c2f2b22a777780293bc27fa47f35a
Certificate serial: 0194BCA9E02A9EB4D1933A1D15A7C166E5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: AMqTeh0F3XSWkmUe0nZ3FjJ_0eI.roa (hash: hVtRIuTJAp0UciU9Dz9eHBGNpOVVePzyiUAeImKtrwk=)
2: AdGZIUQMLysip3d4ApO8J_pH81o.crl (hash: SfX8Ccij9Y/wCALIZiTId80Z3Sj2u2fgOdlLot2qixA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e0:2a:9e:b4:d1:93:3a:1d:15:a7:c1:66:e5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d19921440c2f2b22a777780293bc27fa47f35a
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=6c155a8700b0b93ec844b63fb339fedb3f197cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:67:25:ce:bf:c5:99:c0:d5:13:a5:27:42:
06:be:46:9d:3c:8c:d3:be:73:dc:15:14:73:a2:1c:
2d:5b:5b:c1:7d:64:6e:7d:d0:dd:e4:0b:35:d3:3f:
13:53:44:fc:00:a4:41:a0:02:e1:c0:f6:95:e8:67:
6b:81:16:d0:79:6b:78:be:e7:18:dd:bc:a8:e7:59:
3f:c8:66:fd:73:1c:30:9d:38:f3:5d:6f:2c:0c:01:
16:3b:02:98:67:01:97:ed:8a:ca:0d:ad:9a:e6:77:
3e:f8:72:53:fc:54:fe:0b:b9:4c:75:6b:99:ad:15:
e0:39:78:6b:73:f4:3d:1c:ca:69:25:69:84:14:76:
e1:bb:8b:f9:7f:e7:36:7f:d4:21:86:ab:fd:69:bf:
e4:57:ba:1f:17:0b:39:33:62:8a:1a:5c:90:b2:cb:
f6:f2:b7:e4:e8:13:2c:1b:f4:90:9f:b6:58:d8:4b:
a8:d9:21:25:5f:55:51:00:3d:bc:3a:9d:ff:7d:ba:
cf:8b:a5:60:78:97:7e:b1:5b:82:b1:32:c3:b1:a0:
77:b8:b1:d4:6a:ce:f9:67:87:6e:11:92:24:82:52:
36:a9:d8:b4:55:0a:80:20:92:28:93:91:cc:2d:7a:
12:9b:6b:7c:6d:41:98:46:ed:b1:dc:e6:32:07:cc:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:15:5A:87:00:B0:B9:3E:C8:44:B6:3F:B3:39:FE:DB:3F:19:7C:DE
X509v3 Authority Key Identifier:
keyid:01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:02:be:38:19:94:98:9f:7a:e6:b9:84:2b:8c:8a:5e:c7:5c:
67:ec:47:bc:fb:9e:47:12:42:a0:72:ba:f9:f0:c0:8c:11:a3:
41:26:7d:48:e6:ce:ec:ea:2b:ff:a3:ce:60:bb:d2:d2:ca:0a:
71:df:48:b4:0d:aa:ff:3c:e9:ba:ff:f5:58:a4:4e:af:61:28:
a7:82:2d:a7:0a:52:6b:5f:a3:88:2e:b6:10:26:79:02:73:99:
ad:90:24:de:eb:f4:41:2f:1f:83:2b:97:25:75:d7:56:32:34:
aa:c7:d4:92:df:97:18:06:29:e3:10:7e:d1:05:9c:a4:44:87:
fb:4c:18:f2:a8:14:5e:de:0a:80:8f:20:5c:2f:48:48:62:87:
77:87:5f:95:02:e0:9c:07:a7:67:05:70:91:cf:ac:d8:b0:ae:
a8:d5:be:e6:2c:1c:8a:5b:df:28:fc:08:2b:94:fb:7f:73:f9:
00:64:18:b2:76:bc:29:5c:d2:66:7d:f4:64:4a:fe:e8:1a:9c:
4e:79:87:51:97:7f:6e:39:b0:de:ac:1c:ee:4c:55:df:0d:41:
7c:36:7d:aa:c9:7c:f9:1d:b3:8d:c7:72:8d:13:e9:f5:fb:ad:
13:0f:81:97:49:59:bb:9a:a2:7d:80:6a:57:2b:fe:87:34:54:
e0:73:80:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:54 2025 by rpki-client