Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: MAi1w/tOu7AMVueEtd8Knug0amcinuqlVnz+3OJLR80=
Subject key identifier: 2A:6D:58:A6:E0:63:17:E4:B2:E6:8F:96:39:66:D6:D8:79:EB:C7:1C
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 0194BBCE0C49B0370539527144E143CAA892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: V6I7xtb-s540gCh7ELkbFAWWNm8.roa (hash: 4XfEuv+JUU8dRovsqOYBux0Sp8hqu4SxoGQivq4ciLk=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: XQPm8xFXbzcE1t1mJtfYjthQS6wrVTSuxsuX9Cje//0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0c:49:b0:37:05:39:52:71:44:e1:43:ca:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=2a6d58a6e06317e4b2e68f963966d6d879ebc71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:5f:be:27:8b:92:d5:ac:52:5b:df:0c:9a:
40:a0:24:55:94:46:46:06:16:c2:b1:94:f3:9b:9b:
19:aa:3c:e4:e7:0c:f2:68:50:fd:87:aa:28:e9:f0:
4e:24:ec:95:3d:fe:5b:d1:0a:ac:52:67:40:58:f2:
5c:96:57:2e:e4:99:49:1a:9a:5e:7d:97:70:17:1c:
e7:5c:cf:0d:64:c0:ea:8f:c9:d1:8a:01:7f:9a:bf:
a9:57:03:cc:4f:66:f6:d8:03:8b:be:87:c1:33:a4:
fd:07:8b:e1:4f:ae:73:2b:3c:07:99:1b:18:3c:ae:
05:8e:5d:91:c2:fd:fd:ef:e6:8b:5a:3f:69:62:72:
32:a1:d5:7c:13:c3:05:8f:6a:19:b8:c3:2b:34:19:
2e:f8:d4:0c:02:90:8c:14:dd:77:3e:3c:a7:a3:15:
a4:b0:ed:48:c5:03:1f:2f:22:12:52:81:5c:1e:43:
41:4b:e8:32:35:6a:9c:16:56:37:66:29:d5:cd:38:
fe:bb:d4:86:3c:47:a6:82:e2:3c:1e:58:a7:1c:97:
e9:9d:af:81:42:43:de:09:b6:5e:63:9c:64:41:e6:
91:1c:9b:64:40:94:2c:d5:81:e9:0c:77:92:af:b4:
82:4b:6f:31:82:35:c2:9c:cd:95:2a:bd:39:9b:25:
1b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:58:A6:E0:63:17:E4:B2:E6:8F:96:39:66:D6:D8:79:EB:C7:1C
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:aa:91:d3:f5:19:9e:5c:04:48:85:af:eb:15:b5:b4:42:cf:
07:48:52:46:52:38:da:a3:18:04:66:41:59:f6:5b:f6:ad:5b:
76:92:cf:55:41:00:38:fe:26:ac:d8:97:d4:4d:1d:35:05:19:
10:34:3b:80:7d:29:b4:b3:6b:ae:64:ed:fd:8e:1d:4c:65:3e:
69:c0:fd:27:b1:78:9f:ff:1a:c6:03:57:7a:a2:70:73:3d:ee:
9d:91:02:55:df:de:30:4e:7e:ea:16:9c:c1:05:66:13:76:6d:
f5:9b:a1:15:23:07:bc:ab:07:31:85:04:32:1a:d4:51:dd:76:
e6:e1:d3:86:e0:c2:a3:5e:38:3e:6a:a1:ac:29:f0:f9:13:e3:
41:d2:c2:08:21:d2:87:e0:c6:4d:d8:d5:07:4c:e6:91:36:f7:
43:6c:2e:13:9f:27:8f:7f:ac:48:fe:a5:2b:01:3a:66:3d:cf:
bb:21:dc:3a:82:45:fb:b2:af:e8:fb:cd:5e:0d:1c:df:0f:54:
dc:a6:5c:32:20:27:88:e3:3d:ce:d3:30:f7:7c:39:12:9b:98:
a9:64:88:9d:f0:c9:be:fa:5e:6d:70:42:70:c4:d8:1e:6f:52:
40:26:26:66:dc:84:ec:7d:02:ae:b7:46:26:62:3c:dd:ff:62:
84:65:c4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:42 2025 by rpki-client