Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
File: aXhsF41lvnmuUNNVhX2hOtdKvqA.mft (raw, json)
Hash identifier: BdzH7Tu1KNdZvNh+fLCLh5mjjfz5SmiMnkYq1qWI3xI=
Subject key identifier: D3:E0:90:74:E3:33:8C:5D:0F:57:7E:21:6F:7B:C8:D4:CD:2E:3F:9C
Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0
Certificate serial: 0194BCA9D6751F73F75C14CB7666D7190F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
Manifest number: 10C1
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: YDBhxXo_8mcnmdLJfhI-a4ewFQg.roa (hash: fapwqKa9k7WRCqDD9O9AyPX9HW1fh2SdIIC/a8oskdc=)
2: aXhsF41lvnmuUNNVhX2hOtdKvqA.crl (hash: ykwH+knFohn7X03F/mSIfu50+st9PJnPbWPktvRhZJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d6:75:1f:73:f7:5c:14:cb:76:66:d7:19:0f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=d3e09074e3338c5d0f577e216f7bc8d4cd2e3f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:00:17:e5:f8:c8:71:bd:2d:05:2c:0c:19:
22:a6:b1:b7:50:c6:57:e4:46:e3:0e:fa:8a:fe:c9:
32:b1:57:be:6a:73:fc:1d:fe:ea:fc:87:65:37:e5:
82:f4:1d:87:69:fe:fe:16:3d:82:aa:46:92:ba:aa:
d7:db:2a:5c:d1:cd:98:eb:17:d2:78:e8:3d:8c:68:
4d:e8:c8:a7:f2:70:19:93:a6:ab:9f:ec:d5:76:bf:
45:52:fb:6f:a1:cf:68:a4:81:02:98:3a:48:28:ab:
44:9f:db:c2:41:33:b5:f0:4c:92:1b:8b:ae:c7:65:
12:4c:ad:47:19:6c:96:71:0d:16:0f:fe:6e:38:4d:
5d:62:84:f7:93:99:ad:9e:83:83:0a:b7:0a:23:40:
73:42:d2:b9:32:5a:89:bc:6c:b5:28:e6:e4:f3:ca:
01:af:ca:fc:2f:48:86:60:94:80:8d:b0:1e:c0:7b:
fc:80:9a:1a:99:a6:a9:07:eb:c0:96:26:38:7a:9e:
1b:7a:eb:89:36:05:83:cc:cd:d2:4a:1c:55:9a:15:
6c:fd:ad:a1:92:32:62:a7:59:83:60:f1:ed:c0:5e:
dc:bd:55:d3:96:87:3a:96:f9:8d:34:65:b1:74:a7:
1f:8b:4b:f5:e9:cf:d4:8c:4a:1f:06:58:89:60:2c:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E0:90:74:E3:33:8C:5D:0F:57:7E:21:6F:7B:C8:D4:CD:2E:3F:9C
X509v3 Authority Key Identifier:
keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:26:09:de:c6:07:3e:cd:cf:3e:1a:dc:78:74:13:f0:96:d4:
90:46:5c:5b:dd:ec:17:84:2d:6d:92:68:9f:44:72:00:28:3b:
fb:62:73:93:42:6a:d3:d3:c4:be:01:3d:ab:62:39:0e:d4:ff:
af:92:7d:36:fd:b0:a1:eb:02:98:cf:f3:91:49:d0:f0:ba:1b:
ab:a5:89:1c:5b:56:5e:ca:27:43:dd:01:a1:f4:da:e3:1f:e5:
62:bc:d3:44:08:02:51:3a:a7:cb:d5:96:5e:db:ce:a7:0f:62:
d1:fe:73:1f:64:31:b9:08:f0:7b:36:54:10:54:dd:f7:bf:39:
b9:71:ee:3a:02:86:d2:a5:f3:13:b9:af:58:d7:e4:56:60:cd:
31:87:df:b1:3c:b3:a4:87:ea:42:4a:d2:44:85:50:8d:ce:d6:
a8:37:bd:14:e1:89:42:d0:c4:b7:dd:1e:6b:0d:a2:41:f8:3f:
b8:dd:33:71:7e:ce:bd:c4:f5:46:29:92:97:f8:92:96:dc:a4:
49:4c:2a:ee:65:a8:43:d8:23:10:61:fe:a4:1c:bb:f7:a9:08:
b4:58:cd:1b:35:f5:06:9e:b5:e8:22:68:e8:7d:93:3a:df:4d:
62:3a:16:70:2f:03:3f:42:11:0a:77:16:ae:92:d7:40:c8:76:
0c:05:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:39 2025 by rpki-client