Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: g3DA9FS3UgTt5AX7vPBdEDG6YMHP94Xxshq49bbOK44=
Subject key identifier: BC:CA:81:B2:69:44:97:60:44:80:3A:60:7C:8F:2D:E0:66:C4:63:B7
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 0194BC72F3F801A73C79E9EC948D96AF019C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: Ajot81u8uYIEK9JGXKuXL/uAZ/yqGuxO2TBFaXusO/M=)
2: fudoZ6TJp9dp16Pww5r5a49f_qw.roa (hash: WSDqUxIZJlZyyACmY/UreISdxVZNSP6rtPlIwpgLS+I=)
3: glbAf6IutJeA1wA9zcIVkw-1mp0.roa (hash: ESJ6dYFBwvP8YpbvVt0/saN/BWXL7V+r0E/HCTFScAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f3:f8:01:a7:3c:79:e9:ec:94:8d:96:af:01:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=bcca81b26944976044803a607c8f2de066c463b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:e1:ae:1d:76:88:65:57:91:ec:49:dc:d4:
48:30:95:3c:58:71:c4:f1:4e:08:54:d7:e8:bf:0c:
c0:96:95:77:90:45:e5:e2:e4:ae:ba:e1:8a:16:89:
ba:f1:32:42:f1:4b:24:ef:97:12:2e:17:a8:01:88:
bc:84:36:ad:d5:74:5c:53:ee:31:3d:7b:5a:39:cc:
15:be:c5:a8:3b:98:bc:03:80:ec:16:d4:51:ee:ee:
5b:55:42:2e:8f:5a:4b:68:fe:c7:7a:bc:c4:70:75:
30:08:59:a8:88:5a:dc:65:84:63:13:59:47:d0:af:
6b:7b:d7:cc:ed:88:89:c8:4b:2c:dc:fb:9d:1c:63:
da:d4:81:60:9e:d9:90:7a:bb:8c:68:02:f2:39:74:
78:36:c7:2f:53:06:90:c1:31:8d:82:1c:86:02:24:
99:02:f9:2b:b5:2a:d9:7a:b0:38:f8:7f:dd:6b:32:
a1:e7:62:99:15:86:85:44:c0:41:11:a2:99:ae:03:
5d:06:0f:a9:9b:4f:35:7b:a4:dc:b0:a0:93:28:99:
d7:8f:e6:0b:cb:d7:63:d9:64:ff:68:f6:8a:b6:31:
98:dd:5d:87:01:81:f3:e9:eb:9e:58:a1:24:38:23:
fd:e1:6a:0d:30:6c:9a:e7:9b:a5:42:17:cc:04:97:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CA:81:B2:69:44:97:60:44:80:3A:60:7C:8F:2D:E0:66:C4:63:B7
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bd:d9:49:56:f8:b5:44:66:c8:78:92:2a:63:3d:b4:87:d0:
f0:50:bf:3d:94:bb:f9:17:24:e4:7c:34:34:7a:c5:b4:bc:ab:
bc:6b:b5:8c:22:92:63:c5:00:9c:fa:d4:f0:31:94:20:28:3b:
12:f9:91:4a:1b:12:77:aa:bc:80:e0:df:71:6e:1e:80:35:7e:
3f:31:5f:50:8d:92:ab:01:cd:5c:ae:20:f0:ec:82:a1:db:52:
0f:62:bb:b2:bf:73:de:ad:be:1f:f5:f3:53:d4:94:6d:6b:7b:
8e:94:87:97:a4:ed:38:d5:50:1d:ef:ca:e2:5a:7f:dd:9e:1c:
01:da:4f:94:d3:07:92:77:9d:a8:8b:22:27:e7:54:0f:72:3e:
eb:cc:77:76:cd:03:5f:e9:ef:48:a7:65:43:86:b8:9d:ed:ee:
9d:1b:19:0a:8a:7e:e9:1c:9c:88:ee:57:b5:1a:78:8a:0a:3a:
5c:cd:52:87:99:4d:b5:80:1e:21:d9:46:f8:21:57:6d:7a:d2:
09:e6:d9:15:df:a3:8b:da:b4:2a:0e:51:90:55:f8:c0:a6:4c:
1c:23:c1:96:58:be:f4:0d:0e:5c:4c:98:ec:fd:67:6a:ec:41:
e1:6e:b2:68:f1:b0:8a:7a:6a:b4:d9:e3:f2:6d:4c:b7:4c:13:
4a:9f:2e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:41 2025 by rpki-client