Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: H1HqQ7lxAhXh5Jw0Dlquriz8MrRa/GACTLZCbuOYmQ4=
Subject key identifier: F1:0F:38:E9:E3:C6:7C:6A:78:9C:21:2F:BF:B9:42:DF:20:FF:1E:9A
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 0194BC3C151B1897F068B59EEF3625FA92AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: 1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa (hash: Kdt5sjduBNPRdliFvzUojjEC7aaeGnPMG73opbmbK+Q=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: vRm15ygnQcWNH31kgLkra77cUq5J6N+4kyWCvgWWhJc=)
3: nFTNuRdL8Z-Wdwlm8A1gxGSf2iE.roa (hash: Be/+xAPsxrgz7pa9P1aEcP7attPVHrGgMu7I83eiMD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:15:1b:18:97:f0:68:b5:9e:ef:36:25:fa:92:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=f10f38e9e3c67c6a789c212fbfb942df20ff1e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:c8:98:39:a5:5e:60:ca:27:0a:d4:b9:e0:
e1:04:ae:18:9c:8d:13:a3:d0:7d:f6:61:d4:2c:b1:
ac:9c:fd:c6:8e:39:06:23:a5:c1:77:9e:f5:94:44:
c9:01:98:3d:1c:9f:34:30:25:d6:96:81:92:ae:c6:
d0:8f:53:15:ca:a0:20:db:7e:9f:7d:50:b5:8c:88:
46:0b:bc:97:ad:b9:f3:a7:08:9a:a1:b4:15:cd:36:
a2:cb:84:b0:7e:75:07:d9:aa:91:01:65:24:df:70:
e6:d0:19:ee:92:42:b6:c8:f5:5c:2a:2a:20:3e:71:
8f:0b:00:3a:d7:00:15:94:30:63:05:e5:06:3a:7c:
71:e0:c5:ba:3e:14:3a:e3:9c:3d:63:cc:fd:79:9d:
c6:26:07:a7:20:aa:4b:02:49:52:4d:1e:a5:04:d7:
68:5f:56:f0:5f:65:31:0d:ef:90:fa:de:ec:09:5a:
80:24:67:d3:4b:8a:f9:da:78:ff:57:fd:73:7a:d5:
9c:b0:93:a1:72:ab:73:06:e3:4a:20:9e:a7:65:cc:
ca:8e:e4:2c:b4:f7:53:03:44:21:4b:ca:88:39:24:
f6:36:06:d1:8b:67:43:4c:51:86:97:9d:ae:9d:54:
9b:05:c2:a1:c9:0f:9c:ea:27:5d:0d:c1:6a:ab:88:
ea:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0F:38:E9:E3:C6:7C:6A:78:9C:21:2F:BF:B9:42:DF:20:FF:1E:9A
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7d:79:8d:85:f3:d0:a9:db:1c:84:cf:31:f6:2c:c4:1a:90:
49:e2:6d:ea:d0:02:32:e0:0a:52:30:96:db:7a:54:af:d1:df:
b9:80:a4:93:92:ff:d8:c7:4e:6c:75:4c:58:e3:7b:e2:b0:b5:
d5:eb:fb:c4:2f:bd:69:60:67:c9:31:02:ad:10:32:ab:9e:5b:
17:30:15:c7:58:75:ee:94:0e:57:2f:aa:9c:35:2d:26:f9:d4:
c1:db:41:8b:19:10:cd:26:22:b2:d5:7f:d7:4f:c8:81:2a:d0:
40:47:9d:22:45:55:a6:f0:b7:23:f8:5d:7b:1f:7a:a6:99:71:
c5:c1:ba:d9:af:03:66:d5:ca:bf:3b:d1:d8:02:71:ab:31:cc:
77:15:73:ea:95:c0:d9:66:97:72:15:cf:a3:36:75:ae:6a:fa:
e6:2e:a5:49:0a:0d:71:be:9f:fd:07:11:2e:60:01:46:df:12:
4f:eb:7c:67:30:41:c1:9a:88:51:09:6b:c3:60:31:60:bb:97:
25:88:5d:bd:0c:86:33:12:69:d4:77:cc:9b:c0:19:15:08:bb:
66:72:51:12:bb:cc:5c:7c:15:9d:79:3f:10:72:13:7e:3a:bb:
4e:39:57:9b:a0:08:d6:1e:21:16:55:40:97:96:4e:2a:af:4a:
a6:95:95:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:23 2025 by rpki-client