Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
File: Ahs-o17f3ROMFVBtdKdgIt03aUs.mft (raw, json)
Hash identifier: SsP0UuGezxYA6F2NbRXIA9DWcA1kh2pqpA+cLp1fbKc=
Subject key identifier: 62:71:94:48:0E:41:9C:57:20:46:08:DD:D6:57:25:A0:36:F9:54:32
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial: 0194BC3C13A4AB1E6131CE31F534DF683F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: Ahs-o17f3ROMFVBtdKdgIt03aUs.crl (hash: OiGQ3X9THwWvN4Jur2oePW6pk1MkvUFMYPIHjUx0KHI=)
2: KAFC3cLT9QH5ScoLRsIonvwUhMU.roa (hash: whbGIDYtnScT7kdeeSbgI7fHOy+PdfaxJL9lQqTD7kk=)
3: aFjBtMgAkCdur0LAp1zKSd39ajk.roa (hash: k5sQSrUZApP+C12qAI5rWT2beBv2HXfS7efknu8qI8M=)
4: fc1Tc2Vdh2udhGPhrIhiUsNRmh8.roa (hash: an6cVXKMyV249udKkEMio/99yuvp5X9umnLVJSDoDVM=)
5: keIeKvMj5GFcFpqn4YnewTjX5AI.roa (hash: LybLvk7YVa5Nzz7hllr9jrHmTPWaVPacnhSof9pKAqc=)
6: n6Wyt3faNKWbYMKkn5PEP-ye3uo.roa (hash: dY4BYFMUjOYkYHFpRXEolqHG+4jJetToXOTWdXYn9Ao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:13:a4:ab:1e:61:31:ce:31:f5:34:df:68:3f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=627194480e419c57204608ddd65725a036f95432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:bb:b6:98:6b:be:e3:82:0c:c6:46:65:fa:
40:97:c0:a3:0b:e5:31:66:be:5c:52:eb:72:ff:ca:
03:36:67:1f:df:8f:a3:6e:b7:da:99:fa:4e:ae:00:
65:2c:45:f7:63:19:75:2e:fe:30:2d:db:42:e2:48:
f6:5e:30:4d:5f:9e:65:38:72:77:da:1f:14:03:14:
53:ea:b8:92:3c:c0:10:b8:f1:da:10:df:0c:5c:aa:
18:f6:0f:d6:19:61:8e:3b:42:bb:db:51:d3:87:2a:
7b:67:eb:42:34:b5:51:bb:45:d6:c1:71:5c:9e:f8:
66:b7:f6:06:fe:9e:6c:fe:79:0e:6c:3b:56:5b:2a:
1b:54:31:88:9a:d7:2d:54:38:6d:09:fb:5c:0a:a9:
41:3a:db:28:d4:b6:58:07:2b:f3:f6:3e:da:7d:9d:
eb:50:66:59:a5:e5:c8:b8:d6:0d:4c:6b:73:9a:e2:
3f:6a:6c:32:db:7f:4d:62:e6:4f:25:9c:bd:63:54:
c1:fb:26:95:48:39:0a:a2:92:16:22:9c:81:95:ba:
8e:4c:68:92:e3:01:be:10:96:8f:2b:93:16:9e:a8:
0b:84:b5:84:0e:05:d1:bb:06:42:2a:ff:1b:a3:c1:
ad:6e:6a:4b:c8:46:72:b4:a2:dd:8b:49:0b:a7:e9:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:71:94:48:0E:41:9C:57:20:46:08:DD:D6:57:25:A0:36:F9:54:32
X509v3 Authority Key Identifier:
keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c7:ad:b5:1b:81:27:98:59:dd:a2:af:76:57:d2:d6:a3:82:
ed:c9:f3:f3:d6:77:d0:b7:3d:13:9c:27:2a:88:ea:0b:4a:6b:
dc:7d:94:94:04:06:0c:77:df:73:5d:a7:fc:23:6e:ec:f5:bb:
33:36:fe:79:85:ef:9f:59:34:58:25:dd:d8:f5:bc:90:aa:78:
48:ad:1f:91:89:3b:ff:0d:28:63:2a:9c:ab:04:6b:58:32:54:
20:c4:06:92:0b:98:e8:96:36:be:31:98:4a:7b:e6:30:ca:96:
26:26:3f:22:08:8f:b9:f8:a5:19:37:82:98:1f:21:e4:6b:e8:
6a:2c:02:bb:70:0d:0c:45:36:de:84:ad:67:18:8c:1e:08:0a:
7c:f0:a7:71:75:76:af:d1:48:06:58:8a:a8:05:1f:c5:ef:25:
0d:52:fd:5b:e2:4b:73:77:c5:c4:8a:0f:cf:ec:45:78:cb:61:
9d:b7:bb:cf:71:13:d5:04:5e:36:5e:82:01:d0:43:3f:8e:fc:
f0:cc:b6:a8:b1:35:f0:d6:41:7d:ea:63:73:9c:07:eb:5e:b1:
ac:c7:ef:42:d4:2a:d6:de:b7:31:9b:94:82:a9:79:b8:e0:ee:
eb:4d:81:5f:ab:c2:e4:9f:81:66:c0:3a:8c:d6:ac:aa:6b:d7:
9e:36:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:46 2025 by rpki-client