Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: vO5X6ciNwdVeeUFXl+1mBj9yKBvSkBvM2ER0i9CNIak=
Subject key identifier: 39:C6:43:F9:A1:47:94:D1:A6:06:F4:C2:F2:38:1F:72:D6:74:DA:AF
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 0194BC05257EE85A77FC52F570D0674FAD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0883
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: 81qA8bIdedGfQ55FlkICJ3sAQ16LBVyYjm8gFU7G0n8=)
2: oNzr7e9N0_nB7NG8uVVH1YFW8SA.roa (hash: E5UVvjB7YIozDhZ03PLtgPckm/pTCCT/ml1aJ8kENsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:25:7e:e8:5a:77:fc:52:f5:70:d0:67:4f:ad:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=39c643f9a14794d1a606f4c2f2381f72d674daaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:e1:43:f4:70:3d:4b:0a:d2:8c:b1:f9:db:
7a:a5:17:e5:93:01:c8:a5:c7:27:2e:82:04:c6:58:
63:cd:8f:3f:4f:0b:d6:cf:3f:15:98:4c:dc:99:39:
31:c9:6c:ef:39:2d:d4:8f:05:e0:a4:33:10:a2:61:
24:e8:81:5a:21:93:3e:0d:f6:51:4d:9c:74:b0:7d:
78:2a:b7:ff:4d:b5:e2:5c:3a:f4:2b:58:ec:60:38:
d6:2f:e1:9b:22:c9:89:88:36:27:5a:aa:26:08:9e:
68:1c:96:2d:4e:bb:11:64:a3:1b:04:c7:04:08:1e:
40:58:a3:9e:33:5a:66:85:5a:f8:51:e7:1d:95:47:
6b:50:63:73:f9:eb:31:51:b1:d6:35:16:9b:85:75:
00:c1:2e:43:0e:76:b6:c6:7f:93:14:3e:9e:6f:ad:
e2:65:44:bb:d6:5f:28:00:10:fb:eb:48:31:ba:29:
66:17:4c:8c:b5:34:9d:6c:b0:09:3b:db:be:f4:aa:
dc:30:23:61:8f:ac:d2:6e:55:41:6d:a2:2a:80:7e:
dd:15:f7:d3:35:a9:42:3d:74:4d:c1:73:7a:17:49:
d3:6b:e8:f2:c2:20:8f:46:7b:fc:82:bd:a0:3d:d5:
6b:5a:3b:fa:a2:e5:bb:56:4f:20:89:23:bf:65:ca:
72:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C6:43:F9:A1:47:94:D1:A6:06:F4:C2:F2:38:1F:72:D6:74:DA:AF
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:63:33:42:27:b6:7c:8b:36:32:8b:08:f9:08:fa:8b:90:23:
77:a0:d9:28:9e:3a:05:5e:17:06:ee:81:1f:86:64:ec:ff:6c:
04:35:cc:17:b8:24:cf:7e:4b:21:58:1d:d1:85:f9:3b:aa:31:
29:a4:eb:f7:e4:48:c1:88:ba:59:1f:ec:14:59:ce:56:b6:44:
7b:62:e5:dd:65:22:50:fb:e4:e1:f7:32:cf:7a:ed:57:0b:e6:
8f:cc:4f:07:34:17:50:f4:20:44:33:7b:6a:79:f1:b2:01:66:
9b:ca:d8:04:7d:de:c0:a9:fb:39:18:bc:57:b2:5f:ab:6c:01:
5b:78:80:3f:b8:5e:f5:1f:5c:aa:aa:4c:6a:2f:aa:d9:d8:68:
6a:35:c3:eb:6a:47:23:d4:39:be:e8:e7:0c:a1:66:34:c4:ca:
75:0e:3e:4d:82:5f:94:e6:68:40:53:f6:5c:c3:b6:87:5d:de:
48:1f:4f:89:8a:60:7c:9a:fb:fb:f0:39:76:b3:ea:4d:08:ab:
3d:78:aa:47:42:94:47:24:c9:4b:c9:6a:1b:9c:1b:83:f5:98:
6a:0a:53:93:7d:e5:6b:e3:06:99:50:2f:c6:a1:00:19:02:04:
d2:e9:05:6b:9d:f8:86:84:6a:62:0b:f2:2c:c5:78:42:ff:40:
f8:ab:93:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:49 2025 by rpki-client