Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
File: aDCZAOZItlowenhgECv3ixb1XXU.mft (raw, json)
Hash identifier: B6HBxJdtEBzsanJDbA1FRsbT0zI9mB8YubPZ1Y1B6IM=
Subject key identifier: 96:77:8C:14:00:75:48:82:FF:90:D9:12:7B:97:32:55:76:B5:01:00
Authority key identifier: 68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
Certificate issuer: /CN=68309900e648b65a307a7860102bf78b16f55d75
Certificate serial: 0194BC3C1AFEAD5FF2CF80A34E39468F140F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
Manifest number: 88
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: MyHgwE9JQ37sKu_CcRwNe642FMI.roa (hash: UWTUq6zuuwDHpYw/C8xNP37TF6tAxhLymuOUDHs6DJk=)
2: aDCZAOZItlowenhgECv3ixb1XXU.crl (hash: coLQSkKOwQOWxGK+j2JqbttqYM+/WTCG7JkAtK9uKPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1a:fe:ad:5f:f2:cf:80:a3:4e:39:46:8f:14:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68309900e648b65a307a7860102bf78b16f55d75
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=96778c1400754882ff90d9127b97325576b50100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:1d:f2:5c:53:15:ae:bb:7d:24:a6:fd:b6:b4:
01:a5:46:bd:a9:9f:12:07:1e:8c:24:a6:0a:9a:2a:
e6:09:b1:c3:71:4e:d8:0d:72:9a:99:e5:b9:93:48:
e9:10:35:e5:f4:f0:88:8a:ac:67:1e:9e:4f:f7:a2:
8e:c0:c9:69:17:79:f4:46:c0:26:d4:d8:b9:24:f3:
e8:f0:47:07:c5:43:b8:f5:06:77:a2:73:07:f0:c2:
27:4f:17:41:f4:b7:1b:5b:4f:0f:4c:d6:b1:55:fb:
42:48:e9:58:4b:74:a7:7c:10:37:8c:8b:ba:fa:28:
5a:d4:09:19:b9:77:7d:a8:ca:a5:08:00:75:7e:3c:
72:af:a2:ed:8d:cd:57:a4:4b:1e:82:1e:0f:ac:67:
3f:87:c5:58:aa:7b:52:75:1e:47:5d:40:bd:5b:10:
de:0d:d4:ec:94:2e:21:e1:b9:dd:cd:ec:13:ce:d2:
d0:98:c9:f7:3c:ef:33:92:dd:c8:44:aa:df:97:93:
93:c0:8c:1e:74:d8:e7:ee:3f:d8:8d:6f:d3:f4:89:
73:bc:83:11:b3:6a:9c:98:cb:03:b9:c7:8c:52:f0:
1c:1e:a3:43:d4:7b:12:18:50:9d:36:bf:f8:b9:c6:
44:12:1b:52:5d:c3:d6:30:94:ab:fb:0e:0b:9e:73:
fd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:77:8C:14:00:75:48:82:FF:90:D9:12:7B:97:32:55:76:B5:01:00
X509v3 Authority Key Identifier:
keyid:68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:32:13:7b:9e:45:dd:51:6b:16:ce:98:49:3a:c1:bb:5a:cb:
db:b3:ea:3e:22:f9:35:79:0b:92:98:23:5b:4c:88:4d:47:bc:
bf:8e:2c:b6:6c:97:f8:f8:36:e2:5d:4f:aa:3b:44:fc:d3:e8:
d5:50:de:2d:51:13:07:58:18:33:bf:84:b0:a3:9b:8f:92:4a:
ac:cf:3b:fb:0a:08:ad:95:23:3e:ec:4d:33:7f:97:ad:94:c0:
eb:01:0c:2d:c6:ac:06:58:6e:91:16:c9:a6:9f:78:6d:ac:5f:
70:58:67:e1:69:42:7c:e7:39:eb:d4:f4:73:c7:8f:6e:fe:9d:
5c:25:e5:0a:fa:c4:57:9e:12:c1:ca:12:f7:96:4e:cc:af:ab:
1a:79:8f:cb:82:e9:3b:d6:3b:aa:b2:f5:ea:e7:7b:73:76:56:
24:a3:8e:a6:e8:d9:2f:d9:59:60:6a:2b:01:70:7a:10:7c:4d:
17:46:6c:63:65:52:a1:bb:eb:2c:25:58:fa:21:1b:5f:c9:32:
80:f0:08:5a:2d:0d:69:7a:3f:21:49:39:90:d0:3a:7f:22:01:
d9:13:f4:39:80:8f:9b:a3:4d:ce:0d:d7:0a:f1:0e:8d:f2:01:
bf:6d:cf:df:9b:2e:86:0b:b1:a4:7c:b7:71:72:e5:ec:64:a3:
3e:b1:00:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:17:56 2025 by rpki-client