Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier: gVgoKnhN4jHHWWzGJ/7Jr8d7Nn70aAstb2h0KjaYXuQ=
Subject key identifier: AF:38:D7:9B:A8:61:7A:3C:30:6D:3A:31:4F:67:64:61:24:95:25:DF
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 0194BC050E46A94DD5272F21FD3A24FA5C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: wSte8lPRfpdBVbEyUiQ350EXfPDhKkOmvTSmy+SAqGg=)
2: d7Ak7uNc6zjZuiBATGf-UCP3x8I.roa (hash: nYxY8j7ezJA29gwV9RA7AxL4/U9w5nA29rCzIVbR+bk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0e:46:a9:4d:d5:27:2f:21:fd:3a:24:fa:5c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=af38d79ba8617a3c306d3a314f676461249525df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:da:ed:ec:e2:99:f0:57:35:cf:95:a1:5a:50:
84:7d:e0:f1:26:99:ac:e2:4e:87:a5:f9:2f:1c:46:
bf:bb:35:6b:16:e8:66:c8:2f:37:80:7f:b2:16:d8:
6f:ca:77:6c:f1:42:44:a0:13:cc:0d:af:8f:37:1c:
4a:8e:27:06:c6:24:a8:00:97:fe:80:94:7c:6b:79:
e8:51:d4:4d:4d:77:c2:07:df:13:c6:d8:13:f2:24:
f1:02:1b:44:87:72:e6:4f:df:5d:26:c0:f3:b2:62:
cb:83:78:48:af:2e:c1:ad:61:4b:77:33:d3:53:d0:
14:be:26:df:53:89:39:c6:bf:b8:72:9a:d4:8f:b7:
23:73:28:a8:1c:77:1a:81:8c:fd:7f:7c:83:af:d1:
e3:14:b4:26:90:b1:3a:86:70:c7:39:fd:81:cb:5b:
1e:2e:9c:28:e9:1e:16:37:b7:c4:5b:2a:44:93:18:
d2:6f:ef:10:fe:a3:bb:47:cf:05:a0:08:20:e5:c1:
27:78:10:75:f3:40:80:20:4d:db:fa:3b:64:5b:7d:
74:af:1c:cc:43:3e:fc:3c:fc:e2:cc:a9:91:98:4d:
9f:75:b1:b5:12:0c:7c:4b:9a:8a:d1:27:05:89:f0:
db:9c:7d:72:20:ce:78:ad:6c:af:d6:97:90:a9:44:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:38:D7:9B:A8:61:7A:3C:30:6D:3A:31:4F:67:64:61:24:95:25:DF
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b3:e7:99:3f:14:54:f4:9e:b1:0d:a0:59:cb:0c:af:58:5a:
dd:d2:14:c5:bf:c4:f3:c6:06:9c:31:17:fc:53:fc:fa:84:15:
17:72:5c:1f:3c:16:65:e4:c7:21:c4:96:b3:e5:24:08:bc:e0:
20:a2:1f:03:3a:35:77:71:fa:ff:94:26:7a:e3:22:f9:ec:50:
6f:d8:77:71:0d:30:0f:e6:09:68:ca:ec:e5:8f:b8:02:ad:97:
39:2f:7f:15:d2:9d:32:4e:b4:e5:ca:40:1b:3c:5e:d0:32:c3:
5e:9a:d0:96:be:67:eb:fd:0a:87:f6:c3:ba:61:bc:56:b3:4c:
ee:80:b1:29:f6:98:4d:b7:38:05:af:67:0f:b7:5a:16:02:06:
a7:2f:70:34:19:01:71:b7:5b:75:f0:28:84:36:fb:49:69:ae:
c1:89:3b:f0:05:5a:3f:01:7b:95:08:d7:f0:31:b9:30:26:e9:
de:f4:ae:a3:1b:53:27:6e:17:4a:90:67:84:71:db:80:a1:4f:
46:81:f4:7d:09:26:c0:90:1b:e6:49:8f:e7:1b:c8:2b:b5:a3:
15:f6:db:f3:6d:f5:bd:00:16:f3:2e:a9:64:24:ba:75:65:3e:
54:7c:bf:e4:15:2d:2c:b4:63:01:d0:9a:a2:84:ec:58:97:cd:
55:be:0d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:54 2025 by rpki-client