Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier: 2P9eRRGgZaor/dmuMHNO/0aCBRECoHIGV30Yrs99+xA=
Subject key identifier: 53:12:A0:D9:0B:65:55:C7:5C:A3:6E:23:12:27:0F:4A:37:CF:23:EA
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 0194BCAA35565E68F307F50FCD2E1DB1F00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: MrrslbyOlZnmCnURpAhwh0KUEqpNTeSkDLbXh/5o5zw=)
2: lwjpFv3HgemxBJqe9gi4ArggD88.roa (hash: 7p7Zr7Ya8mUheMjW/Ww4B8S5/Cc2CZ+iZfLnhmKVtRo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:35:56:5e:68:f3:07:f5:0f:cd:2e:1d:b1:f0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=5312a0d90b6555c75ca36e2312270f4a37cf23ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:79:a7:fe:a0:fc:0c:e8:d9:ba:ca:c0:cb:
f4:08:19:c4:d6:c1:5f:56:18:4e:2f:7b:8b:4d:4b:
df:7f:9b:34:f2:fd:f8:1e:d9:57:7a:d6:57:2b:ab:
4c:cf:79:7c:85:95:a9:2e:c4:37:a0:02:e7:52:45:
f7:af:af:a0:ea:f8:bb:df:3f:da:1a:3e:c8:21:56:
30:26:ba:73:5f:a2:a8:d8:b8:f3:f5:7c:82:02:b3:
38:14:11:a2:a7:00:14:c3:93:55:e4:4a:ef:c7:98:
93:d9:41:cc:a0:b4:32:7f:00:a7:e6:56:b7:64:e1:
ef:52:8b:ae:43:49:71:ec:92:a1:12:e3:57:e9:5b:
5e:87:5b:46:8f:6c:51:e3:88:d8:0f:5b:d1:fe:73:
43:03:a1:a7:bc:60:cc:db:cc:e2:f9:87:77:6b:37:
d8:9d:28:28:73:ef:e6:31:f0:c5:3a:9e:6b:3b:3c:
af:ee:9f:d4:81:7b:da:6c:b5:f7:6f:ef:02:02:54:
be:73:ff:1b:cb:d3:41:71:df:8b:3e:87:a3:a6:4d:
68:80:ef:62:72:ba:f0:ff:aa:f5:64:69:9c:bf:8d:
63:ed:ca:58:5d:06:f0:db:06:0a:59:a6:1f:89:6d:
f0:aa:19:13:da:e2:df:77:74:27:53:66:b6:39:9e:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:12:A0:D9:0B:65:55:C7:5C:A3:6E:23:12:27:0F:4A:37:CF:23:EA
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:69:98:0c:f2:5d:ae:82:f7:d0:78:16:d2:5f:7b:7a:20:6c:
0a:c8:84:9c:cb:ae:6b:69:4b:76:d8:7d:76:79:4a:68:a7:54:
65:a0:f3:fa:d6:16:80:8f:3b:9a:c0:23:70:cd:fc:69:4e:f8:
50:a8:c0:49:b5:7c:08:38:c3:1e:b2:c0:77:d9:a8:42:de:70:
9b:5e:d6:70:5c:0f:96:d8:8c:e8:ad:d2:5b:97:7d:bd:fc:ad:
03:f6:aa:bd:c4:38:3c:3a:63:c9:5f:69:c6:4e:6b:38:1b:17:
9c:3e:0a:fa:45:4f:0d:c1:68:b2:80:fd:6f:f5:2e:75:25:ba:
10:d1:da:4c:fe:05:73:e5:8d:61:f1:57:90:f2:24:77:c3:dd:
f2:bf:5c:63:34:c4:12:9c:1e:c6:9b:a9:83:e4:6f:95:b2:2e:
83:b0:0b:e3:9d:4b:f3:ef:5a:5d:64:38:fa:a9:2e:9d:b3:aa:
be:3d:b0:3b:35:4f:f5:bf:8f:7f:6d:bb:a1:d4:99:e6:f2:ce:
d4:26:78:f9:0c:00:bd:a7:2d:a0:46:b2:8f:80:08:f6:eb:a9:
08:c1:61:f9:67:5a:91:22:31:42:72:6a:4d:13:71:78:ae:18:
5d:07:ee:c5:75:69:21:84:d4:e9:9e:92:39:8d:a6:0f:8e:dd:
eb:70:77:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:49 2025 by rpki-client