Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier: 9cnZTEdZgcJfyzl2KVr/X6PxVlHunGhRPpGsHjEtw9I=
Subject key identifier: AA:A9:65:62:F6:DD:6D:43:97:D3:59:70:E7:D5:94:9D:01:E3:D2:8A
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 0194BBCF00B15320AB8468D726008919E8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: BAFnA8E_-fRHFvJR66V5dNg4Xzc.roa (hash: zli04q+UUFDZ6LvNlKF4wEZntdZy+cQL9il9Oh4rSZo=)
2: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: x7uESUvXPXGfifFS0dYslKBKv9f46oT/bhXD9NuUmlc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:00:b1:53:20:ab:84:68:d7:26:00:89:19:e8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=aaa96562f6dd6d4397d35970e7d5949d01e3d28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:ba:7e:de:5a:0c:3c:b8:12:1c:1c:91:ee:
23:46:7b:11:de:f4:30:e4:a6:2a:56:43:74:9d:69:
e1:14:9f:28:73:50:6c:58:5c:bc:45:74:c9:92:b0:
65:4f:cc:0f:97:1a:9b:30:6d:60:af:e6:ea:1e:78:
12:50:bf:75:a7:72:8c:f1:c9:fb:cf:41:6e:c3:02:
96:bf:bf:a7:8d:37:08:b4:63:67:1b:f5:7a:e1:22:
d4:93:a4:6f:5e:ff:29:4c:14:98:17:b1:d7:86:6c:
ac:64:a0:6f:45:f7:8e:87:dd:03:3c:ef:ec:ab:f5:
34:46:eb:d8:a4:f6:35:87:b6:d4:93:e5:ae:7c:07:
27:47:4e:a4:3d:ed:91:63:9d:27:5e:98:04:e1:f8:
a7:16:74:55:9a:bc:09:87:5f:77:2b:61:52:8d:b4:
e7:6c:8e:34:e4:46:b4:21:bd:d8:ae:1d:a1:fe:42:
35:fc:b0:ea:4e:81:ad:04:b8:af:aa:aa:2f:86:81:
0a:dc:73:91:6c:4c:72:98:91:8b:c5:ed:9d:d0:bb:
f9:40:f3:f2:39:f4:f7:79:e0:64:49:7d:12:8d:bc:
e7:93:a2:fc:c9:40:c8:fa:04:95:0c:88:a6:ca:e7:
e5:de:2e:30:54:05:80:be:10:66:86:ec:14:05:86:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A9:65:62:F6:DD:6D:43:97:D3:59:70:E7:D5:94:9D:01:E3:D2:8A
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e6:96:1f:9b:f9:89:0f:69:93:bd:52:72:e6:92:3f:b2:b0:
51:f3:a9:34:7e:53:f2:af:58:f0:6a:33:02:8e:89:26:85:00:
3c:7d:7a:da:d2:ff:ad:a1:5e:d3:1d:36:81:17:31:49:90:76:
b8:89:8a:01:b6:41:12:8b:2f:34:8c:8e:72:ec:e2:a0:dd:9c:
e4:ea:4f:d9:89:05:bb:e3:f7:af:52:02:2a:92:98:c7:17:16:
1e:41:e6:71:b2:b3:ea:af:cc:b9:82:a4:02:5b:63:4f:a9:53:
fd:50:40:f8:5d:e6:16:26:6c:22:8e:8a:5d:82:81:84:37:5a:
d3:61:f4:c9:e7:c9:4a:2b:dd:e5:cc:28:d7:95:64:de:da:71:
7b:c2:43:be:a2:c1:a5:0a:a8:0e:ea:ef:6d:55:ea:78:05:c8:
91:1c:c3:7a:8e:a2:b9:be:35:c5:0b:89:10:2f:3d:29:ea:0e:
5c:cd:a9:a1:bd:52:a0:74:cb:49:c3:69:9e:c3:dc:31:49:4a:
fe:9b:f1:ae:35:6e:85:12:20:89:19:a2:09:ad:2e:da:ba:08:
94:fa:bf:13:5b:0d:0b:87:77:a6:f2:4e:1b:5e:bc:67:28:b4:
18:78:7b:7e:10:bf:a4:7a:18:09:ca:5b:b8:41:de:ed:27:3e:
bc:cf:86:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:14 2025 by rpki-client