Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
File: A-pQioW8c6mqogOop7r5wWLm82w.mft (raw, json)
Hash identifier: oz6Ut8bmrL0PR5Ox/OfL3/r8j8RrxvkOmS/iMI9085k=
Subject key identifier: 8F:CB:78:97:CC:6E:88:D4:44:28:3D:D7:67:AE:08:A7:12:99:01:6E
Authority key identifier: 03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
Certificate issuer: /CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Certificate serial: 0194BCE08BFAED5FCEF4F5B0ACC44F84C6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
Manifest number: 059C
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: 2j9Y51xwRYelF6JrKcKDFxJ1u_0.roa (hash: 0/wxjfgZFvKq0jXNMFirhtTQajhUkEHAhxXEqfHBgNk=)
2: A-pQioW8c6mqogOop7r5wWLm82w.crl (hash: ZEJWOxtTbLtnNxSAzSGDDI5MmAvM12HI5+lknn18JSc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8b:fa:ed:5f:ce:f4:f5:b0:ac:c4:4f:84:c6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=8fcb7897cc6e88d444283dd767ae08a71299016e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:a3:9b:7e:08:40:cf:81:f2:91:73:ce:69:
f9:59:96:88:f7:3f:aa:26:a9:39:24:ec:8e:e2:dd:
93:ed:5d:3b:d2:20:9b:5c:c5:a4:00:28:14:3d:46:
bd:71:ad:aa:1b:b0:10:03:a6:7c:c8:25:49:86:ee:
ab:b5:bc:b2:e2:e3:65:92:6a:50:be:ab:f2:85:ea:
d3:58:57:02:9d:7e:b4:57:1a:3b:4c:d6:bd:02:da:
69:c7:a6:dc:84:2b:87:21:a4:a0:32:06:ea:51:91:
83:2f:3f:97:cf:96:61:3f:63:32:08:6d:eb:9d:14:
1b:88:e7:7e:56:f7:4b:d1:15:82:d6:93:d7:2b:d2:
37:23:eb:a8:78:84:0b:96:85:79:a7:c9:87:b7:56:
a1:44:1c:c2:c6:88:e4:6b:67:ce:ef:ac:57:54:d5:
b1:97:22:55:28:15:8f:33:7f:56:bc:c3:f7:b8:1c:
1f:71:90:29:4d:63:7c:1c:d0:e5:38:0f:72:b0:50:
6e:7d:c2:d1:70:57:b3:15:a7:af:78:ba:a3:cb:fb:
63:a0:d1:4f:f4:c6:76:77:af:6e:96:e7:18:ce:4a:
ad:01:75:2b:09:45:e9:4a:63:b3:9d:9e:82:7a:cc:
7d:92:40:5b:5f:8b:cf:19:f1:63:7b:3c:da:6e:51:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CB:78:97:CC:6E:88:D4:44:28:3D:D7:67:AE:08:A7:12:99:01:6E
X509v3 Authority Key Identifier:
keyid:03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:67:5b:8c:ad:3a:af:ca:f6:45:b3:c6:7d:d8:c9:ed:bc:cb:
d3:3b:0b:96:60:31:cf:7f:8c:15:91:45:8c:5e:1c:39:b3:e1:
91:1e:a9:3a:e8:1e:e3:4e:69:21:a1:bd:d5:cd:a4:43:da:5d:
be:c8:d8:cd:7c:95:0c:55:ee:86:9b:5f:2f:b0:4f:2d:d4:48:
f5:55:9d:f1:ff:24:b6:c9:5f:e3:b3:0d:2d:b7:29:8e:19:3c:
9e:53:24:22:4b:df:47:a8:b2:6d:19:c4:4c:b8:bc:d2:c5:31:
a1:30:77:fd:aa:79:13:f4:fd:68:a0:17:6d:ad:e7:b5:40:e9:
f3:30:b7:99:bf:17:a3:b2:e2:5a:e4:5d:dd:4d:e8:8e:dd:d8:
f9:be:c2:79:c6:9f:dc:dd:ae:c1:dc:be:c8:d2:11:2a:3c:41:
18:ba:76:8d:46:8b:4b:5e:82:5d:df:d5:3a:d6:40:29:9c:ff:
46:96:2f:0f:e0:13:28:61:79:03:6b:95:3a:30:ef:2c:e5:2f:
c7:f8:91:9e:d9:e0:e1:45:65:45:40:85:fa:76:05:42:e0:4b:
a8:82:2e:7d:ab:cb:60:bd:23:44:50:f8:6c:4a:bb:8a:0a:8c:
41:87:f7:c0:ea:16:8a:79:c6:2f:6f:eb:bd:ae:99:8c:df:5a:
aa:27:0f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:25:00 2025 by rpki-client