Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File: AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier: SLBAV2Rck9W2kISA/VfM7fY8rzjMj+SOBBt/IaJ45V8=
Subject key identifier: 87:E0:00:4E:B1:03:03:15:7F:22:11:74:00:85:27:6A:C6:94:53:86
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial: 0194BCA9B9F59C912D21FC29CD5156D494D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number: 0748
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: +WXNjF0wcsgs7NOKqH276cVBxtZAUOBaUcTSxJHQuN4=)
2: nPx-Za7VbY-Ebikh4E82FJ056JY.roa (hash: LJDA3QrsDqYUIaZfv0OhNsMkG1d6gSL2JKRepz1di6E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b9:f5:9c:91:2d:21:fc:29:cd:51:56:d4:94:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=87e0004eb10303157f2211740085276ac6945386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:b9:82:c2:1d:02:65:f8:2f:bb:5f:a8:ea:
ae:ee:43:00:f5:74:d9:bc:6b:1f:3f:8e:b3:79:f3:
dd:fe:88:ab:80:46:5b:85:fe:64:bf:0e:6c:05:f4:
73:f3:10:62:fa:17:d4:e9:86:28:46:8d:8f:96:64:
ac:ac:19:4c:e2:5a:d5:53:5c:27:60:c6:e3:70:98:
1c:c3:17:a3:7d:6d:c5:07:a3:04:af:cf:d2:9f:81:
65:8f:cc:cc:42:60:8d:c5:91:d9:79:66:a1:fe:6f:
77:6c:ca:ca:66:7a:b7:d2:47:14:c9:6d:cd:ed:ef:
51:38:2a:bf:ce:33:49:ae:00:ac:04:aa:2a:90:82:
61:84:e0:28:c4:6a:4f:71:3c:5d:9e:26:23:4a:81:
a1:0c:ff:1b:44:ba:75:76:c5:d2:3f:4d:ec:b6:0e:
ab:e5:3d:c5:98:91:0e:57:cc:9d:6c:98:f2:02:75:
7b:16:ef:3b:6c:ab:d6:10:f3:b1:d3:6c:a3:90:55:
6a:87:98:d9:35:c5:de:2a:5a:a4:35:56:8b:b8:4d:
b9:02:18:08:62:ea:1b:01:02:ad:32:d5:9d:65:cd:
71:ed:f6:7b:bb:1d:86:31:08:3b:73:33:46:8c:33:
b7:f7:7c:07:8d:d7:80:82:07:5a:7b:a3:ea:32:42:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E0:00:4E:B1:03:03:15:7F:22:11:74:00:85:27:6A:C6:94:53:86
X509v3 Authority Key Identifier:
keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a7:8b:c7:3a:17:70:01:8f:07:b9:95:cb:78:f3:f4:ca:79:
49:c3:f3:05:66:9a:d3:55:6b:02:0b:cb:41:46:60:1c:ab:a9:
01:68:73:36:a9:f8:a9:e5:9d:88:d0:20:33:a2:b7:bc:c0:74:
29:87:23:a6:8a:65:70:9f:db:81:89:78:c0:1c:82:99:b8:cb:
be:06:06:6f:51:b5:a3:be:5f:17:2b:be:7a:39:8f:ad:39:96:
8c:e1:0c:b7:26:a5:a5:af:39:0e:f9:4c:7a:9d:67:98:e0:cc:
b5:4c:a0:a3:df:08:40:be:27:b2:81:21:44:61:8b:9c:60:e7:
9b:57:7f:a3:06:f5:ae:96:ac:5e:bc:44:97:d2:95:be:0c:e7:
cb:95:c4:4a:cc:72:14:27:16:24:e6:12:d8:3e:72:7d:e2:97:
b5:5f:6c:b9:75:cb:96:da:81:dd:1f:8b:ee:b2:6e:ca:f8:f0:
b1:ed:9e:15:2f:a6:b3:e2:d3:ec:04:d9:d4:04:7d:73:5a:da:
9b:d8:36:45:b2:1f:90:60:4b:5e:6a:59:ba:d2:e8:bd:6a:6b:
56:bb:da:25:71:cd:44:17:c6:f0:6e:17:f1:fb:24:8d:41:0d:
67:8c:34:c0:34:a2:9c:ba:39:de:c6:4e:22:b5:a5:76:9e:86:
5e:0c:f0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:48 2025 by rpki-client