Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: sboIn/QQx34ietQFlnlundycx9tCS1QeaKno5Ye+aFU=
Subject key identifier: 0D:BE:89:AF:96:BF:9E:B7:73:5F:A1:4F:57:A4:CB:99:8A:2A:DD:B4
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 0194BBCEFA83150BD19A3691A77D102D06A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: 0ya4sfz42L60TJ0bcAyUqtENC28.roa (hash: 8fugK/0QqnnO0V3k6nBzfLlx/GUIRpJ1ovogrf7zS2I=)
2: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: dmODcgXHAkn+/NiclEcNHQwOlUyA8JC+EH9AE6f3nuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fa:83:15:0b:d1:9a:36:91:a7:7d:10:2d:06:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=0dbe89af96bf9eb7735fa14f57a4cb998a2addb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:ed:55:2f:cb:7d:28:79:b2:f0:c4:90:7d:
61:8d:77:6f:22:49:cd:48:ce:af:b3:d1:be:b0:a7:
3d:ac:a9:64:c9:1c:11:63:ae:f5:d7:4f:e8:60:82:
06:97:76:9f:9e:3a:48:ea:56:fc:a7:fe:f7:f4:e0:
51:af:d3:33:0a:c1:b9:59:1f:f0:f1:7e:67:23:35:
e3:06:82:89:96:c7:ba:b7:2d:a6:04:dc:37:f6:d4:
66:72:8d:66:52:16:e6:1b:93:71:cc:9c:2d:79:da:
47:64:44:6e:d6:43:05:79:4c:55:4c:ae:68:65:27:
12:8d:98:1a:d8:6f:7c:17:16:2f:f5:f1:30:db:c7:
23:75:3f:47:91:eb:5e:90:65:2d:a0:d8:c0:a3:3e:
61:46:8d:d2:fa:7f:ab:41:f6:29:1b:e5:d3:47:e1:
5b:99:0a:6a:56:e9:a2:0f:3a:3a:ff:d6:a9:1f:47:
a0:fa:c7:1e:60:03:1a:63:eb:b1:2c:fb:99:7c:a4:
d6:ef:8c:a2:69:9f:c1:76:bb:db:a6:4e:18:d2:84:
0e:cf:c0:ce:f3:c0:00:a9:9a:e5:3a:9b:79:33:fe:
23:b2:6a:4c:a0:20:4f:4c:bb:07:59:87:f8:eb:a3:
cf:d6:ee:a1:e2:9a:b8:79:44:f2:1c:92:a9:ba:8a:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BE:89:AF:96:BF:9E:B7:73:5F:A1:4F:57:A4:CB:99:8A:2A:DD:B4
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:dc:6b:67:03:30:d3:5c:75:4f:b9:4c:1a:78:6a:93:7d:13:
7e:a4:53:65:a0:0e:bb:1c:1f:88:d2:d7:71:09:af:1a:9a:52:
ac:04:d5:ad:e4:55:53:c7:5d:b6:82:54:d6:b4:29:fa:13:ed:
f4:88:33:c3:13:3b:a1:04:76:73:c3:cd:70:5f:19:e7:46:a0:
3d:ea:7d:1b:61:56:18:2a:f5:3e:fb:90:c0:79:dd:78:9b:22:
d4:94:bd:b9:1a:a8:8a:70:dc:75:89:f2:ab:b5:18:e4:33:86:
6b:b5:ec:42:a7:e3:53:c8:e9:42:e2:f5:4e:ae:dd:92:90:55:
69:bc:85:46:06:85:f3:bc:d9:8a:80:d1:9c:36:6a:a6:80:42:
f7:80:77:ca:a4:4a:a8:e5:11:6d:3c:a6:0e:33:10:50:12:09:
71:a7:4d:74:18:5e:71:08:bc:8e:89:00:7c:64:34:90:78:7c:
8c:7f:b5:8f:d3:6f:6a:2a:43:2c:b5:4d:8c:28:63:82:16:21:
89:88:4e:bc:9e:d7:30:13:a9:1b:d0:a8:fb:fe:7b:21:4b:13:
fd:45:8e:e4:34:5b:c3:ee:bf:3d:3e:77:b1:1a:d7:fa:ec:38:
57:c0:cb:94:53:58:e2:ce:3d:e7:ed:ab:53:35:53:91:41:55:
4a:13:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:25:57 2025 by rpki-client