Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
File: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft (raw, json)
Hash identifier: 6oLGEvIiM60Ku9dv3xT3mEcjf5FsF23h4OC2cRPlhtk=
Subject key identifier: 90:F7:DD:BE:B3:F4:4D:F5:E3:29:27:B3:3D:53:93:80:33:8C:7F:6D
Authority key identifier: 02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA
Certificate issuer: /CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
Certificate serial: 0194BBCDC9C0DC53AE1A2FFE197D73BA0E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl (hash: h7C+0LVfXDFfUtk+JEueldKztc85eTchA/oOxLboRpk=)
2: dL5tLsAU6PWlL4weQ4Up71k3hXA.roa (hash: ZvntQMrxSDwlXP02WdClHLb+VoQxqS4KZZo3fc10HIM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c9:c0:dc:53:ae:1a:2f:fe:19:7d:73:ba:0e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=90f7ddbeb3f44df5e32927b33d539380338c7f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:b3:02:eb:aa:49:a0:17:f6:e1:1c:e4:19:
f5:71:75:ca:10:0f:7b:f7:78:88:1b:6a:e5:d4:ec:
0d:f5:eb:fe:e3:1c:b4:84:e7:44:67:35:a4:4e:9f:
d7:4a:6f:c8:ec:b1:fc:75:02:6b:af:b9:27:75:92:
74:60:e5:48:f2:74:3a:fb:01:cb:4a:ff:b3:ea:59:
60:34:9b:e2:7b:85:f3:49:35:a4:60:bb:0a:90:22:
33:9c:39:0c:d6:b1:ca:41:ba:c1:49:2e:af:54:18:
ff:f4:8e:71:02:8a:f8:70:2c:fc:87:ad:ca:03:d2:
63:4e:7a:06:8d:8e:1e:0d:66:53:55:5c:18:61:be:
8a:9d:2d:b3:68:d1:50:a3:c9:6f:9d:7f:ed:fe:f5:
5e:43:ee:8a:0c:ee:9a:0f:41:36:16:af:a0:f9:2a:
af:b6:f2:f2:9c:60:c5:49:1b:35:0c:c4:43:9b:96:
31:b1:4a:d6:f1:69:97:86:a0:23:f6:ac:d5:c9:16:
80:e0:77:86:65:65:d7:a5:74:e8:e8:79:64:02:a4:
36:f0:71:fc:05:35:22:f8:f6:fc:5e:30:ef:af:c8:
25:44:4e:c7:47:a4:0a:6d:08:6a:8c:88:9f:e4:a1:
2d:20:17:fa:fa:3b:91:1d:da:f3:c1:88:0d:89:bf:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F7:DD:BE:B3:F4:4D:F5:E3:29:27:B3:3D:53:93:80:33:8C:7F:6D
X509v3 Authority Key Identifier:
keyid:02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2b:b0:33:d7:49:89:77:cb:2c:13:e2:61:40:16:db:7f:62:
75:5a:65:7c:aa:24:e0:37:ec:a4:54:6f:ba:cb:fc:0c:5d:48:
51:85:86:5c:60:24:4a:b5:d2:fb:75:09:f7:56:f4:79:3b:3f:
c3:5a:16:fd:92:1f:e6:f8:86:45:95:8b:37:a2:89:04:53:03:
eb:9b:0e:dc:b9:73:bf:a7:7c:91:0b:c5:e5:d1:fe:9a:83:2c:
51:83:6d:1e:0f:f7:fe:f2:12:18:42:49:d2:ea:31:a3:f9:a9:
b4:99:d0:88:43:9e:ee:18:b6:9a:59:03:15:68:1b:07:42:0a:
0a:38:31:d7:d6:4d:bc:5c:18:1b:6d:99:e5:d9:63:d0:a6:a6:
c9:c0:73:49:94:ba:b9:5e:e9:f6:ec:10:42:12:80:9a:7b:bf:
52:64:88:a4:9d:3c:14:1f:f4:ee:0e:71:3a:de:ae:2c:f5:02:
fd:25:75:3c:44:01:47:88:f2:eb:60:3e:a3:88:63:65:b9:21:
1a:a1:84:e6:34:56:1e:00:20:d1:ff:aa:fb:f7:c2:1b:03:40:
55:70:75:71:25:26:8c:d9:33:9e:89:43:e7:c0:94:dc:67:03:
41:45:74:1c:f3:5e:07:cf:6b:eb:3d:71:36:ca:2c:d0:c4:0b:
15:bf:81:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:28 2025 by rpki-client