Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: NJTruzCjcy07EwLG54ib8wqnu2iusmyWLKji/dmyObY=
Subject key identifier: DC:40:67:DD:56:C4:5E:DB:6A:41:93:EA:FB:28:BA:BC:C3:82:E8:AB
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 0194BC04DD63EF96AFC50FDB088CD31112D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0862
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (hash: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=)
2: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: mE2ucs9qoj30ZiieD+uiNhXDYidQZ0PqD0lzFqqhodY=)
3: i86Qnss2Hx--RBAsZcussull0WM.roa (hash: ZSa0NJzxbSdhBzuGRMo0rW/M52VwcaybfD76Q9/vKd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dd:63:ef:96:af:c5:0f:db:08:8c:d3:11:12:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=dc4067dd56c45edb6a4193eafb28babcc382e8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2a:2e:f9:54:2b:a5:90:d3:71:4d:a1:d4:74:
c6:6e:fb:5b:08:34:58:ba:1b:c1:7d:38:99:53:a8:
dc:e7:65:71:e3:ce:9f:0d:09:a1:56:c7:9d:ac:4f:
7f:f4:99:2d:42:a6:43:1a:59:fa:47:00:a6:2a:c3:
d7:d9:35:32:07:f6:2a:d1:8f:f3:c2:e8:6b:0c:ee:
c1:29:dc:49:cf:fd:72:fd:66:cb:c8:23:82:37:07:
4b:33:5a:14:e0:b4:7c:7d:8a:ee:59:84:66:5d:c9:
38:77:7d:72:16:24:a5:85:a8:ec:be:ac:4b:f1:ac:
c2:90:bd:0b:50:44:52:50:49:73:04:95:13:43:f6:
d2:f9:13:c6:5c:d7:ff:83:71:56:74:e1:91:66:28:
24:22:63:04:2a:97:ff:50:6a:c9:6d:34:16:28:92:
a2:77:c3:9f:79:ed:01:6a:49:53:44:7e:f6:a5:91:
e8:a1:ca:7c:2d:da:61:35:51:ae:59:60:e4:ef:1a:
77:92:0e:10:5a:f8:2e:7d:db:fc:fb:33:84:7b:43:
6d:00:84:e3:4e:59:ea:a5:8c:5b:c0:e6:bf:da:96:
ec:2f:cb:25:05:bb:c9:79:38:49:ec:d8:04:fa:db:
ce:29:d6:8c:45:d8:ff:b4:b3:47:44:3a:56:38:9c:
40:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:40:67:DD:56:C4:5E:DB:6A:41:93:EA:FB:28:BA:BC:C3:82:E8:AB
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:70:87:62:0c:e7:fe:de:3f:96:01:7e:36:b4:38:8c:07:86:
cc:d6:f2:da:e6:33:1e:c6:56:7f:1b:a0:c1:fe:d3:df:51:b8:
eb:02:ef:6b:13:a0:90:d4:5a:a9:b6:72:67:7a:3d:27:0d:19:
6b:d9:7d:00:4c:05:49:1d:13:e5:d7:17:db:ff:5b:6c:c1:42:
80:70:fe:ed:7d:8d:d5:16:5a:dc:6a:27:31:75:62:c7:58:55:
80:ab:3b:a8:a0:61:3e:9f:62:80:f0:e7:76:f6:fa:6d:37:b7:
ff:92:c9:37:90:22:59:2b:c5:89:3d:5b:6e:f4:5b:22:d9:af:
f8:0a:44:38:95:28:c6:63:21:36:57:c8:c8:86:dd:cd:8c:75:
d2:f6:9f:05:ca:04:a2:a6:ea:3b:7b:3a:04:b6:7d:7c:ef:c1:
66:3f:55:0b:a4:0a:51:bd:2a:c6:86:b0:ad:21:b2:15:0d:b0:
56:eb:85:1c:6d:f2:47:dd:3b:e3:1f:8f:74:7d:43:58:7f:df:
eb:c5:0c:c5:15:41:3a:c7:b9:aa:be:22:8b:74:a6:63:56:da:
dd:e4:04:34:d1:d6:59:05:68:e5:43:32:54:73:28:15:46:ba:
cb:17:02:5a:68:5d:55:cc:b3:75:bd:fe:c6:e4:59:56:e6:26:
f5:71:e3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:14 2025 by rpki-client