Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
File: ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json)
Hash identifier: RD0eSR8OUj77urHzRSLOuZzloNPUgZdfRXJr6BGVwcE=
Subject key identifier: A7:9B:70:C9:7E:48:48:E0:B4:F1:B8:CB:B8:D8:31:65:7B:24:0A:C6
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Certificate issuer: /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial: 0194BCE0E80E7D7D1D3973455CDBF1731DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: oVvyeKw/4TtfyK+Lvw9t7WG9umE6LJnzQXZbaid/wCI=)
2: bxyY92T1b4aJfspeGWuPWUl-Kkw.roa (hash: nKzuSfhFZMZ8pqYL4zAcXBecFHY0kOuZwNpuiZWVnMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e8:0e:7d:7d:1d:39:73:45:5c:db:f1:73:1d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=a79b70c97e4848e0b4f1b8cbb8d831657b240ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:e0:a6:ee:df:7d:c5:ab:10:d8:7d:5d:48:
19:26:97:62:65:e6:37:77:11:df:c0:e2:48:c3:2c:
bb:31:08:38:c8:c7:fd:00:75:56:fb:39:7c:9f:92:
76:fe:0a:4c:bc:92:39:15:fb:ef:e2:42:37:f9:48:
fd:88:a9:47:46:8e:a5:19:29:d4:79:95:3e:ed:60:
59:61:b6:74:2a:d4:fb:ad:a6:5d:d9:2f:01:48:62:
9e:cf:ee:58:f7:70:81:68:2d:dc:5d:61:fe:d3:04:
ce:0c:3b:b2:ec:25:05:51:5f:dc:0c:3e:1c:2d:ea:
1c:3a:b6:38:b3:eb:61:17:b4:55:2c:50:44:72:91:
6f:84:f3:3e:fd:b2:f7:61:31:81:43:e6:56:87:e6:
34:ee:c9:0e:a3:46:b8:d7:3d:67:19:c8:11:fd:e3:
4f:e1:28:92:cf:4c:22:d3:74:bb:e0:d9:bd:d6:16:
05:cf:6c:a7:03:fb:df:20:77:42:d3:04:23:f3:25:
db:1e:1f:99:d6:73:a5:81:b4:8f:da:55:26:9d:80:
26:4b:7e:30:8a:95:fa:ef:57:05:71:2d:9d:5c:ba:
e8:a4:4e:a9:19:87:9a:e1:09:60:e6:71:e6:07:04:
7e:54:f8:d4:8d:7a:84:63:68:f1:09:10:b6:44:e0:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9B:70:C9:7E:48:48:E0:B4:F1:B8:CB:B8:D8:31:65:7B:24:0A:C6
X509v3 Authority Key Identifier:
keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1d:3b:bc:cf:8b:91:05:28:8f:15:8f:a4:5b:34:26:bb:d2:
d1:d8:b5:83:fb:3e:15:79:7d:4c:56:5b:7e:09:7a:52:7c:dd:
3c:55:b9:5b:e3:c2:77:04:c4:37:36:77:d3:cf:50:ab:46:57:
61:31:a3:62:f1:a0:a4:32:d1:8f:cc:e6:03:71:41:df:59:d2:
4b:35:18:f8:e0:eb:eb:b8:1d:25:94:c2:88:de:89:f2:d3:92:
f0:fc:bb:ef:1f:5e:b2:4d:3c:f4:28:78:53:a6:cd:37:43:9a:
19:d5:05:42:da:fd:b2:db:d9:32:6d:cc:fd:a5:12:57:9a:41:
6c:29:8e:43:a1:32:08:d9:c1:6b:bd:80:f8:90:68:c1:e0:65:
04:f4:81:48:52:46:82:d6:e8:f9:22:ae:b3:05:3d:df:ba:d1:
59:50:71:ea:17:56:72:00:d6:ca:12:b1:08:01:46:1c:cf:f0:
8b:d8:e3:77:ea:23:29:42:3d:7d:6b:40:5e:e3:3e:78:b8:b7:
e5:90:21:29:58:f9:73:d3:e0:25:16:9c:a1:db:d0:37:76:49:
29:2b:69:8f:c9:f4:63:23:f5:3f:eb:ed:03:75:93:29:e9:c2:
ad:9c:82:1e:46:82:df:c3:ef:f4:a6:8a:b8:30:7a:5a:c7:b1:
1e:88:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:20:49 2025 by rpki-client