Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ae1166-d606-45b7-9a22-7bc83220fb62/1/l_aXATQzuJHWRpfZKGY75zTbpOc.mft
File: l_aXATQzuJHWRpfZKGY75zTbpOc.mft (raw, json)
Hash identifier: 4YEv6PxWyz8TW1S64Mt9mRhKTO6Taym9PB/Z4HxX3RU=
Subject key identifier: FB:F5:33:2B:01:D8:21:CF:F5:8F:E9:E7:95:A4:E8:58:3A:66:E0:37
Authority key identifier: 97:F6:97:01:34:33:B8:91:D6:46:97:D9:28:66:3B:E7:34:DB:A4:E7
Certificate issuer: /CN=97f697013433b891d64697d928663be734dba4e7
Certificate serial: 0194BD17BF58224485631C0244ABE9C6A8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_aXATQzuJHWRpfZKGY75zTbpOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ae1166-d606-45b7-9a22-7bc83220fb62/1/l_aXATQzuJHWRpfZKGY75zTbpOc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: Q01X85MGyHMF5rr2gbqyxSbVGJU.roa (hash: 3pLndBzBIS9IcjtzdUX4XacaMZCMolKRG+4KwxWHWEU=)
2: l_aXATQzuJHWRpfZKGY75zTbpOc.crl (hash: fKa5d3Qckf8D3HAeRPk7OKJ2MG6MhWc7tsHpHK+0ajg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bf:58:22:44:85:63:1c:02:44:ab:e9:c6:a8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f697013433b891d64697d928663be734dba4e7
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=fbf5332b01d821cff58fe9e795a4e8583a66e037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:a8:84:f1:7d:2b:0e:04:93:32:bf:80:9e:
c1:d0:50:07:d5:3e:02:3e:6b:ad:d9:b6:a4:4f:11:
33:5c:ef:4e:26:4e:89:71:a8:2c:9b:44:38:f1:58:
4f:4b:3d:d9:06:57:f7:5b:a9:f6:90:a9:aa:04:40:
cd:cd:98:9d:5f:17:35:4d:67:9c:71:b1:5c:44:aa:
12:68:0f:da:19:77:de:fa:ee:66:51:47:d9:95:d2:
f5:a2:6e:06:91:3c:95:01:5e:b6:be:8e:7d:2c:fb:
85:1d:1a:67:7b:41:bd:46:85:bf:9e:d6:7b:39:e9:
32:25:18:ec:c9:fd:fa:fd:a8:81:cb:51:17:1e:f6:
78:e0:e2:92:6f:a1:e6:45:c9:ab:ff:b7:43:8c:46:
66:26:5a:8a:f7:08:b5:72:c2:75:86:52:2c:85:6e:
06:c0:24:00:42:3e:46:52:d4:20:c1:81:6c:c4:d0:
74:9f:24:11:ad:b2:48:8a:f3:c9:d1:ac:72:cf:d0:
c0:9a:6a:4b:fa:71:0c:24:fe:41:16:e7:e0:36:ca:
4f:58:c7:45:ce:f6:32:65:52:05:cf:8c:7b:09:b9:
f3:cd:74:b4:5c:72:b8:3f:16:a3:78:57:d0:e5:a6:
8b:11:a0:b2:6a:10:f1:81:08:6e:7a:1b:2f:30:77:
e3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F5:33:2B:01:D8:21:CF:F5:8F:E9:E7:95:A4:E8:58:3A:66:E0:37
X509v3 Authority Key Identifier:
keyid:97:F6:97:01:34:33:B8:91:D6:46:97:D9:28:66:3B:E7:34:DB:A4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_aXATQzuJHWRpfZKGY75zTbpOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ae1166-d606-45b7-9a22-7bc83220fb62/1/l_aXATQzuJHWRpfZKGY75zTbpOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ae1166-d606-45b7-9a22-7bc83220fb62/1/l_aXATQzuJHWRpfZKGY75zTbpOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dc:05:45:13:9c:b1:a6:4c:a3:8e:d5:50:d6:c7:35:46:3f:
84:70:03:f2:cb:e2:c5:59:03:7e:90:c7:55:ad:04:89:6f:43:
98:22:e2:0b:48:32:f4:54:65:ed:b0:7b:29:7b:70:df:6a:ce:
e8:73:e7:70:ec:6d:75:82:7b:be:4e:57:3d:fa:46:43:c0:8e:
32:9a:18:19:f9:50:92:8e:f4:17:8b:c8:12:d6:57:9a:83:bf:
cc:53:ee:0f:15:19:82:8f:9b:1c:5f:9a:7e:31:50:2f:5b:5a:
89:e3:33:99:6c:2d:76:ea:80:87:1e:64:c2:3c:b1:63:62:d5:
d4:54:1b:2a:a4:59:94:43:69:95:bb:21:ed:fb:15:cf:8e:41:
fc:12:af:f7:6f:08:ec:0e:19:2c:90:23:3f:55:76:8c:e3:15:
4d:a0:1a:a0:29:ec:79:34:95:80:87:a6:b4:87:77:34:48:c0:
b6:32:3f:66:e6:1f:e0:59:57:54:7a:e9:ba:b7:45:fd:3b:bb:
81:8f:0f:9d:1f:a5:1d:47:c4:8a:a8:e0:44:24:41:bd:75:a8:
d5:14:4f:09:3b:f3:2a:b9:29:04:8a:e7:57:0e:d2:ba:f7:53:
6f:32:4c:20:36:b7:a4:c6:00:01:c5:ed:98:5f:b5:3a:86:29:
07:17:61:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:52 2025 by rpki-client